Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: x3TlMg3YcpDxlhH+BL5G28zzEVRaE5f5iVKvJJFXyUc=
Subject key identifier: 31:4F:B8:72:7F:85:9C:38:A8:54:A0:B0:EA:76:2B:26:49:CD:8D:87
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 018F8749DCA7F616642440461C55827AFE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 0CCC
Signing time: Fri 17 May 2024 16:01:55 +0000
Manifest this update: Fri 17 May 2024 16:01:55 +0000
Manifest next update: Sat 18 May 2024 16:01:55 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: aoZXxkjFtBrLrTrPP//C0eyHydjSOQMMOweUyt8QWDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:dc:a7:f6:16:64:24:40:46:1c:55:82:7a:fe:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: May 17 16:01:55 2024 GMT
Not After : May 18 16:01:55 2024 GMT
Subject: CN=314fb8727f859c38a854a0b0ea762b2649cd8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:6a:2f:03:46:17:67:bc:13:ef:59:76:b2:
ee:90:55:67:61:ce:08:dd:bb:3a:8e:0a:ee:fe:7d:
32:0c:4f:3e:5b:1d:5f:5a:cc:83:62:8e:70:fd:da:
0d:9b:c0:e8:bb:d9:c9:71:1f:01:6f:b0:48:f2:81:
1f:91:00:2d:95:f5:6f:65:fc:e9:ff:00:b6:65:7b:
4d:55:90:8d:0b:b9:68:89:bb:34:a2:ff:0d:66:a3:
14:45:50:df:f0:f7:56:ad:79:1b:4e:d7:23:b5:aa:
bc:cc:61:6f:03:3a:90:8c:0b:f1:a8:dd:15:9b:60:
8c:62:bf:0c:02:3a:2b:2b:1c:59:45:d3:97:45:f3:
4c:9e:e4:47:43:01:9a:71:d2:99:48:b0:69:66:08:
19:a7:2a:2c:74:72:41:49:80:6c:78:b7:a3:df:60:
ba:4f:c6:2e:fc:f0:2b:c0:4f:29:71:ad:b8:f2:12:
ce:f9:20:f4:30:29:6e:6e:6f:c7:13:27:22:dc:96:
48:09:84:a1:f4:2e:7f:1a:4d:30:1d:6f:ee:9e:3b:
66:0b:54:31:12:cf:9c:ac:55:21:9d:c4:2b:76:ac:
a0:6c:01:b8:4d:54:ac:cb:5b:71:82:8d:eb:92:12:
b2:ef:b4:f0:13:2a:aa:9e:d8:5b:dc:ca:7b:73:f6:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:B8:72:7F:85:9C:38:A8:54:A0:B0:EA:76:2B:26:49:CD:8D:87
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:bf:36:cf:c6:8d:03:59:7b:aa:e2:ec:8b:4a:53:3c:f3:
93:67:ab:1a:b4:e8:e4:2c:07:0a:9e:48:a5:f3:46:e6:7b:64:
1a:c9:93:f6:9c:dd:b9:26:e5:86:63:92:98:85:38:e9:98:fe:
28:64:1d:e4:44:ce:75:db:10:da:60:d8:1f:62:52:d7:c7:3b:
eb:bf:56:8a:9e:42:83:09:f4:b0:9e:2f:c2:8c:71:c4:57:5b:
bf:9b:e9:35:f2:c8:ef:62:2b:db:0c:dd:3d:ab:38:9e:3d:ce:
d4:61:68:40:bf:41:4d:42:09:10:69:15:48:b1:66:70:f5:38:
a9:51:11:57:bc:bf:d2:77:79:50:77:b2:9c:4f:99:41:f2:88:
6d:f7:8a:2f:c3:0f:27:64:b2:65:a5:e3:08:d3:07:47:90:91:
eb:7c:c9:2d:16:f3:60:a7:a3:db:f4:21:0b:58:25:a4:af:5d:
1b:5b:8c:3c:9b:f4:c1:6f:1f:52:50:28:9d:f4:5d:6c:f3:c9:
63:a9:c5:46:51:cf:cf:eb:c2:ef:e5:04:94:b0:5c:aa:20:5b:
9e:aa:2f:87:0f:a2:9d:3b:af:ca:79:1f:c4:b8:33:7d:0c:67:
98:f7:93:19:be:59:d8:d7:93:56:83:aa:49:b6:dc:b0:20:e9:
4a:1c:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:18 2024 by rpki-client on console-fra.rpki-client.org