Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: X3+6PR867YmZ1iAjWr7x74wDjBD07CIAwaVnJ7snlwE=
Subject key identifier: 95:52:45:E7:B4:36:E5:73:BE:3B:CA:06:60:BD:00:5C:98:CB:02:AA
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 01936B22A2E60303B3E84752B6257038844B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 01:00:52 +0000
Manifest this update: Wed 27 Nov 2024 01:00:52 +0000
Manifest next update: Thu 28 Nov 2024 01:00:52 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: 6YzXUKWhOdjBhsdvDBErQmSqvulpDPSQsuhgD60sCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:a2:e6:03:03:b3:e8:47:52:b6:25:70:38:84:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Nov 27 01:00:52 2024 GMT
Not After : Nov 28 01:00:52 2024 GMT
Subject: CN=955245e7b436e573be3bca0660bd005c98cb02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:89:71:39:b0:03:fb:49:33:8f:c5:5e:00:
34:01:3b:ff:83:42:16:da:4e:72:36:86:a3:11:3e:
59:9e:2d:9e:2a:db:7f:bd:b6:7f:fe:5a:4d:ee:f7:
69:18:ae:e8:f2:4b:4b:0c:4b:28:1b:b4:2c:55:6a:
58:f2:69:85:38:8c:c3:59:51:bc:3c:58:fb:db:f7:
c8:e8:c7:a3:ca:1d:ba:9f:6b:40:46:66:45:b7:81:
8c:d4:bc:38:c7:14:64:c2:b3:fe:c8:67:e7:6d:e7:
94:dc:16:68:4f:a4:f1:40:cd:e6:2b:f9:e9:9f:7c:
ae:38:67:0b:0f:6d:d9:05:e5:21:aa:06:27:78:57:
b5:34:38:96:01:bb:37:fe:fb:f9:c1:4a:a1:73:c6:
70:f3:89:15:16:4d:48:71:55:b1:eb:7c:dc:5c:6c:
92:78:c7:86:91:e6:5b:19:11:22:0c:95:46:c1:0f:
d0:3f:19:ac:40:bc:ed:0c:64:d1:79:ad:cb:83:62:
b0:5a:cf:d7:ed:94:0d:dd:9e:1b:f1:86:99:cc:e9:
26:cc:11:2d:8d:a4:55:27:64:5e:15:b2:53:18:44:
cc:e4:95:51:14:f4:4e:27:54:f8:ee:56:a1:48:af:
6d:1e:40:44:5f:9f:5d:5f:6c:a9:d6:30:64:53:52:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:45:E7:B4:36:E5:73:BE:3B:CA:06:60:BD:00:5C:98:CB:02:AA
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:05:8a:f6:eb:3b:43:40:93:57:65:05:8a:a8:41:96:22:
24:c1:11:89:c4:fa:a2:8f:b0:dc:f5:40:af:ff:9b:8d:af:6e:
18:2a:d4:f3:71:08:f2:f6:9f:83:94:1c:d0:7f:0c:90:66:a2:
7c:41:a5:df:11:0e:7b:0e:59:ae:b6:2f:21:95:91:30:46:6a:
04:f6:3b:f4:51:8d:7d:d9:54:9c:38:28:1b:68:28:57:36:e8:
bc:dd:95:18:72:2f:db:97:f7:2b:a0:13:fe:d8:b7:39:d5:7f:
3f:54:ac:b2:96:e3:e0:1e:23:94:7d:42:8f:a6:84:c5:38:bb:
ba:52:e4:3c:68:d2:c1:64:91:e5:b2:85:6a:af:f9:ca:52:72:
73:ea:6c:00:1b:9c:b1:79:38:f5:a6:01:72:e8:16:a3:a8:0a:
d5:cf:2c:2a:05:18:c8:79:85:db:08:d3:a6:3f:df:61:38:a3:
cf:ba:a5:74:9f:8e:bf:a5:9a:f2:cd:66:03:09:75:91:9a:9b:
b3:c7:de:75:fe:f3:37:8c:0c:99:cc:81:41:a4:43:55:f0:4d:
36:02:10:51:5f:4f:6f:c6:39:b4:10:35:55:21:c5:a6:05:e6:
11:da:6e:19:c0:83:92:23:0a:0f:ce:ed:08:08:d6:2f:72:e2:
b7:67:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:35 2024 by rpki-client on console-fra.rpki-client.org