Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: /z83HMJKsZ7qL9/JrzdcSSJASkADqsIMYRCqmiU8uws=
Subject key identifier: 02:16:90:55:C7:CE:7E:D9:B0:BD:D4:9E:4A:BB:24:1C:65:3D:E2:D8
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 018F86DA6AB1EDB36624857414D5D67E6C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: D9
Signing time: Fri 17 May 2024 14:00:12 +0000
Manifest this update: Fri 17 May 2024 14:00:12 +0000
Manifest next update: Sat 18 May 2024 14:00:12 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: xcZ6nyThZWDbjLDirPkkniMQpfU7EjpD19wUVh7XVkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:6a:b1:ed:b3:66:24:85:74:14:d5:d6:7e:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: May 17 14:00:12 2024 GMT
Not After : May 18 14:00:12 2024 GMT
Subject: CN=02169055c7ce7ed9b0bdd49e4abb241c653de2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:4f:fc:a3:83:53:72:b1:97:f4:91:97:8f:
ef:8e:07:2f:a8:7e:7c:5d:a9:5b:40:a3:fb:d1:22:
c3:a6:b6:92:0e:5c:76:7a:c4:de:5d:80:b9:b6:9e:
4f:30:41:ee:f2:d3:b9:f4:70:90:fd:12:ba:c2:b2:
19:66:ab:43:e0:0a:d1:4a:01:51:12:83:f5:71:6f:
d0:cc:7d:11:75:ea:6b:13:b1:55:cd:56:c9:2c:00:
20:dc:e7:e3:42:03:77:bb:06:85:ad:0c:32:fb:44:
4d:4b:ec:54:89:e9:be:4f:5e:b1:b9:ec:c4:13:ec:
16:96:02:e3:cf:42:44:34:75:2a:87:2b:75:2c:78:
12:ab:03:37:b0:e3:c6:1f:da:e1:24:56:40:dc:f7:
7c:d8:a1:ac:bf:9c:24:62:f0:23:1d:7b:17:22:67:
9e:2c:04:8f:4f:f1:31:1e:f1:30:b4:c5:18:5b:31:
a8:18:95:39:15:64:eb:5f:de:f8:0c:5a:93:2a:a5:
f5:ce:30:3d:61:74:e6:4a:8f:f1:c2:81:34:1a:e0:
b9:ae:7e:ac:15:ff:f8:3a:3e:12:a1:04:b7:48:58:
57:9c:10:6a:cd:7c:2c:3d:97:99:a5:54:28:25:55:
fc:17:13:9e:6d:0a:28:f7:28:37:44:a2:aa:39:77:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:90:55:C7:CE:7E:D9:B0:BD:D4:9E:4A:BB:24:1C:65:3D:E2:D8
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a9:fb:ee:15:80:63:07:5a:b3:9e:7b:38:c2:48:c1:f8:30:
9d:b6:da:c5:cc:58:ee:1d:00:9f:a0:77:5e:06:0e:fa:b3:8e:
0f:91:53:73:98:da:78:4d:de:4a:63:2a:8a:c1:25:e0:49:29:
b1:32:52:fb:5a:9c:e2:a2:7a:35:42:a5:8e:c0:17:67:32:5c:
0b:a5:b4:ca:1e:a5:5e:e8:0e:28:87:53:15:92:a4:b6:b6:c3:
35:2a:8a:8f:14:a4:6c:d5:b6:b6:56:11:53:92:2c:d7:f5:2e:
8f:e2:17:a8:91:4a:8c:1d:08:9d:35:a5:a2:89:89:5a:80:21:
e2:3d:f3:c1:6b:80:4c:d5:b8:f4:55:4c:e6:13:25:2c:f9:bd:
3e:f0:4b:06:08:c6:dd:37:fb:d7:cb:bc:a9:f0:66:d9:d2:bf:
cd:0a:e9:77:29:f3:0d:95:8c:e9:93:ac:63:07:c4:88:25:2a:
a0:00:02:06:35:18:66:d9:f2:d3:b9:95:d3:70:49:00:c3:ce:
81:06:66:7b:79:0f:4e:05:79:28:79:3d:87:9e:d9:9b:8b:df:
29:57:4b:07:ff:e5:1b:37:0f:63:48:27:ca:90:2a:37:f0:a7:
a2:8c:60:b9:9e:74:ae:ef:53:5d:b1:aa:49:d3:28:ae:de:fc:
2e:1c:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:06:48 2024 by rpki-client on console-fra.rpki-client.org