Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
File: 9TK715EK8VrXBk20ptO9ZKfoJ8E.mft (raw, json)
Hash identifier: NygaUjVEUEART7jdkwzltRBVuwhtQjALYsM8w39zGQc=
Subject key identifier: 5E:CA:8B:48:CA:B2:FA:CC:53:23:F7:E3:C1:AC:3D:DB:09:07:A3:7F
Authority key identifier: F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
Certificate issuer: /CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Certificate serial: 0193688F58EADCBB619683174E798536972E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
Manifest number: 0202
Signing time: Tue 26 Nov 2024 13:00:45 +0000
Manifest this update: Tue 26 Nov 2024 13:00:45 +0000
Manifest next update: Wed 27 Nov 2024 13:00:45 +0000
Files and hashes: 1: 9TK715EK8VrXBk20ptO9ZKfoJ8E.crl (hash: Snmx8oTVKeVYdwJnQ1VmgcBv6dHG0nJSJNqp7JqUvRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:8f:58:ea:dc:bb:61:96:83:17:4e:79:85:36:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f532bbd7910af15ad7064db4a6d3bd64a7e827c1
Validity
Not Before: Nov 26 13:00:45 2024 GMT
Not After : Nov 27 13:00:45 2024 GMT
Subject: CN=5eca8b48cab2facc5323f7e3c1ac3ddb0907a37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:a9:05:1f:4b:3d:9b:82:c9:b1:28:81:42:
46:1b:01:78:0f:a9:47:b9:af:05:cf:ea:34:71:00:
66:b6:6f:80:d5:6b:c5:fe:a2:25:86:af:07:34:b9:
d7:99:90:cd:9a:58:38:76:d8:fa:88:99:92:bc:66:
d2:e6:99:eb:58:be:f1:da:2d:cd:73:5e:e9:cf:0b:
76:92:fd:72:4b:db:a7:83:3c:dc:16:f9:b3:d0:61:
1f:d1:98:f6:a6:39:0b:f8:e2:5c:d8:01:74:de:31:
73:45:11:cd:21:5f:a1:6d:10:15:62:65:bd:9b:8f:
c2:6e:36:b2:4c:11:07:57:b5:02:c5:4f:3f:76:15:
6f:cd:70:b4:fa:9c:16:49:c1:70:f4:72:46:f8:54:
a9:08:fc:b2:83:23:ca:12:1c:c8:43:0b:22:de:6a:
e6:4e:91:6e:55:cc:8e:33:8c:95:bd:8e:1a:92:34:
f9:d4:62:eb:22:ce:98:37:e2:35:29:f1:b4:a5:f8:
20:8d:48:1a:b7:f6:ff:f6:b9:8c:4e:ca:7a:e9:2a:
33:d1:ff:93:87:cd:82:bb:83:df:6f:78:5f:ef:d2:
79:32:ec:c6:68:6b:43:ed:c2:0e:b2:5e:a2:f7:15:
94:bf:8b:2a:ad:7b:91:44:c3:60:da:1f:5b:8a:fc:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:8B:48:CA:B2:FA:CC:53:23:F7:E3:C1:AC:3D:DB:09:07:A3:7F
X509v3 Authority Key Identifier:
keyid:F5:32:BB:D7:91:0A:F1:5A:D7:06:4D:B4:A6:D3:BD:64:A7:E8:27:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TK715EK8VrXBk20ptO9ZKfoJ8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/869b5c-1bcd-4ff3-ade1-324caaac962b/1/9TK715EK8VrXBk20ptO9ZKfoJ8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:52:a9:35:dd:be:57:27:76:4d:d9:c4:5b:d3:5c:38:8c:
d7:cb:42:43:5d:0a:91:15:2f:3e:45:bd:20:30:3c:cd:7f:fe:
9b:d4:8a:00:82:4d:fb:a9:01:a0:06:39:e8:7b:44:c4:b0:ff:
89:32:28:df:67:91:24:85:8b:35:d7:70:b3:f1:26:df:eb:2f:
87:12:98:af:47:fd:b7:bc:dc:cf:da:d7:50:0f:c3:cc:c3:53:
1c:98:52:64:f5:db:bc:1f:fd:3b:38:f7:1a:6c:0c:6c:cb:26:
c0:da:33:1f:8a:7a:ca:9b:28:ed:ad:75:d0:dc:19:ce:58:bc:
1f:96:9e:07:92:ea:64:74:44:48:7e:c7:d5:f4:d7:87:fa:e6:
93:0c:75:e6:5f:57:1a:45:bd:d5:4e:62:9a:93:32:82:97:72:
6d:80:de:d9:eb:28:66:4e:3f:49:dd:cc:bc:d0:09:ec:0e:66:
2e:6d:20:f6:21:1f:d8:98:03:bd:96:82:f8:e5:9a:bf:5f:65:
25:9b:61:4c:49:e1:bc:53:13:c1:ed:17:16:56:36:ee:00:44:
0c:5f:5a:e2:57:a2:4a:08:c1:b8:ba:24:ae:50:01:cc:aa:75:
07:b8:da:d2:00:17:eb:e8:93:24:e5:53:be:76:a9:da:7a:46:
de:21:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:55 2024 by rpki-client on console-ams.rpki-client.org