Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: 1WezvMRPuo2QVJPu1Y0Jd11zZykc8inOymv+PgUKdf8=
Subject key identifier: 2D:43:42:AC:F3:5F:C1:26:34:9E:D5:EC:99:31:54:56:BB:F7:E3:C8
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 018F87ED80FBF49B35069E0C841A2FEAEE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 5F
Signing time: Fri 17 May 2024 19:00:40 +0000
Manifest this update: Fri 17 May 2024 19:00:40 +0000
Manifest next update: Sat 18 May 2024 19:00:40 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: sRxCwWO+IzV4IoeZSBJksTReQTypYAOtFDAUzBTTdzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:80:fb:f4:9b:35:06:9e:0c:84:1a:2f:ea:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: May 17 19:00:40 2024 GMT
Not After : May 18 19:00:40 2024 GMT
Subject: CN=2d4342acf35fc126349ed5ec99315456bbf7e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:e5:00:92:b3:39:66:be:fa:da:0a:43:c9:
6e:8a:15:b0:37:56:b0:28:d0:66:f4:fc:bc:f2:46:
e1:cc:97:53:3e:d5:80:c5:a4:bb:68:bc:e7:07:ba:
17:45:90:6d:5b:a5:18:b9:72:46:95:98:47:24:24:
73:d7:d7:9d:de:de:75:ac:5b:27:69:57:ab:45:ac:
d5:d2:8a:ed:69:a9:c2:dd:df:38:d6:c2:c3:c3:fe:
6c:f3:2f:9c:58:71:e6:44:be:2f:9d:09:23:9f:7d:
00:7a:60:aa:7a:d8:a7:6c:5e:bc:23:2b:14:6c:a0:
9c:57:72:ad:49:c9:7d:94:99:a7:33:4e:7e:ff:fb:
f3:72:ef:61:82:d5:e4:ac:b8:d3:6c:08:27:94:1e:
4e:18:a4:54:98:35:c3:76:97:3f:aa:b2:07:d7:57:
c1:dc:a5:5e:a7:92:02:35:7c:47:8e:a2:63:20:dc:
cc:e5:7f:4f:21:a5:21:31:19:d8:be:26:b5:1d:d1:
ae:aa:50:7f:3e:be:b8:08:ed:bb:d9:d2:cd:40:a3:
6b:5e:80:b6:58:e2:4e:7a:09:a7:ca:8e:3d:26:de:
00:68:70:ed:26:2c:e2:60:74:a5:da:ce:f9:ff:ee:
7d:ba:7c:1c:4e:f9:19:98:55:79:cc:e5:5e:a9:f7:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:43:42:AC:F3:5F:C1:26:34:9E:D5:EC:99:31:54:56:BB:F7:E3:C8
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4c:5e:b9:e4:8f:b4:e8:c1:c2:b3:73:64:6c:12:2e:32:ac:
4b:ee:82:f6:b6:e4:6d:84:e9:89:5d:92:d5:8d:76:4c:7f:a6:
35:33:f7:12:bf:83:45:13:97:64:42:7e:09:ef:af:a1:12:d8:
46:04:35:da:69:a7:0c:a5:50:80:8c:a3:5d:b3:d8:9f:68:d3:
16:6f:11:4d:d9:41:43:b1:17:f4:ce:fd:da:9c:1f:4f:2a:dd:
69:aa:bb:97:36:1f:33:e6:04:7c:68:18:b9:70:58:28:18:17:
6f:19:ee:31:e6:38:af:21:28:33:3a:6d:6a:56:3f:1e:26:18:
59:bd:77:59:5a:c6:b5:7c:5e:6c:45:98:fd:8f:a1:91:2d:9e:
c4:a6:79:0d:d4:20:4a:fa:fe:01:03:04:9a:79:f3:8a:23:a6:
10:24:40:97:4e:57:64:02:b4:97:d9:90:7b:cb:70:28:61:77:
bb:6f:47:2f:ad:9a:49:8b:45:57:a6:09:ab:86:eb:23:5e:6b:
99:a4:2e:b8:f2:c3:8f:d2:05:05:99:34:ed:7a:eb:29:70:e4:
2b:fa:6a:3c:c1:0c:1c:c1:5c:2e:4d:c0:04:1b:70:7e:bf:31:
bc:91:87:24:05:29:27:95:eb:5f:46:15:e7:dc:9b:93:bd:5c:
e1:29:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:47 2024 by rpki-client on console-ams.rpki-client.org