Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
File: 8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft (raw, json)
Hash identifier: sZjXfx6y5denYE7aT6PS12PCdCIVbRcSz53g1Gxvsis=
Subject key identifier: B8:D5:CE:00:B4:78:04:DC:33:1E:54:59:59:2D:E6:2F:56:2B:B0:5B
Authority key identifier: F0:FE:72:64:96:99:EE:33:84:D2:02:B9:1E:B8:68:4E:FC:30:2C:C8
Certificate issuer: /CN=f0fe72649699ee3384d202b91eb8684efc302cc8
Certificate serial: 018F565CD9C79C85E0E3E909E66693054359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
Manifest number: 06FA
Signing time: Wed 08 May 2024 04:01:16 +0000
Manifest this update: Wed 08 May 2024 04:01:16 +0000
Manifest next update: Thu 09 May 2024 04:01:16 +0000
Files and hashes: 1: 8P5yZJaZ7jOE0gK5HrhoTvwwLMg.crl (hash: WdxghlHnuJaT2XCzKd/DNvf8Pye+fOwnpfmYmtNZOOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:56:5c:d9:c7:9c:85:e0:e3:e9:09:e6:66:93:05:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fe72649699ee3384d202b91eb8684efc302cc8
Validity
Not Before: May 8 04:01:16 2024 GMT
Not After : May 9 04:01:16 2024 GMT
Subject: CN=b8d5ce00b47804dc331e5459592de62f562bb05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:07:e0:31:ea:24:c6:31:a8:88:23:ef:ff:
9a:fc:55:c9:07:6c:74:9d:fc:e0:a3:98:f6:d3:76:
08:0c:8f:7d:fa:60:75:b6:32:2c:6c:40:c1:6a:5b:
a7:50:fc:69:ae:f0:11:aa:8d:01:dc:27:8b:ba:04:
01:b5:fb:fc:a0:55:c6:13:d3:5b:77:2a:e3:3a:47:
0a:5c:da:36:dc:00:97:68:1c:3d:06:35:53:5d:52:
8c:00:79:4d:8e:3e:53:01:d9:39:aa:77:77:a4:c3:
a5:3d:d3:7a:53:ba:71:c1:73:60:18:6e:89:ae:ce:
55:ec:68:c3:40:3e:6f:4b:ac:25:32:f6:b0:8c:d5:
dc:c4:87:7b:97:a0:b7:62:cf:88:f2:d7:bd:6f:48:
86:b5:34:68:f4:a0:21:db:dc:e9:4b:c0:8b:5b:79:
21:6b:05:0b:5d:26:0b:7f:11:87:d2:93:7f:16:62:
78:76:c7:1b:8b:6d:8b:8e:25:19:7c:a1:54:d6:ff:
a3:e9:7d:f5:8b:1a:8c:5f:52:c0:bb:db:fd:a4:a6:
00:93:09:0c:ee:af:31:2a:66:95:38:ed:d5:c8:ef:
82:b1:1e:9f:20:67:7e:68:15:fd:12:29:03:e3:9f:
2d:cc:99:b3:f9:a7:fe:19:74:d4:83:37:9b:5a:f7:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:CE:00:B4:78:04:DC:33:1E:54:59:59:2D:E6:2F:56:2B:B0:5B
X509v3 Authority Key Identifier:
keyid:F0:FE:72:64:96:99:EE:33:84:D2:02:B9:1E:B8:68:4E:FC:30:2C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b2ae39-e5d3-4f37-b509-a17ceb7fda48/1/8P5yZJaZ7jOE0gK5HrhoTvwwLMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:1c:74:20:5a:57:67:f4:7b:c3:76:9e:33:64:27:86:e6:
4e:db:53:20:69:a9:83:e4:6d:ca:c6:28:55:a0:f2:f4:77:5a:
b3:e5:fb:de:32:be:94:0a:0f:7d:cb:eb:08:b9:38:f4:d9:83:
9c:fe:32:7e:fb:5e:24:11:c4:73:50:bc:e0:ac:02:09:09:f4:
da:6f:da:12:21:e4:c6:8e:ea:22:2e:a6:04:e3:7c:68:c7:88:
42:39:2d:0a:fc:db:de:a9:dd:42:81:cd:7c:c8:e3:b9:20:36:
f9:78:4c:48:2a:00:57:d5:3e:7e:98:1a:ae:cd:6b:71:ee:df:
09:d3:ea:e7:2a:62:07:88:42:a7:92:cf:1c:d6:02:80:d5:9b:
3f:e8:89:b1:4e:57:6f:99:19:05:bd:93:ca:e9:07:cf:e1:16:
8e:31:a4:1b:0b:39:a3:a2:4b:4d:61:89:d5:7a:d0:84:88:fa:
f5:2a:87:34:4e:a7:1a:3f:5e:67:9e:87:68:8a:a5:5f:e2:d0:
2e:01:2d:3e:29:67:23:c9:a0:d1:08:58:43:ab:fc:b9:6e:51:
6c:f5:16:60:81:c5:91:71:08:15:85:d5:07:00:31:2d:41:13:
e8:6e:df:4f:1d:28:ee:42:c6:12:a6:2a:c0:93:71:0b:ed:2c:
e4:1d:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:35:35 2024 by rpki-client on console-ams.rpki-client.org