Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: V2wMG4u6+ZT3v5NN2DJO5FYM/c50fITuGoss7E9ZIV4=
Subject key identifier: CF:E8:00:07:A1:33:28:2F:E0:06:89:DA:6B:6C:B8:22:27:3B:39:5B
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 018F86A386C65E8F780CD631E887E9F85867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 6C
Signing time: Fri 17 May 2024 13:00:14 +0000
Manifest this update: Fri 17 May 2024 13:00:14 +0000
Manifest next update: Sat 18 May 2024 13:00:14 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: GP+/X8tk2o1BCHxRz52zMMx0oRuWkRLOGktVHQALwqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:86:c6:5e:8f:78:0c:d6:31:e8:87:e9:f8:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: May 17 13:00:14 2024 GMT
Not After : May 18 13:00:14 2024 GMT
Subject: CN=cfe80007a133282fe00689da6b6cb822273b395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:45:48:ec:bb:b1:06:d4:cd:d2:5e:09:03:
ed:47:c7:f6:9c:92:0e:72:b9:67:90:14:91:1f:e6:
d0:6d:52:76:43:40:2d:f2:1a:b3:e8:e6:57:53:f5:
8e:ca:15:42:24:50:5a:fa:bd:f3:57:a1:c0:56:db:
a2:01:8c:d9:b6:34:07:8a:1d:49:2c:db:bd:9f:29:
a7:2d:7c:20:14:b7:2a:03:1c:7c:dd:4e:a2:45:ec:
24:fc:c3:8d:a9:b4:7f:f6:6c:89:73:8c:7b:26:5d:
fd:b3:78:b9:6c:86:3f:0b:de:ac:10:7b:75:3b:25:
13:89:8e:d6:ab:88:cd:0c:91:c7:71:9a:cc:93:ff:
7a:17:7f:7d:90:34:a4:42:da:d8:48:1b:5c:d7:66:
7c:c7:2f:46:a4:c6:af:f6:c5:c3:89:93:c7:04:86:
12:40:b8:d2:f6:4d:64:2c:a5:87:a0:be:47:86:2f:
02:1b:b7:bf:7f:3c:26:24:07:34:60:19:21:d8:41:
19:4a:6c:f9:ef:e4:9e:aa:0f:3f:43:7d:25:6b:0e:
22:40:a2:ac:0c:3d:6a:8a:aa:fa:56:c3:86:8b:bb:
63:78:6e:0c:3e:bc:8e:87:bf:24:78:4e:58:af:d0:
82:f1:de:6b:4f:db:19:87:96:ad:31:54:fa:c4:f6:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:00:07:A1:33:28:2F:E0:06:89:DA:6B:6C:B8:22:27:3B:39:5B
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:c9:5b:b8:59:ff:b9:23:29:d9:2f:14:61:a5:cb:44:7c:
13:c0:e1:f2:ac:54:08:92:cd:ec:51:70:7a:01:59:60:f3:64:
03:ee:4a:1c:18:8c:d8:14:dc:f3:e1:9a:38:04:33:5c:8a:0f:
b6:da:07:a2:29:8f:ff:d9:a2:c0:3d:ce:17:58:d7:50:3d:2d:
6c:23:eb:ff:10:79:c7:42:5d:e9:da:d3:d9:c5:da:23:ae:4f:
70:65:a6:be:07:db:46:85:1d:06:73:d2:af:97:11:b2:f7:86:
57:3d:31:b6:fd:36:64:f2:ad:81:67:22:34:61:30:cb:ea:d2:
2d:3c:f3:79:85:49:65:6d:23:f4:9c:cc:7b:7f:b8:68:71:8c:
b2:ea:73:3b:99:fe:0f:3f:7e:7e:9d:90:05:0c:1e:a3:e7:8f:
00:a7:26:4d:f6:d6:3b:81:38:73:32:fc:cd:4a:9b:b6:b0:80:
bf:c3:08:d8:93:20:16:b1:c5:9c:ae:ab:f7:b8:78:a6:70:55:
8c:6a:fd:4d:4e:49:60:77:b5:18:a8:d2:12:15:16:a4:d2:a1:
39:af:3a:2f:fd:fa:c1:43:66:6a:01:ea:3f:fd:5d:66:3b:7f:
5f:e2:e5:e0:a0:28:6e:28:58:35:a1:3d:9f:71:58:d6:21:51:
98:8e:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:09 2024 by rpki-client on console-fra.rpki-client.org