Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: G430qNFr/pdYYXjnXVBdPscadyJeqimbrCt2fT8Etm4=
Subject key identifier: CD:13:80:A0:F6:58:26:DE:A1:76:F7:2D:30:FC:9E:FC:C3:F3:B3:74
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 018F95A8D580F6EF1D9DC7B0922816552CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 0D9A
Signing time: Mon 20 May 2024 11:00:20 +0000
Manifest this update: Mon 20 May 2024 11:00:20 +0000
Manifest next update: Tue 21 May 2024 11:00:20 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: qE61qosPuPE0u2mJOpguFLGjrSX0Pk1HNwG4nvXWUAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:a8:d5:80:f6:ef:1d:9d:c7:b0:92:28:16:55:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: May 20 11:00:20 2024 GMT
Not After : May 21 11:00:20 2024 GMT
Subject: CN=cd1380a0f65826dea176f72d30fc9efcc3f3b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:f9:4a:08:fa:4a:13:51:14:35:e7:9a:14:
9c:07:89:d8:bd:ba:4f:95:38:c2:a3:81:6d:a5:30:
2c:94:e2:d0:8f:32:00:a0:c6:ea:fa:88:cd:63:9b:
9e:f0:fb:74:a9:44:9b:0f:5b:06:bc:f6:cc:36:9e:
6c:00:65:14:ea:86:cc:d7:11:96:55:0a:89:f7:5b:
fd:da:1d:a7:4e:f6:6e:ed:90:e5:98:1f:67:cc:33:
26:33:74:6f:42:bf:00:bf:a8:d2:dd:0e:f2:de:e5:
99:85:87:41:f3:e1:86:c8:d3:dc:1a:c4:a5:f1:51:
d9:ec:f1:ab:61:a0:79:35:e6:1e:8c:d1:7c:16:f4:
70:dd:cb:33:22:80:c0:f1:d3:f3:47:a1:6e:f8:d1:
2a:e6:0e:ab:33:a1:00:d7:92:4a:8f:58:2e:f1:cd:
56:04:c8:35:cc:3e:20:db:55:ba:70:c3:f1:91:dc:
23:96:cb:6b:4e:8f:6d:ea:a4:b4:f9:d3:df:8c:42:
27:2f:c6:f9:60:a8:54:cb:88:df:c9:0f:c3:93:4b:
58:34:92:5f:f6:75:04:96:cd:68:9e:eb:a9:62:07:
72:30:2f:72:c0:09:3c:6a:c8:18:dd:7e:35:df:74:
a4:85:db:15:91:3f:69:bf:06:e5:c0:b3:34:9f:d3:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:80:A0:F6:58:26:DE:A1:76:F7:2D:30:FC:9E:FC:C3:F3:B3:74
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:73:91:7c:92:65:45:d5:e1:73:88:6b:d5:9d:d0:ec:c0:
8b:c0:d1:a8:a3:0d:b2:b8:1a:a7:bd:ec:16:80:b5:6b:99:0a:
a5:da:8d:e0:19:52:f0:9b:82:76:b3:b8:6d:9e:17:8d:e8:c6:
e9:88:4c:7a:06:38:64:1e:87:83:77:ee:61:85:61:86:26:19:
88:d1:76:08:f7:c8:5a:b0:2a:eb:75:c4:bc:19:c5:f7:2d:45:
84:90:d7:dd:f2:e8:28:c0:f2:44:3a:71:02:a0:64:8a:cd:b1:
ff:40:53:50:4e:28:9f:22:e0:b6:6a:2f:84:6a:eb:18:6b:ba:
b5:58:c2:1d:14:9f:ae:18:e9:f3:57:40:d0:e4:20:17:34:15:
cb:c2:7b:45:e8:a4:3c:1c:ae:d5:bc:91:ae:b3:24:2e:17:dc:
eb:1f:a7:cc:ad:64:65:b4:12:2c:bd:fb:b5:75:48:98:3c:d3:
de:fc:a4:15:27:ff:5b:ef:8a:b5:17:4e:f9:45:ab:12:28:4b:
bb:de:f6:48:81:5b:19:8f:10:54:86:b5:c8:a1:59:32:2f:c1:
4c:f1:1e:7f:16:40:68:55:c5:2e:66:17:23:b7:39:61:89:72:
ab:b3:1f:0b:2e:94:93:6b:53:05:66:6d:d8:11:d0:67:1b:5e:
cf:ae:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:21:08 2024 by rpki-client on console-ams.rpki-client.org