Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: AsZa0W0H2rkCXG0ez1pIZvgM0o50HkEGfWerQ4kslCU=
Subject key identifier: AA:F9:F0:D2:00:29:EA:CC:43:83:C8:1F:62:E9:DD:68:BB:F0:A7:58
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 01923A02677FC7F776ACD775E0DA3D362DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 12D9
Signing time: Sat 28 Sep 2024 19:01:28 +0000
Manifest this update: Sat 28 Sep 2024 19:01:28 +0000
Manifest next update: Sun 29 Sep 2024 19:01:28 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: 4LbD2cnxFOl9/7v8DVovzd8E5JSb2QfwepTcLhCh/y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:02:67:7f:c7:f7:76:ac:d7:75:e0:da:3d:36:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Sep 28 19:01:28 2024 GMT
Not After : Sep 29 19:01:28 2024 GMT
Subject: CN=aaf9f0d20029eacc4383c81f62e9dd68bbf0a758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:09:f1:72:5c:58:02:cf:52:20:79:eb:ac:
d8:98:d5:83:ee:19:f2:0f:be:77:00:e8:dc:f6:24:
30:35:be:17:16:47:02:c6:df:10:3f:f4:a4:24:5f:
b7:88:07:16:c6:11:20:9b:41:e9:90:bf:9d:22:94:
d6:1a:ee:b0:f4:db:36:b0:d2:80:34:a5:4a:a1:b0:
f4:a9:46:a7:27:4f:a3:86:bb:3e:79:5b:12:4f:1c:
d3:77:a6:17:29:39:07:d0:99:ea:c0:7d:4c:94:04:
b3:03:4d:fe:6c:db:73:fa:e6:6b:81:9e:bc:f3:2e:
ce:88:58:b8:f9:df:1a:ff:5a:d9:d2:65:29:91:8f:
0d:75:7b:c4:8d:b3:45:f4:63:d1:c6:55:52:7f:0c:
ac:51:59:ec:6f:b5:1d:c8:5b:73:02:17:08:c7:35:
63:32:2f:b7:26:86:b9:dc:0f:f4:39:ca:26:a1:ad:
e8:a3:02:05:d6:b4:aa:b4:cc:55:4c:66:9a:f5:02:
f1:75:94:ef:40:d9:41:c8:52:bf:f7:f2:8d:66:3a:
2f:91:04:07:4b:04:7c:8b:62:4a:4f:c0:ec:5e:ab:
5b:cf:15:16:21:17:41:05:e2:a3:9a:e4:2e:75:ac:
79:61:f4:c2:15:08:5e:99:00:dc:cb:bf:f8:5b:47:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:F0:D2:00:29:EA:CC:43:83:C8:1F:62:E9:DD:68:BB:F0:A7:58
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b1:63:2e:f6:fd:5e:1e:09:d2:0d:b4:69:bf:ed:8f:5b:95:
b3:80:7c:b3:0d:08:d0:38:83:9f:54:d3:15:83:e1:e7:68:7c:
27:1c:31:f3:86:f8:15:dd:c8:38:d9:83:f2:5b:e4:40:4d:38:
79:92:48:04:dc:cc:34:8a:05:56:7e:b0:e2:d8:ab:69:0c:cd:
92:08:57:b5:23:9b:a8:ec:96:fb:f0:4f:6c:97:10:34:90:b8:
f2:e0:32:36:50:a2:b8:3b:d0:19:51:17:6f:b5:0a:54:2a:d9:
33:0f:95:24:8d:a0:d8:86:98:b8:a6:b6:9d:6d:4e:7e:70:5e:
43:e6:fd:60:da:d9:24:0f:87:03:e6:b2:b7:80:65:cd:1a:76:
e4:27:e0:f7:13:d0:aa:78:24:8b:d4:b3:07:98:68:c1:42:74:
e3:15:de:a3:92:41:ac:b0:e5:a9:d3:3a:b1:c1:08:3c:2d:c0:
d6:92:75:16:64:83:2d:72:0d:0b:92:04:5a:bd:27:4d:43:eb:
42:48:f5:88:4a:4e:0c:61:28:50:06:a8:fd:e6:10:5b:61:f9:
41:bf:8e:9c:f5:2a:0d:7f:05:db:e7:b6:17:a4:8e:d3:09:c1:
f8:83:67:47:a2:93:02:37:f5:93:40:15:7c:b2:4c:9a:e6:b5:
47:3d:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:28 2024 by rpki-client on console-fra.rpki-client.org