Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: 623r9lZwixhWfctLb3grnGh1C4XBivlmOIiNnDe75jA=
Subject key identifier: 9E:04:52:D5:F5:93:D2:15:34:57:A9:CA:25:AA:E0:3A:40:77:F1:D3
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019364E966E1568B5F6EE08C6069D92B9552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 1346
Signing time: Mon 25 Nov 2024 20:00:37 +0000
Manifest this update: Mon 25 Nov 2024 20:00:37 +0000
Manifest next update: Tue 26 Nov 2024 20:00:37 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: asS2JCDJkTwIvJAL53D/fpTr7Z11r+mXO94Bb+MM9EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:66:e1:56:8b:5f:6e:e0:8c:60:69:d9:2b:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Nov 25 20:00:37 2024 GMT
Not After : Nov 26 20:00:37 2024 GMT
Subject: CN=9e0452d5f593d2153457a9ca25aae03a4077f1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:f9:28:cc:03:02:98:23:30:57:94:58:89:
d2:be:37:50:23:9a:fc:ce:1f:5c:56:eb:5e:83:a4:
42:6c:52:ce:9b:fd:45:c7:c3:20:6d:a0:0e:44:25:
ef:47:8b:c1:90:66:50:57:0b:1e:23:9c:78:07:c4:
bb:07:f0:e4:0b:be:8c:ed:50:7a:3e:7e:d9:43:07:
42:15:5e:00:95:ff:b8:42:fc:60:51:97:7c:06:0a:
aa:b0:8e:1f:e0:cd:be:a8:8e:16:76:f1:85:f6:b3:
c5:f4:bd:4c:b0:b6:03:51:ea:37:83:f1:e8:a6:75:
58:6e:47:93:87:6e:36:04:65:5e:1f:60:f3:a2:d8:
b9:9e:00:8f:26:85:d0:c2:68:cc:79:d4:c6:0b:19:
53:dc:57:ac:2f:9c:d7:0f:8f:b4:1a:1f:ff:85:c2:
db:c8:cf:e1:6a:8c:81:64:82:86:2c:03:ad:c8:47:
c9:e3:c7:e7:05:a6:35:1d:8a:b3:77:4e:cc:52:b8:
65:2c:b9:23:4d:aa:96:d7:17:08:fd:91:5a:70:35:
82:c9:ba:e8:ef:09:fd:a5:74:51:ad:2b:bb:ef:0f:
15:39:b8:4d:e3:74:cb:d3:51:ef:57:52:10:3b:61:
56:b6:4d:99:4f:74:24:78:db:dd:52:56:11:95:73:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:52:D5:F5:93:D2:15:34:57:A9:CA:25:AA:E0:3A:40:77:F1:D3
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e9:97:64:fe:a1:89:0b:e2:bd:d3:a8:72:72:53:b2:6a:93:
dd:ea:dc:ac:1a:f0:4c:da:65:ed:f6:4e:5e:42:06:6d:72:79:
40:57:4e:e2:7b:7f:46:6a:74:a7:2d:30:f1:f8:e0:44:e3:a9:
a4:d6:59:8a:b0:ad:6c:c1:17:0c:9a:78:58:e1:ed:ab:c4:c1:
9c:c6:5e:eb:83:97:cb:19:f0:f7:bf:f2:0f:1b:68:0e:d7:a5:
63:e7:be:2b:fe:10:1d:59:a2:b2:22:2a:e0:a4:b7:dd:94:84:
0e:13:1c:a8:ad:96:6a:82:bc:dd:0e:97:dc:6f:69:3b:76:11:
a8:cc:b6:56:54:d3:61:8e:c2:cd:a5:58:01:80:d8:e9:55:b3:
80:13:5b:c3:d2:14:ef:a8:b1:cd:2b:54:c0:19:54:1d:1e:c4:
ea:29:02:06:7a:ec:fd:d5:87:a4:14:bf:77:3f:2a:f4:c6:c4:
ff:aa:d2:c8:48:dc:97:b6:f8:6d:e8:a2:d2:4d:3a:a8:b6:56:
33:83:46:69:b5:73:e3:57:a8:34:64:d0:be:6c:9e:df:c1:05:
a4:a3:66:5b:57:d5:24:46:6a:79:73:0e:4a:09:99:1a:5d:f0:
d5:d9:96:e4:23:c7:9b:6d:86:38:51:d6:76:49:d6:6e:a2:37:
eb:f6:f5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:18 2024 by rpki-client on console-fra.rpki-client.org