Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: Hc0+XpUZ9Lm5a8fEuu8721MvS1wgkVEXR8UGgfhJ84k=
Subject key identifier: 27:4C:29:91:4D:90:8B:ED:64:B5:D5:A3:B0:CC:0B:65:DC:B3:7D:1D
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 0193587756CDB2FD289F8E4C40DC39A6DD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 0F5F
Signing time: Sat 23 Nov 2024 10:00:36 +0000
Manifest this update: Sat 23 Nov 2024 10:00:36 +0000
Manifest next update: Sun 24 Nov 2024 10:00:36 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: OYDijoGFSIeStZh+VB+RaLsIyDMkuEjpixtv4zIhiCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:56:cd:b2:fd:28:9f:8e:4c:40:dc:39:a6:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Nov 23 10:00:36 2024 GMT
Not After : Nov 24 10:00:36 2024 GMT
Subject: CN=274c29914d908bed64b5d5a3b0cc0b65dcb37d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:4a:10:c6:b4:52:95:fe:80:df:2f:ea:97:
d8:df:11:2a:a3:9d:f8:59:70:11:29:9c:23:a0:7a:
df:91:3c:60:5f:15:95:62:5a:0e:32:74:9d:3c:08:
97:a5:fa:93:cf:5b:b1:b7:86:31:00:13:71:f6:e3:
a9:45:5f:c0:53:03:25:93:8c:1b:ef:0f:87:02:90:
a6:ed:40:2f:c1:d6:38:b8:63:55:10:ce:ce:21:17:
dd:2c:95:10:a2:c5:0a:61:ff:6c:2e:14:f3:14:0a:
df:f9:58:14:d6:ff:74:bd:7d:bc:0a:ef:8e:53:a9:
a3:24:09:86:b8:85:70:d7:b5:ed:fa:0b:a9:3f:52:
b8:5c:a8:31:61:fa:5f:eb:b2:19:00:ab:9b:f6:57:
7d:2e:15:f1:31:08:d3:f8:d8:54:69:7d:87:27:91:
c7:a9:4f:03:54:89:e2:82:c8:27:01:cf:ce:41:06:
72:63:64:c3:f1:20:56:da:06:99:06:58:78:f0:93:
be:e9:27:14:3e:a9:4c:61:20:75:ec:ab:df:e1:cd:
2f:0b:8c:ee:df:1c:f6:b3:55:a7:ce:5a:1f:24:25:
76:64:37:e0:8e:37:ab:25:fd:68:c7:57:0c:2d:7b:
b4:2a:f5:b9:65:b8:f7:b6:52:92:7d:94:82:1a:7d:
b5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:29:91:4D:90:8B:ED:64:B5:D5:A3:B0:CC:0B:65:DC:B3:7D:1D
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b2:57:2f:c9:e2:f8:ef:bc:b6:b0:00:b3:09:7f:f9:2b:da:
09:ff:89:d4:b1:2d:b5:af:b8:69:bf:73:99:44:81:61:42:fc:
cd:8a:80:e6:0f:1e:36:5b:c7:28:4c:71:40:02:5f:9a:9f:98:
4c:51:6c:05:21:9c:5e:0c:4d:77:97:39:8b:76:64:b9:72:82:
1c:a5:49:11:46:ff:03:13:e1:dd:a5:dc:c7:6b:e1:4d:a8:d2:
49:a6:d4:5f:1b:62:0f:64:fa:e2:0c:d3:a4:69:44:44:2d:7d:
e6:b1:49:c7:10:88:17:54:96:37:60:94:7f:bd:dc:00:6f:82:
66:5c:c3:6e:aa:3c:27:19:7a:3c:13:0a:bb:85:ad:fc:ca:27:
96:58:d3:ef:47:bb:db:bd:aa:1e:06:59:75:c3:65:8d:09:1f:
cb:d5:67:98:b2:8c:f4:bf:7c:de:b7:5b:41:57:3e:b2:f3:e2:
84:7f:17:2f:a4:2d:42:d4:fe:65:f3:fe:a3:2f:8d:3d:f3:11:
f8:c8:8c:5a:17:da:b6:02:39:07:c6:ef:f0:d9:13:6a:98:57:
dd:a6:1b:17:e8:0c:07:51:6c:69:47:c1:51:e2:e2:a5:c5:8d:
13:ca:1e:00:dd:3c:09:2e:97:5a:7e:b9:e7:9f:dd:bb:3a:be:
26:37:b9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:40 2024 by rpki-client on console-fra.rpki-client.org