Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
File: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft (raw, json)
Hash identifier: TZh/PD5YijR1vRt5+YxDndkd2DnXdEmYtQkrZkWyEHc=
Subject key identifier: 35:11:4A:7E:98:05:C3:BB:A7:69:F8:03:F3:BE:F0:5D:95:07:61:83
Authority key identifier: 91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
Certificate issuer: /CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Certificate serial: 019358405F980B7F68AC335688AF61DB54DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
Manifest number: 03
Signing time: Sat 23 Nov 2024 09:00:33 +0000
Manifest this update: Sat 23 Nov 2024 09:00:33 +0000
Manifest next update: Sun 24 Nov 2024 09:00:33 +0000
Files and hashes: 1: kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl (hash: xnWhTVI67cu2JW3yEuTjmRHL5h1OQ8Otdf1J9pPkEts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:5f:98:0b:7f:68:ac:33:56:88:af:61:db:54:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912a82b0e58a27ed87a2de55e5e1b602903656d4
Validity
Not Before: Nov 23 09:00:33 2024 GMT
Not After : Nov 24 09:00:33 2024 GMT
Subject: CN=35114a7e9805c3bba769f803f3bef05d95076183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:a6:5c:47:e2:fb:0a:09:0f:bb:25:85:77:
85:6c:86:01:49:4e:e4:fd:41:84:83:7a:d6:b1:d4:
1b:f2:7e:cd:11:bb:0a:3f:c5:b0:e2:5d:68:50:04:
f8:6f:68:b1:fe:f2:96:71:58:88:5f:c9:b5:19:47:
6c:b7:c0:36:5a:32:6a:31:c8:88:7b:fa:d3:8d:1f:
89:2b:e6:be:26:06:ed:74:d2:4e:32:de:24:87:a9:
a7:36:7c:ea:48:b1:05:ff:3a:17:ff:0a:16:96:56:
79:fb:e7:aa:e2:0a:f8:93:dc:38:5e:36:95:07:cd:
2a:c7:94:42:d3:1c:82:07:fd:98:74:37:b8:91:2f:
a9:51:de:a2:9e:0c:43:60:ba:92:29:c9:7c:f6:ac:
e2:87:e6:cd:81:d5:e2:e1:2b:fe:ed:13:53:5a:46:
27:9b:c0:f6:d5:33:a4:b5:46:8a:ee:bf:03:84:6d:
a2:75:54:a0:7e:22:4c:01:81:e7:57:85:6e:6d:06:
58:24:24:02:99:67:13:11:3a:a5:98:31:c8:d0:00:
c9:09:6b:79:1d:7d:2d:b9:67:29:9a:ee:7d:c3:fe:
fb:f2:c9:0a:c5:05:bb:a4:23:d0:9d:96:57:40:28:
98:eb:01:4d:c6:5b:7d:c4:a0:81:8c:f3:c4:cd:3b:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:11:4A:7E:98:05:C3:BB:A7:69:F8:03:F3:BE:F0:5D:95:07:61:83
X509v3 Authority Key Identifier:
keyid:91:2A:82:B0:E5:8A:27:ED:87:A2:DE:55:E5:E1:B6:02:90:36:56:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/761a87-0da1-42ae-9867-8b4f89ced28e/1/kSqCsOWKJ-2Hot5V5eG2ApA2VtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:50:9c:d7:39:d4:d2:ba:77:9d:2f:62:f9:ff:68:7d:4f:0b:
96:3f:5f:f7:f3:03:90:77:66:e8:7e:22:e7:c3:2c:73:b8:60:
f4:16:ed:af:4d:55:c9:d1:65:45:06:ef:d8:d0:1c:a0:24:fd:
5b:86:85:7c:b0:c6:f1:8e:ff:91:5e:0f:42:52:98:12:ec:88:
dc:e3:a6:39:25:e3:8d:56:9d:90:e0:fd:66:68:cf:a3:19:a2:
f9:86:c1:09:7c:97:98:d4:4f:e3:d0:d3:c2:47:b6:71:e2:03:
84:f7:dc:14:c8:7f:ab:e5:5c:d9:84:26:6b:0a:cc:46:f5:f9:
f6:26:38:68:d0:a7:af:9b:a2:f8:37:e5:49:18:e8:28:0b:83:
0d:84:91:1e:3e:0a:86:65:a8:cf:17:7d:0e:43:60:28:01:ec:
a4:f2:cd:19:d5:06:e6:10:fd:fa:95:28:b8:98:10:74:f2:a8:
79:90:43:71:29:e5:05:f3:e0:3a:cb:b6:a5:14:5b:7a:f1:ec:
51:59:18:97:cc:dd:93:e3:2a:75:07:73:cd:ab:d5:91:bc:04:
9a:e7:0c:bc:2c:90:e4:f3:f0:87:08:89:5e:88:b3:7c:70:2c:
59:15:24:af:d6:f7:4e:ae:9c:b9:ac:a9:6c:56:2d:f0:3e:3a:
1b:53:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:46 2024 by rpki-client on console-fra.rpki-client.org