Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
File: 0elU3oMurd0srwpAxtM-8RiJlLw.mft (raw, json)
Hash identifier: xUQFtPD/8VUT1aHQsGKGJUvQJ/se0HXNOb0PV9aq8sU=
Subject key identifier: 59:83:07:CB:54:EE:BE:BC:92:3F:77:9F:AE:73:CD:B6:76:40:A6:2D
Authority key identifier: D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC
Certificate issuer: /CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
Certificate serial: 019369DA6FC558C3B606EF99FF7F9454F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
Manifest number: 0472
Signing time: Tue 26 Nov 2024 19:02:23 +0000
Manifest this update: Tue 26 Nov 2024 19:02:23 +0000
Manifest next update: Wed 27 Nov 2024 19:02:23 +0000
Files and hashes: 1: 0elU3oMurd0srwpAxtM-8RiJlLw.crl (hash: fNQpALP4hGE9T3eTUK+EOOsDtNOt2FXDWFA1uP5gHDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:6f:c5:58:c3:b6:06:ef:99:ff:7f:94:54:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
Validity
Not Before: Nov 26 19:02:23 2024 GMT
Not After : Nov 27 19:02:23 2024 GMT
Subject: CN=598307cb54eebebc923f779fae73cdb67640a62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:b6:5f:73:8c:40:cb:82:bd:ab:19:14:b1:
e6:8e:3a:bd:8e:77:98:ec:d9:dc:ce:c9:01:51:9a:
57:bd:25:aa:b5:ee:a5:e7:ef:c8:ad:70:7a:43:b2:
c9:18:4f:dc:6c:09:15:85:f8:e5:3d:5f:89:92:f6:
35:5b:0b:ac:f1:ba:d7:a1:b1:e3:b9:ba:3f:60:07:
2b:f5:3a:00:c5:a5:a2:63:3c:a0:a7:29:31:ae:2f:
67:26:ca:92:27:03:98:e5:c3:46:05:d3:dc:53:da:
9d:11:50:1e:3e:c4:05:8d:81:8b:94:bf:57:ec:d5:
d2:b2:e5:54:09:dd:d9:ee:af:1b:68:36:87:97:9d:
59:0d:40:96:8e:69:6e:57:5b:9b:ae:89:c1:08:cc:
2a:7c:20:17:76:b4:25:87:c9:de:47:56:e0:ea:51:
83:a6:46:f7:51:39:0c:01:b9:be:01:52:e7:54:84:
33:13:59:4e:0a:cd:da:60:9e:8f:e9:d1:99:5b:d3:
e0:81:50:8d:ec:74:9f:9a:e1:23:4f:da:4b:d8:18:
78:b3:c9:b8:3e:9b:fe:3d:14:bb:b7:bf:3b:c6:e5:
e6:cf:dd:84:a9:3e:b3:bf:c0:0c:e5:6a:dd:b7:71:
55:6f:f0:6e:37:67:58:78:9e:76:2a:1a:a9:4a:37:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:07:CB:54:EE:BE:BC:92:3F:77:9F:AE:73:CD:B6:76:40:A6:2D
X509v3 Authority Key Identifier:
keyid:D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a4:c6:e4:50:dc:2f:79:05:32:79:91:e4:6b:68:49:f4:f9:
e5:7a:fa:63:6e:ca:d7:77:90:d0:98:ce:86:b8:43:4e:7e:08:
89:a3:e7:66:6a:eb:9f:c1:1a:6d:be:5c:ef:78:30:65:dc:5c:
80:89:aa:73:8c:2c:f0:94:61:02:3b:69:ad:a9:d7:c1:35:16:
1d:fa:0b:79:df:ca:eb:97:87:40:4b:f3:7b:e0:c5:49:3d:01:
4f:a4:58:aa:9b:5c:c6:69:97:ca:4e:a0:b2:1f:09:08:96:b9:
ca:d3:54:07:19:2e:1f:d6:5b:36:80:3b:4f:97:f1:99:04:c4:
4c:e8:04:fa:8f:f2:09:33:a2:8e:a0:5b:a0:a5:dc:3f:5c:75:
49:9a:7e:5e:e7:44:cc:fa:ff:c2:dd:3d:cb:ce:47:54:a7:e0:
ab:79:5a:93:96:57:8b:1d:41:f8:52:58:ac:4f:7f:a3:1c:a4:
aa:96:06:27:7a:3f:4d:2b:a7:d8:97:46:5d:5a:10:1d:79:82:
04:61:5e:b2:7d:92:bd:93:bc:1f:74:3e:cf:b8:e8:11:eb:e7:
4f:e8:72:0e:3f:90:3c:05:eb:99:03:8e:4f:da:fc:f7:d4:ce:
d7:bf:d9:ec:38:8d:78:5e:39:5a:77:7f:7d:9c:46:99:68:95:
0e:7b:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:18 2024 by rpki-client on console-fra.rpki-client.org