Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: PFpO22JgkRRyl6UaWEd+1z/UBqROPnAuO2n0PrDgjWM=
Subject key identifier: D0:E9:21:68:60:9F:F8:34:C3:82:65:BB:24:99:9F:3D:88:6F:AA:DF
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019367EC2602B7A67B89AD24CFE6BAFD4119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0BA1
Signing time: Tue 26 Nov 2024 10:02:29 +0000
Manifest this update: Tue 26 Nov 2024 10:02:29 +0000
Manifest next update: Wed 27 Nov 2024 10:02:29 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: ZfnoocInmhOidJF8c9NgMjqypW7ZNEshFnY/6i6rtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:26:02:b7:a6:7b:89:ad:24:cf:e6:ba:fd:41:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Nov 26 10:02:29 2024 GMT
Not After : Nov 27 10:02:29 2024 GMT
Subject: CN=d0e92168609ff834c38265bb24999f3d886faadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:86:03:9f:de:8a:4c:47:e6:c1:b7:77:1e:
76:76:46:54:9f:e8:4d:19:ae:8d:66:1c:41:35:da:
c6:d2:62:54:e4:25:b2:3a:72:03:de:fe:db:26:a4:
4b:49:db:ec:b2:b5:e8:3c:03:99:b1:b1:c3:b5:48:
e1:51:32:6b:0a:29:83:fc:28:ac:38:4b:25:eb:fd:
07:57:b5:70:28:5b:7c:bc:c6:91:72:da:63:c3:75:
1f:2f:a6:9b:41:47:bd:e0:c4:6b:2c:bf:6a:31:d6:
19:3f:2c:a9:59:85:82:d1:3a:09:39:88:5b:12:fd:
e3:8f:28:d3:a4:c0:a8:03:11:43:06:61:49:15:e7:
4d:8f:66:c9:bd:ef:71:16:f6:a8:63:aa:2c:41:b4:
7b:28:4a:a6:48:4b:82:de:46:f7:ab:dd:34:b1:c8:
de:93:94:e5:db:05:08:91:79:7d:67:a8:f0:6b:15:
c6:1f:38:16:9f:20:e7:5f:b1:32:49:a2:83:d0:37:
1c:bf:72:76:6e:0f:d4:03:7d:84:b8:69:94:a0:52:
ff:de:f6:ce:79:53:6d:51:13:89:eb:fa:e9:73:e1:
14:77:d4:3c:db:63:33:3e:54:91:c4:6f:e1:8f:3c:
14:e2:bc:8d:78:cf:6e:25:b8:66:24:d9:41:e4:e8:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:21:68:60:9F:F8:34:C3:82:65:BB:24:99:9F:3D:88:6F:AA:DF
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ee:5b:12:a8:61:c2:89:e0:2e:96:8d:50:d2:c2:eb:d3:d7:
61:93:a5:fb:a6:59:b7:f3:02:d9:6e:e2:cc:ea:ce:02:54:e7:
20:b9:c7:1b:26:91:cc:08:3d:3f:df:88:9b:f2:a1:b3:1a:1f:
8e:81:b6:6b:15:d7:ef:5c:3e:94:21:98:4e:78:46:cd:aa:c3:
38:19:09:e5:6d:9c:5f:5b:cf:b3:0d:6f:5a:c0:8a:d6:3e:18:
85:b0:2d:b5:f5:b4:5d:8d:93:de:96:ea:a1:2e:66:a9:d1:83:
f1:1e:3b:d6:7b:ff:ea:77:2c:2e:8f:b2:81:b5:fe:28:16:e5:
a0:33:08:dd:c5:e4:72:8d:98:15:73:7a:2a:0e:84:e9:af:bf:
c7:a8:1e:a4:0b:17:4a:5b:47:b3:71:75:41:85:44:aa:60:b1:
cd:70:54:06:18:fa:9a:d2:6f:a5:24:b0:13:5d:40:8d:8b:3b:
26:f4:09:3d:d7:ab:25:40:5a:4a:33:08:c7:65:10:30:bc:40:
c6:2b:a0:31:95:3f:02:5b:5e:14:b1:4a:a0:d1:0e:f6:1c:f2:
38:00:f7:d6:de:92:ce:71:8f:1a:00:e2:f2:77:cc:10:95:5a:
5e:3d:53:b4:18:14:a3:99:3f:0b:6e:d3:4c:5b:a0:cb:15:b1:
f3:25:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:42 2024 by rpki-client on console-ams.rpki-client.org