Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: GESTrUOgFpdZ6MG5jAHm+LHtaac6ot3k3ovlj4HX0NM=
Subject key identifier: 70:71:A5:34:8B:3A:B7:65:01:C6:8D:E6:06:6F:4B:FF:06:D4:FC:BB
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 019367EBFC95BA254A6DA83E370EA40E2756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0AD4
Signing time: Tue 26 Nov 2024 10:02:19 +0000
Manifest this update: Tue 26 Nov 2024 10:02:19 +0000
Manifest next update: Wed 27 Nov 2024 10:02:19 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: ccemOWHri7mQ/plyqAnilPwXo1/TANGfCWKu4WAI0N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:fc:95:ba:25:4a:6d:a8:3e:37:0e:a4:0e:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Nov 26 10:02:19 2024 GMT
Not After : Nov 27 10:02:19 2024 GMT
Subject: CN=7071a5348b3ab76501c68de6066f4bff06d4fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:5c:99:7c:31:63:a2:9a:5f:45:fb:bb:ce:
78:ba:7a:eb:7b:a8:3f:67:8c:be:74:5f:72:bc:4b:
f1:f3:8d:f0:4f:49:28:bc:65:e9:51:10:c4:c2:57:
4e:3e:bf:1f:f5:72:9a:7d:e7:49:7f:6e:e6:b0:b5:
69:6a:50:58:29:69:26:fd:2c:ce:f3:4a:a0:a5:39:
63:9d:d0:ea:82:10:99:67:40:f0:4f:bf:b3:85:9b:
16:50:e6:c2:0d:15:21:ef:26:7a:53:29:c8:e2:18:
56:8e:96:49:81:14:4b:bb:e8:ee:8f:85:18:0f:31:
19:45:84:3e:0c:bc:01:92:14:8e:3a:f7:38:1f:da:
13:48:d3:c1:b7:e6:21:0a:d8:71:4e:8e:c5:a0:52:
74:52:be:63:e4:cd:16:21:d6:47:98:e7:f3:4e:6e:
16:3c:6d:be:f9:0c:90:05:c0:d0:d5:b4:0b:18:10:
c3:cb:40:c5:72:06:1a:36:ac:67:73:63:2a:d1:9d:
cb:92:98:53:dc:f6:0e:87:b4:08:57:07:3f:83:de:
c2:0d:b6:5e:4c:52:16:48:22:cb:ea:24:9f:7d:72:
ef:f7:9b:33:88:d9:48:56:e5:a8:05:70:7a:ad:cc:
31:0b:cd:04:67:cc:81:42:c0:23:f5:8b:9e:52:67:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:A5:34:8B:3A:B7:65:01:C6:8D:E6:06:6F:4B:FF:06:D4:FC:BB
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:3a:3e:11:30:3d:0b:49:0b:6b:88:17:df:95:8c:50:9f:
92:d8:27:21:39:8a:cf:21:88:6a:e8:53:81:03:bb:ba:e8:9c:
62:0a:5a:ba:c7:09:ee:4c:c2:4f:38:0b:98:2a:b6:bc:12:ad:
26:4c:71:8e:17:02:91:aa:17:65:2a:f1:d3:24:f1:7d:02:af:
46:98:1e:ad:13:95:06:d0:de:f2:b7:70:9d:86:53:d9:47:37:
28:91:78:86:cf:9f:ca:5e:b3:0d:73:8c:d4:9a:f5:c0:7a:a1:
16:4b:c8:a7:96:10:65:68:bd:d9:fd:2f:0c:14:dc:9e:0c:bd:
bf:9d:d9:68:5b:ab:e6:5c:05:2a:83:b1:e0:21:e3:5a:39:19:
ed:13:bc:d4:7d:59:6f:6e:2b:35:6d:ba:4f:d1:29:2b:87:77:
56:ca:15:d9:9b:88:3a:ad:d9:40:1d:f0:32:d1:c8:7e:7d:ad:
4b:61:e4:37:66:28:aa:3a:45:4c:ff:b2:40:96:9a:43:e4:bf:
04:1f:f1:cf:e4:11:5d:7f:f3:a4:98:77:34:14:f3:ed:48:6c:
c5:99:28:6d:ba:6a:d8:45:17:b4:d9:ef:8d:ac:64:65:93:2a:
47:30:4a:a1:c7:7a:ef:59:f6:73:56:e0:f0:3a:47:77:fe:28:
d8:1c:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:32 2024 by rpki-client on console-ams.rpki-client.org