Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File: TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier: AF2libV2f3z2uMiSO0NxJCoqxJZbRuD1SvmL2aN86n4=
Subject key identifier: 60:06:0B:6D:E9:C4:37:9D:08:CD:19:E7:22:0C:A3:F1:30:B3:9B:C3
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer: /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial: 01936A4707F38E5F1419B6DD949A8B8B2058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number: 1377
Signing time: Tue 26 Nov 2024 21:01:00 +0000
Manifest this update: Tue 26 Nov 2024 21:01:00 +0000
Manifest next update: Wed 27 Nov 2024 21:01:00 +0000
Files and hashes: 1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: ys1u4m+ho8IOrXnTWpNK6qpA7VCA7qj6sr8ZC7v5Umw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:47:07:f3:8e:5f:14:19:b6:dd:94:9a:8b:8b:20:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Validity
Not Before: Nov 26 21:01:00 2024 GMT
Not After : Nov 27 21:01:00 2024 GMT
Subject: CN=60060b6de9c4379d08cd19e7220ca3f130b39bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:09:b1:14:23:9c:d9:60:7a:5f:79:1e:20:
54:93:64:ef:aa:e2:52:51:8f:4a:c5:46:5c:2c:0a:
73:79:01:f1:01:23:be:55:2b:a2:7b:55:70:85:e4:
05:5e:ee:fc:ab:3a:95:8c:24:5e:b5:d0:d7:41:14:
ed:e3:3c:b6:c4:e1:5d:83:6c:85:aa:7e:26:9c:b6:
ef:70:22:08:d0:89:35:74:15:8a:d5:a6:eb:e9:a5:
76:5c:5d:f2:6e:ac:7d:a8:61:43:0b:a8:00:45:f3:
e1:9e:7c:28:db:8c:0d:af:54:b6:85:ff:4a:92:a1:
cf:46:59:81:14:e3:7a:6d:85:8d:0a:5f:12:27:0d:
fb:11:ee:58:4d:37:03:6d:8c:51:ab:b6:04:d6:60:
8e:79:82:af:21:15:eb:ad:da:44:f6:d2:24:98:64:
30:3c:cb:c0:3d:7f:4b:23:fe:5c:10:71:71:dc:f1:
ed:46:43:31:61:ed:f2:dd:fd:c5:94:a7:5b:94:0e:
54:9d:a9:b7:84:21:1d:3a:75:72:c0:bf:23:69:74:
26:8d:05:c6:da:7d:47:f1:32:07:54:c6:0b:46:19:
ce:63:d6:f3:a9:cb:9f:2a:c2:d6:5f:06:f5:b1:da:
f2:87:1a:93:ca:cb:4f:da:d9:cb:13:5c:b3:f3:df:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:0B:6D:E9:C4:37:9D:08:CD:19:E7:22:0C:A3:F1:30:B3:9B:C3
X509v3 Authority Key Identifier:
keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f6:f6:7b:8f:6a:41:4e:ac:9b:b6:aa:39:16:4d:39:1e:70:
09:54:e3:b7:d0:7d:8b:e4:cb:a9:6f:56:10:90:09:f4:34:bd:
d1:12:a6:fb:bc:ed:43:fd:70:6a:7a:53:8c:4e:34:ae:25:b3:
cf:ae:74:84:c8:c3:86:b4:ca:14:c7:34:c7:7c:58:8d:4d:ec:
9d:e1:2d:8f:b6:42:8b:18:40:38:56:f0:87:7d:73:d8:16:dd:
26:7b:7d:40:f3:7b:45:ec:5c:1c:7b:66:18:ce:d1:71:1f:29:
4e:36:00:cb:50:77:c8:b8:6c:8e:e9:e3:60:96:c9:11:3d:29:
ff:c0:dd:73:66:66:05:13:08:81:88:43:9c:2c:f4:9c:06:60:
d5:29:28:ad:c2:43:7c:ac:4e:17:85:43:9e:0b:8a:a9:4b:e8:
9e:90:72:85:db:a8:78:e9:87:33:2b:e4:a9:2c:3e:58:45:78:
8f:72:56:4b:53:f0:56:d6:52:85:4c:52:71:82:e0:09:e8:5c:
7f:03:18:68:4b:c0:43:a9:48:a8:da:5b:78:28:fd:3f:89:c4:
50:65:cf:99:a5:62:d0:32:4c:e8:81:0c:83:88:a6:72:10:5b:
67:60:1b:df:7d:7b:9e:a0:1b:d4:87:44:f7:c4:44:44:5e:c4:
e5:8a:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:01 2024 by rpki-client on console-fra.rpki-client.org