Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: 9O4IoxNg3aShlxqx+LKZH7CYI8UY1KMY0qOrfUw+ElI=
Subject key identifier: BE:AF:C5:F2:88:33:7A:99:25:3C:B0:4A:49:93:38:51:18:48:18:59
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 01935689B824861761111C1166C575FB4426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 0D69
Signing time: Sat 23 Nov 2024 01:01:26 +0000
Manifest this update: Sat 23 Nov 2024 01:01:26 +0000
Manifest next update: Sun 24 Nov 2024 01:01:26 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: iRRZ4dqVzsWu9Hj2oPtLOblANkLwlv21+DThxfMdUdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:b8:24:86:17:61:11:1c:11:66:c5:75:fb:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Nov 23 01:01:26 2024 GMT
Not After : Nov 24 01:01:26 2024 GMT
Subject: CN=beafc5f288337a99253cb04a4993385118481859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:75:c1:6f:a2:cb:81:65:3f:52:7f:c2:e0:
51:ec:63:e9:2a:fe:68:e6:07:c1:58:77:b8:86:26:
57:90:dc:3c:f3:77:c0:47:ef:04:1d:4b:13:01:9d:
e1:8d:c7:08:49:7e:00:7a:c2:70:1e:fb:ca:e9:d8:
c7:c4:8c:15:f3:cb:25:b0:c7:c8:04:f0:5e:05:5a:
05:37:8b:fa:4f:7b:41:1d:da:91:cf:69:30:9b:e1:
ef:08:be:c0:df:0d:cc:6e:b2:45:93:d4:36:37:51:
64:ae:05:a9:10:0c:d1:bf:57:33:3f:e7:89:c4:0d:
5b:09:60:9a:38:b8:51:f3:5d:13:4b:0c:2b:21:ee:
d0:13:87:d7:ce:80:e9:6d:0b:2c:9e:32:e5:2e:c8:
25:80:8e:e6:29:ba:89:0f:88:f6:99:0f:ee:93:cd:
9c:b6:ea:93:8f:46:ab:f3:8a:44:b1:a9:99:87:1f:
ad:24:33:7d:9a:b5:c8:76:80:31:92:3d:b2:fb:07:
6b:54:b6:36:f4:5b:b2:96:97:3f:f9:78:2e:c6:82:
79:84:8c:0e:0e:d3:4e:8b:f5:7f:15:81:e3:ff:68:
6b:88:d3:53:d6:e3:76:78:db:7f:0f:61:72:62:43:
bb:f7:43:85:44:68:6a:ea:e3:03:99:cf:f0:f0:91:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:C5:F2:88:33:7A:99:25:3C:B0:4A:49:93:38:51:18:48:18:59
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e4:87:7b:cf:df:28:d8:2e:9c:d1:6e:00:5f:2a:c2:07:63:
8d:3d:d3:7b:ee:9d:72:8b:fd:0a:7d:e5:06:b9:0a:c9:e1:ad:
2c:7a:7a:e1:2c:cc:15:f7:d5:44:73:2a:4f:6f:b2:65:55:87:
4a:da:d9:e2:ce:7c:3c:c2:45:e0:0d:fe:24:1e:bd:7b:ca:49:
14:f1:1d:7d:72:6a:c7:6e:30:7d:60:5d:25:9c:45:c5:d5:df:
ff:c7:49:63:a5:c4:25:ab:bc:fa:f0:cd:1f:ff:f9:49:96:b7:
a6:10:58:49:9b:3d:20:e0:e1:88:f4:66:3a:a7:44:46:5d:d1:
74:ac:e8:ed:ae:fe:ad:25:e2:63:76:97:a4:b6:13:06:d1:b3:
1c:78:09:20:44:ef:b1:11:6d:5f:b0:d9:41:ba:9f:a5:dc:c1:
a9:2f:0c:c6:80:ba:c1:fe:2e:15:7d:74:94:a4:27:5f:f0:50:
b2:ce:2c:a2:32:f5:08:1b:7b:ab:8a:a7:31:16:0f:d7:d9:a1:
0b:1c:64:ef:b0:22:a2:dc:c1:70:ac:07:8b:1a:64:12:1b:3c:
2f:37:fb:85:96:9b:ad:d4:10:d4:78:d6:af:56:74:58:d5:e8:
50:5c:7a:a3:93:b3:d9:5b:0a:d5:07:50:3d:1e:49:46:ec:e0:
f3:c7:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:39 2024 by rpki-client on console-ams.rpki-client.org