Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
File: nR3U4Tta-cKexamAJQniFjf6CNY.mft (raw, json)
Hash identifier: yCKgAjCGqiyJjtU/TFK+9dp4OFAYFJhUwXYzsQXATP8=
Subject key identifier: A8:1C:11:7A:A5:CA:3D:51:82:CD:8A:47:0E:80:09:0F:CC:BF:8D:78
Authority key identifier: 9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
Certificate issuer: /CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Certificate serial: 0193595303E95DBC38AF2F2DE42483E86547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
Manifest number: 0343
Signing time: Sat 23 Nov 2024 14:00:32 +0000
Manifest this update: Sat 23 Nov 2024 14:00:32 +0000
Manifest next update: Sun 24 Nov 2024 14:00:32 +0000
Files and hashes: 1: nR3U4Tta-cKexamAJQniFjf6CNY.crl (hash: I9iUzqOdRiZcUIf0XbkW+2I800i7cbpZRz3epw8zNAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:03:e9:5d:bc:38:af:2f:2d:e4:24:83:e8:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Validity
Not Before: Nov 23 14:00:32 2024 GMT
Not After : Nov 24 14:00:32 2024 GMT
Subject: CN=a81c117aa5ca3d5182cd8a470e80090fccbf8d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:eb:2d:3b:6b:f8:9b:44:a7:1d:26:f7:af:
c9:03:00:41:55:e3:d1:b7:79:f6:de:45:2a:a3:e2:
8b:6c:33:1f:e3:67:cf:d5:2b:e0:ea:af:d9:1f:98:
4e:cc:fa:58:79:de:b2:d1:67:7e:bb:cb:a4:9a:66:
f5:b1:35:84:16:d7:2f:60:d9:9b:f3:82:06:97:02:
2c:fa:3d:ca:89:84:0a:ed:a7:86:3b:5e:82:fd:7a:
06:46:ce:33:3c:3e:75:ed:15:d0:86:a4:81:80:d1:
82:0b:14:b8:e0:02:38:c5:51:21:18:e9:08:76:4c:
34:fb:26:9a:30:8a:36:d1:20:dd:9d:15:69:7f:6f:
e5:cd:81:56:d2:26:2c:43:f5:da:38:ae:53:58:d2:
54:70:1a:50:6f:27:7b:85:a4:e4:eb:78:b9:80:aa:
0a:9f:d5:09:f7:10:5e:c1:dc:ff:49:dd:70:2f:cb:
7f:07:00:81:62:bb:58:e5:79:31:13:21:43:7c:5c:
cb:84:54:c4:5d:0b:5c:49:a2:95:96:4e:f9:0b:c6:
37:6c:41:cd:b4:f7:d2:ec:54:44:37:b0:2a:35:63:
17:dd:ad:ab:2e:88:02:1b:b5:28:ad:34:55:99:91:
19:11:d9:58:bc:18:c7:7f:3f:10:1e:d0:7b:79:c9:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1C:11:7A:A5:CA:3D:51:82:CD:8A:47:0E:80:09:0F:CC:BF:8D:78
X509v3 Authority Key Identifier:
keyid:9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:b9:40:17:1f:f5:1b:3b:44:70:76:34:ca:29:3b:c0:ff:
23:e4:9a:ec:69:da:a5:05:e6:ba:b0:d0:a6:2c:3b:d3:58:1c:
ec:5d:01:9f:0c:e6:ec:95:5b:d3:26:13:d1:e9:dc:b8:b4:49:
46:a5:10:0b:6c:ed:4f:64:70:0c:aa:8f:80:3b:45:be:fa:e1:
9b:fd:92:8d:37:f4:63:c6:d2:29:c2:29:34:31:fa:09:00:36:
4d:1f:a4:19:65:fe:76:97:21:5d:82:2b:97:ec:f9:91:50:bd:
05:3c:cb:2d:07:3e:6a:3e:23:d0:66:ef:9f:4f:69:69:76:01:
79:ce:3f:e7:1a:8f:be:71:5d:b1:18:db:1b:58:ac:c4:a3:2d:
a1:cb:db:b6:ba:02:62:88:1a:fe:a9:a0:34:08:7f:af:26:64:
72:e5:72:f5:9f:24:e1:da:7e:73:e1:af:91:3a:3d:45:d5:d6:
d7:da:08:43:ff:72:0c:ff:37:7a:83:14:f8:ea:60:a8:c8:59:
5e:65:65:ad:c6:2e:aa:21:56:54:43:5a:29:ef:97:03:87:08:
d9:ce:9d:01:74:b4:9e:c6:11:e0:24:00:58:7b:a4:5d:35:05:
53:1d:bc:67:84:56:ec:e0:58:26:b1:11:b0:ed:32:17:73:bb:
2d:72:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:20 2024 by rpki-client on console-ams.rpki-client.org