Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: btEcMIP6SKG1afxtshpLJtzNSy08jHv6l5pVsICImkk=
Subject key identifier: 60:EC:E0:34:DD:AF:AB:EF:26:14:60:2B:A2:C9:B8:78:7A:9C:91:8D
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 018F313D2B637EE8488150A805066A31338F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0A19
Signing time: Tue 30 Apr 2024 23:00:43 +0000
Manifest this update: Tue 30 Apr 2024 23:00:43 +0000
Manifest next update: Wed 01 May 2024 23:00:43 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: MEDjAxB9h3ueHTEw5gUbZhiAwbBH0JpAdCARSJ1cjiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:3d:2b:63:7e:e8:48:81:50:a8:05:06:6a:31:33:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Apr 30 23:00:43 2024 GMT
Not After : May 1 23:00:43 2024 GMT
Subject: CN=60ece034ddafabef2614602ba2c9b8787a9c918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:e4:14:6e:54:f6:17:9a:2f:35:24:5e:91:
d9:71:a5:01:fc:5e:66:89:6b:31:09:9e:e2:20:df:
04:02:d0:b9:ee:1b:6f:a8:cb:1d:e8:53:8b:3b:ac:
61:05:3c:ac:2d:c3:d1:70:62:74:78:04:ec:a7:92:
d1:a6:7e:32:47:36:b0:fa:e5:80:13:c0:b6:79:23:
fe:86:1c:eb:02:b9:d2:23:73:eb:3c:46:3b:b8:ec:
c2:ce:37:60:b8:73:ca:d5:07:51:f5:d3:c9:5c:61:
8f:1c:f3:15:eb:a1:00:23:1f:24:df:12:38:a9:bb:
6d:70:9b:77:9b:c2:43:cc:3f:81:8d:74:c7:ed:84:
c3:af:dd:bd:a2:12:35:cf:94:b6:39:05:aa:99:f4:
41:c1:a0:80:7e:b3:44:ad:42:ac:d0:2f:33:49:21:
d4:52:96:19:f0:5a:c6:17:ef:1a:02:e4:52:d7:7d:
a5:1b:73:cd:b9:b9:96:53:7f:79:91:03:cb:d9:f9:
a9:df:0d:bf:cf:c6:b6:ad:85:da:06:9d:f3:d8:13:
58:c6:cb:94:2d:d0:a9:c0:ed:0a:d1:ca:bd:5f:5b:
9b:50:ca:da:56:2d:89:ce:6a:52:ef:a9:7c:cf:fb:
95:3e:a6:8f:34:b4:7c:be:b7:1d:45:49:c4:39:c5:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:E0:34:DD:AF:AB:EF:26:14:60:2B:A2:C9:B8:78:7A:9C:91:8D
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7b:2c:9a:6d:82:97:c5:3b:47:4f:50:34:2e:74:25:be:38:
a8:b7:30:34:81:40:8b:9b:4e:5e:42:14:00:3f:25:34:30:07:
2e:91:b8:c7:ae:22:77:fa:b1:dc:08:61:52:4f:ea:16:0a:46:
e3:6a:8f:54:e5:86:b9:52:8a:12:fd:3f:34:f2:8b:0b:5d:ad:
f4:6b:19:4c:df:40:96:0a:98:68:f8:bf:5b:2e:8f:aa:94:67:
5e:68:14:9a:2c:1e:04:4b:19:a0:ee:87:a2:d4:1e:b9:9a:82:
a6:c5:bd:9a:38:10:c9:2b:ce:1a:c3:a0:e4:32:8c:d7:2c:05:
39:4d:e3:30:9a:1d:27:aa:27:48:e2:8f:9c:04:ba:85:01:d1:
cc:fd:ce:c8:86:78:d9:e8:1d:5c:0a:4f:42:aa:f3:1c:a9:fe:
ff:90:e6:25:db:59:dc:4d:ff:e1:55:ea:a6:75:81:11:80:55:
e9:04:0f:0f:92:d6:c5:e4:f7:d0:35:06:b1:a7:89:57:61:7a:
93:36:9d:23:da:ba:04:e2:56:38:b6:78:69:2a:ca:1f:f2:af:
79:4d:b8:25:81:10:b7:a2:e2:fa:08:42:f5:88:dd:ef:7a:6c:
20:64:c8:4a:ab:e8:f8:f0:72:68:14:83:97:ed:34:54:65:30:
10:37:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:33:21 2024 by rpki-client on console-fra.rpki-client.org