Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: cFbKcbDd7UkHtjL3GhDMZwcV+vse22QRdED49dfOvp8=
Subject key identifier: 10:F0:56:3D:56:AF:CD:FA:06:76:86:F5:E0:58:46:6E:52:7B:01:3C
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0193576483D2E674C150AA2BE3DFADBBB3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 05:00:25 +0000
Manifest this update: Sat 23 Nov 2024 05:00:25 +0000
Manifest next update: Sun 24 Nov 2024 05:00:25 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: XpZw1xl1vWIIQH2HH7QF9f48AUsyMF0PrzK3wR+KHGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:83:d2:e6:74:c1:50:aa:2b:e3:df:ad:bb:b3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Nov 23 05:00:25 2024 GMT
Not After : Nov 24 05:00:25 2024 GMT
Subject: CN=10f0563d56afcdfa067686f5e058466e527b013c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:d8:48:d4:f3:e2:9d:15:7a:9a:b6:ce:7c:
fe:07:2c:d8:2b:25:b7:ff:69:75:6a:30:8f:fb:88:
33:84:50:8b:42:d9:68:0d:9e:83:05:fe:a5:99:a3:
f8:2c:7d:93:cb:d4:f6:1b:58:29:91:da:ff:c0:6f:
be:48:f6:00:74:af:ac:48:b1:27:1d:be:3e:8e:f4:
a0:28:85:fd:7e:ce:38:bc:45:6d:c3:fa:96:38:58:
f7:82:c2:a0:4a:6b:f4:87:07:42:a3:7e:e7:08:d1:
57:e8:aa:7e:40:1d:b6:f4:1b:b0:41:03:1b:93:e2:
25:1f:aa:2a:93:e0:98:9b:3f:37:44:31:5c:0f:1a:
db:52:3a:e4:ac:ad:d8:db:29:d2:ac:6e:d3:0e:c8:
a0:35:66:e2:ce:70:3d:01:97:71:13:ac:41:d0:1c:
b4:d5:f2:13:5d:4c:97:9f:b0:40:97:3f:7b:57:34:
54:45:48:80:a8:48:a7:06:a4:f6:cd:0c:82:e2:d0:
75:ba:c4:b7:d2:8e:1d:55:ca:46:14:93:be:a4:76:
e4:1c:12:69:18:7e:33:d6:1f:16:0f:46:c0:b0:0d:
e8:ee:13:97:29:f6:88:30:d6:2a:60:2a:ab:e1:c6:
87:ab:30:fa:09:c3:2a:2c:88:d6:b5:d2:70:5f:85:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:56:3D:56:AF:CD:FA:06:76:86:F5:E0:58:46:6E:52:7B:01:3C
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c5:20:96:db:ee:8a:8a:79:5d:39:95:51:96:ce:e2:63:02:
0d:f8:1c:a6:15:cd:e0:39:8e:67:35:7f:b5:b0:83:28:b5:46:
50:f9:63:d7:2d:ea:9d:3a:ad:b1:ed:d0:4c:f5:2e:11:d7:bf:
8d:5e:6b:17:fe:6c:18:67:38:11:8a:f9:8b:41:95:47:61:09:
06:a2:10:e1:21:0c:76:20:68:02:26:af:71:eb:e0:dd:77:65:
0f:54:fd:51:07:a7:73:03:ed:2a:21:b7:4f:da:58:9c:08:cb:
73:d4:ec:5c:d5:87:34:dc:e3:ca:0f:ab:d5:6b:10:8e:23:3a:
49:4d:2d:e7:2d:1b:0f:4a:09:cb:05:af:03:4e:13:58:bc:4b:
01:0b:27:56:d8:e3:33:7a:f0:01:87:04:5c:71:47:7e:f7:47:
27:4f:78:48:0e:ce:dc:bb:29:af:1e:55:59:87:b8:d3:2e:cb:
3c:e3:17:70:59:bd:4d:cb:0a:0e:91:2c:26:4e:58:0b:a0:b9:
8b:41:74:ce:9a:60:2c:e7:a5:96:a0:49:fc:19:6b:21:50:9a:
78:3b:73:ba:71:2e:a3:ad:6f:e2:12:3e:9c:1c:23:a0:21:7b:
f5:1d:a8:82:7e:b4:47:6e:8c:88:11:7c:e2:76:1f:1e:fc:9c:
4e:98:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:33 2024 by rpki-client on console-ams.rpki-client.org