Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
File: h3YEKrfwcZWY6znlPvkuCsz6T6M.mft (raw, json)
Hash identifier: /XphFVpSttC/awTPj2Ptqmaa9A/xl2WwEoMmkgeDwFI=
Subject key identifier: 39:DE:34:40:67:D0:AC:9B:7A:35:51:FE:0F:15:58:DB:7A:71:45:1C
Authority key identifier: 87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
Certificate issuer: /CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Certificate serial: 019369DA1DE29020B032FC6FBAD816FF05E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
Manifest number: 077C
Signing time: Tue 26 Nov 2024 19:02:02 +0000
Manifest this update: Tue 26 Nov 2024 19:02:02 +0000
Manifest next update: Wed 27 Nov 2024 19:02:02 +0000
Files and hashes: 1: h3YEKrfwcZWY6znlPvkuCsz6T6M.crl (hash: x/JLLf4TooBZZi+aKYCZjPVnck8+81HHGL39qNc6jf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:1d:e2:90:20:b0:32:fc:6f:ba:d8:16:ff:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8776042ab7f0719598eb39e53ef92e0accfa4fa3
Validity
Not Before: Nov 26 19:02:02 2024 GMT
Not After : Nov 27 19:02:02 2024 GMT
Subject: CN=39de344067d0ac9b7a3551fe0f1558db7a71451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:78:ed:4d:b6:ec:68:1c:d0:fd:2b:99:dc:
5b:ed:72:e8:da:16:e2:73:d0:bd:c5:c8:d2:7f:67:
4d:26:15:7b:70:f2:73:96:d1:c4:64:13:3d:7e:bd:
e1:88:11:54:44:df:3f:6e:40:eb:fb:ac:f6:d9:fd:
15:6b:83:3e:99:d5:84:71:fd:3c:df:3f:9d:02:09:
7d:d2:13:46:d6:92:06:4c:01:35:fe:d5:72:ce:c6:
5d:63:c6:01:0b:00:10:e1:28:6f:f7:8a:06:41:5f:
97:30:37:5f:cc:16:43:02:d7:22:0c:48:2c:38:dd:
b0:db:7f:1a:85:e8:68:01:ee:4a:68:4b:14:c4:06:
1b:f2:68:4b:21:12:f2:16:45:88:80:5c:4d:a1:fa:
96:e9:cb:79:09:87:94:2d:b9:97:8f:c3:32:38:63:
bb:77:9a:ff:45:e6:20:1f:cc:23:79:17:73:9a:0d:
12:f9:e7:23:74:84:a7:25:29:04:21:f5:56:15:78:
f0:21:da:ce:53:6f:16:3d:f8:50:f5:5e:e5:10:ed:
c9:6d:9a:81:81:04:7e:37:08:a5:a6:40:f5:7b:ed:
73:ec:75:98:6e:e3:3b:23:8c:ba:66:61:2d:14:60:
09:10:02:e5:f6:92:17:1e:ab:6f:10:6a:b0:20:b7:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:34:40:67:D0:AC:9B:7A:35:51:FE:0F:15:58:DB:7A:71:45:1C
X509v3 Authority Key Identifier:
keyid:87:76:04:2A:B7:F0:71:95:98:EB:39:E5:3E:F9:2E:0A:CC:FA:4F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3YEKrfwcZWY6znlPvkuCsz6T6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/9bdb8c-d307-41f6-ac81-e3ccf3ea3c4a/1/h3YEKrfwcZWY6znlPvkuCsz6T6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ea:50:6c:73:c0:a8:ac:54:1a:03:99:ba:9c:93:0b:80:08:
2f:b0:54:07:b1:80:cf:dc:d1:d2:f5:9b:08:ca:19:43:a7:ca:
cc:78:62:27:94:d8:59:65:7c:51:11:83:7a:e5:4e:09:63:21:
5d:5f:d8:da:85:f1:d2:c4:66:11:88:09:8c:b2:6a:c9:06:f1:
af:05:53:cc:00:9d:f0:2d:ba:45:e5:96:16:c8:05:83:09:34:
c8:8f:3a:f3:53:86:47:1a:e7:43:df:f2:81:69:de:24:10:60:
99:76:31:40:f4:4f:a2:b1:7c:70:cd:3a:e4:23:d6:a7:9d:06:
b7:6e:71:7e:fd:3a:41:71:30:72:c9:ad:50:46:0f:84:de:04:
e0:25:a2:ad:20:ac:c2:ac:eb:b5:fc:7c:e9:25:30:d0:c6:c7:
d2:2d:6e:4f:cc:5e:87:03:2f:b2:06:1c:90:17:57:59:64:87:
40:4d:10:65:28:fd:2b:4f:41:ff:11:b2:47:9f:83:18:8d:c6:
7e:aa:26:a1:11:49:16:00:58:5e:13:06:f0:7e:ce:14:4a:f5:
c9:eb:65:8b:93:e9:09:2e:26:87:41:0b:e4:f4:28:01:76:fd:
04:b1:56:37:c4:b3:5a:91:0a:a3:a7:ff:19:ae:c4:84:f7:f0:
74:69:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:34 2024 by rpki-client on console-fra.rpki-client.org