Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: U+HFE+EIVEmqDJAeTj0IqDgI/XfewNj50FdLNdRQKVc=
Subject key identifier: 7A:5D:6D:AE:DD:0A:C2:34:48:6E:39:76:A1:07:2D:B8:D7:BA:BA:C2
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 01936933F6D8EC2A168A3E9EEF28CF02336B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 16:00:33 +0000
Manifest this update: Tue 26 Nov 2024 16:00:33 +0000
Manifest next update: Wed 27 Nov 2024 16:00:33 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: XrJOfc+3b1byBGyPYfY32F5bEVMhMCUvbPTIJGe9P9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:f6:d8:ec:2a:16:8a:3e:9e:ef:28:cf:02:33:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Nov 26 16:00:33 2024 GMT
Not After : Nov 27 16:00:33 2024 GMT
Subject: CN=7a5d6daedd0ac234486e3976a1072db8d7babac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:58:fd:6f:84:42:80:44:b7:c4:a4:9b:39:
04:cb:70:11:0b:ba:2b:80:37:cb:ef:fc:15:c9:bc:
6d:1c:58:d0:f9:4e:bc:1c:ee:c4:ad:f9:0f:c5:17:
65:68:44:3c:bb:ab:4b:38:58:37:03:d9:fb:b8:10:
8f:ae:9d:9e:2f:c0:b8:64:00:20:b5:fc:8c:17:67:
45:9f:13:e9:26:1a:fe:1d:76:93:68:06:6c:7a:b8:
50:27:70:18:6f:42:d0:a8:e0:97:a7:41:04:e8:d2:
8c:7d:b6:b6:ba:2e:c7:70:68:68:46:c7:e6:e9:02:
43:ef:4f:8e:a2:d3:09:a2:67:99:5d:fd:fd:5a:35:
fa:45:98:10:d6:c3:04:b0:a8:b9:e7:a7:77:c0:58:
47:f5:d7:69:5e:da:6e:61:08:f1:64:b7:58:49:6a:
62:fc:f7:de:db:fd:ca:26:ca:03:d4:2e:ff:31:64:
fa:af:52:14:e2:7e:87:f2:71:95:89:29:71:b7:b5:
5f:ca:55:f1:23:48:f5:97:06:0c:d2:d4:ef:db:dc:
e7:fa:18:d0:28:76:51:60:5f:bf:2d:7a:c7:fd:20:
07:19:0c:40:fc:97:ec:01:49:5c:6e:50:2b:98:0f:
e2:1a:fc:a1:67:6f:ab:0a:69:b6:33:5f:b8:71:7f:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:6D:AE:DD:0A:C2:34:48:6E:39:76:A1:07:2D:B8:D7:BA:BA:C2
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:25:98:86:71:bc:f8:b9:d9:e3:95:44:0d:8b:39:c8:31:
fc:b3:c7:b4:3d:02:3d:de:f0:04:10:e1:e8:02:87:60:8b:4f:
86:f8:05:f7:d5:e7:c5:ef:c4:3a:dc:02:ff:47:37:d4:4e:91:
9d:a3:09:86:50:99:6d:2c:f2:9c:1c:6d:68:d0:9b:be:b6:9c:
3f:49:95:59:db:10:8d:12:a6:ec:12:93:b4:aa:a2:b3:26:3f:
06:4a:ed:6d:ea:3d:d1:53:23:87:62:2d:fc:42:a9:a6:c6:61:
80:f6:c6:eb:17:41:f0:6a:af:69:9a:06:ac:d2:d3:6e:52:c8:
c0:fc:87:95:e4:f9:86:e1:4d:16:b2:35:6f:03:06:8b:d0:48:
ee:5b:02:fc:60:47:62:d3:97:6b:b1:d9:7c:c2:cb:bf:e0:fd:
09:95:ee:7d:12:c9:a0:9a:20:5a:32:55:9c:8d:3a:d1:33:67:
00:e2:86:1a:c9:5c:8a:1c:37:43:67:98:09:58:8d:74:95:0d:
60:eb:82:56:ef:f4:f3:cc:4b:99:96:12:23:7e:e7:cd:25:36:
7c:56:7c:d8:57:68:b9:80:b6:0a:25:e2:8d:ad:ab:80:c1:de:
fd:8a:ce:89:4f:27:aa:8a:ea:68:6f:ad:ba:c6:b0:3b:88:32:
37:ad:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:29 2024 by rpki-client on console-fra.rpki-client.org