Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: ZwNOj4QKX7sKcLIOpHdkh4nvgrRVMJ1K6UcgDeyjT08=
Subject key identifier: 1D:DD:E1:3C:43:81:F6:62:02:63:16:FD:01:54:53:40:94:4B:1F:E2
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 019367EB2E6870F26F071916125239268936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 1377
Signing time: Tue 26 Nov 2024 10:01:26 +0000
Manifest this update: Tue 26 Nov 2024 10:01:26 +0000
Manifest next update: Wed 27 Nov 2024 10:01:26 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: 3RMP59gMkpT2d8vF0CcwH6e/HYu/eLCWsgyLn1gEgdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:2e:68:70:f2:6f:07:19:16:12:52:39:26:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Nov 26 10:01:26 2024 GMT
Not After : Nov 27 10:01:26 2024 GMT
Subject: CN=1ddde13c4381f662026316fd01545340944b1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:db:e0:e8:39:8f:4d:d2:02:d1:79:6b:86:
fe:91:75:22:22:06:6b:e5:48:58:5a:d3:bb:ea:d4:
17:2e:f0:8f:7e:53:62:0e:43:ec:b1:bd:1a:fb:41:
df:1c:83:bc:b0:a5:10:ff:d5:7c:4d:d2:0e:d0:17:
16:b9:54:b1:93:83:6c:b8:bd:33:47:e5:7b:3a:e6:
4b:a5:d7:e0:a2:c3:7b:9a:a1:99:b2:66:f0:fe:21:
75:59:9a:19:a2:b3:9b:d7:b6:f0:99:54:d6:98:bd:
95:f2:5a:a0:cc:ee:62:5f:60:53:72:63:2b:47:25:
3b:6a:99:16:88:47:89:c2:12:50:fd:46:4d:3d:32:
33:f4:4b:62:c4:62:97:96:9c:50:df:45:86:c4:6c:
34:e6:c1:2a:92:ca:b9:db:9d:40:c0:50:d0:32:85:
51:24:e9:87:93:96:b1:32:6c:b8:d5:9d:b8:1f:78:
9d:d6:0a:83:c6:bd:90:be:43:02:1a:84:07:25:c3:
65:74:83:d3:aa:54:1e:34:9b:97:c2:ea:8c:42:49:
f3:a4:b0:0e:5a:33:2a:f7:9a:29:10:bc:09:2a:c0:
ce:30:49:09:dc:c5:9d:06:49:e5:3f:1a:d9:19:ac:
88:45:0a:7b:60:36:a6:06:3e:e6:3b:4c:15:e1:ab:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:E1:3C:43:81:F6:62:02:63:16:FD:01:54:53:40:94:4B:1F:E2
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:37:2d:cc:a4:e2:e6:bc:24:c4:e6:ad:9b:d6:ce:d8:65:1e:
a2:44:33:2e:50:4b:45:9e:82:80:e7:a4:1a:8e:f6:10:86:54:
fe:a3:ed:66:db:da:c2:51:8e:c7:3c:8c:9e:10:a8:df:c5:4e:
dc:ad:95:46:d2:bb:f8:1e:06:a2:09:13:4c:01:7d:ad:9b:96:
57:5a:dd:9d:32:6b:9d:ec:05:b8:83:56:54:d5:8e:18:d5:f8:
60:a2:eb:cb:b2:16:5e:98:71:a4:21:fb:dd:16:b7:d2:ad:6a:
40:48:94:b1:6c:d1:2d:fb:4a:84:3c:36:01:f2:af:7f:ad:31:
e2:2a:cc:d3:51:78:a2:36:7d:15:5a:ee:52:a7:ee:37:1b:cc:
ea:66:c5:fa:92:7c:e1:bc:b7:08:a3:2c:c8:75:8f:4f:6a:cd:
25:1b:0e:7e:c6:98:c3:93:33:47:01:fd:05:02:c5:e1:a7:29:
78:01:f8:97:de:bf:a3:92:db:12:e3:41:cb:fb:42:97:a6:18:
94:fe:86:03:d5:7f:d1:43:ef:ca:4f:0c:a0:e4:0b:12:b0:cd:
d7:7c:ae:19:fb:58:75:16:b3:0e:47:93:6c:2b:71:fa:c8:ac:
8c:32:ed:85:c0:b8:28:a7:de:69:84:f8:f4:19:5b:a9:c1:8e:
24:d9:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:54 2024 by rpki-client on console-ams.rpki-client.org