Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: NxvZU7v0gM/ZU+e61h9v65hDRlk4Tu07CCU+OFdnjnY=
Subject key identifier: F7:0D:86:87:22:BB:90:A0:C2:52:11:7F:D6:6F:30:51:E3:6F:56:EC
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 018F874A4B775F2AEF6AB7F86D1CD61C0CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 0EAC
Signing time: Fri 17 May 2024 16:02:24 +0000
Manifest this update: Fri 17 May 2024 16:02:24 +0000
Manifest next update: Sat 18 May 2024 16:02:24 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: IqkyiPtzst2AI8/H889CcoXcp04sKi4IYns1E/zkzZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:4b:77:5f:2a:ef:6a:b7:f8:6d:1c:d6:1c:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: May 17 16:02:24 2024 GMT
Not After : May 18 16:02:24 2024 GMT
Subject: CN=f70d868722bb90a0c252117fd66f3051e36f56ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:66:25:1e:fd:c4:2b:06:d7:87:e8:b9:9e:
21:28:67:2d:57:5b:c2:4f:33:87:70:aa:b7:b4:2c:
19:ca:83:18:6a:03:bf:bb:d7:cd:4a:35:54:fc:8c:
3c:3e:ce:31:32:f2:49:9d:36:ec:39:50:c3:80:df:
ae:b0:a4:da:90:35:6b:bc:cc:63:57:7c:22:25:ad:
99:0b:28:10:21:b4:1f:8d:d6:60:24:ed:89:a3:9c:
95:07:d3:65:84:97:75:89:e1:1d:d1:01:09:c0:a1:
af:e0:f1:aa:5a:0b:e1:e5:53:6b:2d:82:a2:8a:b0:
d5:43:56:11:18:84:42:e4:61:7d:19:5f:a5:da:68:
68:67:ce:74:19:7a:70:76:69:cc:55:52:2f:12:1b:
12:39:42:72:5e:96:d3:66:3e:2f:3a:71:da:33:1b:
b7:8f:24:bd:0b:f3:94:a1:75:42:cb:64:7c:21:bf:
91:55:92:c5:3a:32:46:28:9d:1a:57:40:3a:5b:aa:
d6:8c:88:52:cd:e2:1d:a1:f1:78:19:0b:91:c3:68:
fe:3d:9a:80:6a:d7:31:02:22:0f:8b:e4:c3:c1:a0:
a5:3b:e2:68:c7:ef:b0:18:c8:5d:fb:fb:59:05:c4:
32:29:95:53:49:93:e9:c2:27:f9:c6:c8:fe:b9:52:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0D:86:87:22:BB:90:A0:C2:52:11:7F:D6:6F:30:51:E3:6F:56:EC
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:2c:2c:7c:54:24:46:b0:69:74:62:87:00:56:76:aa:71:
d1:9b:85:15:cf:aa:c3:c2:e1:cf:73:5e:53:8b:d6:e5:3c:f8:
2e:86:e3:b6:48:c1:c2:99:87:65:39:5d:94:7a:5e:2a:5c:84:
e7:d5:e7:ab:51:d5:86:17:d0:a7:58:98:39:a7:31:83:b9:8a:
87:63:12:98:6e:c5:da:04:38:ae:eb:8d:42:92:80:35:08:9c:
77:17:1e:7f:fd:3c:c7:52:fb:1e:f8:ad:e9:56:19:09:94:68:
35:e0:f1:8b:cc:b1:8f:e8:0e:cb:d3:24:dd:53:88:90:ce:b6:
88:5e:8a:85:11:a0:67:95:a4:56:f3:39:7a:a1:c9:1a:b7:f3:
4d:2c:fb:f3:b8:12:bd:38:30:2e:a5:b4:9a:bf:72:ec:5c:d0:
08:77:b7:ca:d8:05:a9:4e:21:d9:f5:96:be:7f:4c:a7:98:29:
36:b3:c5:e5:15:cb:a3:32:4d:34:3d:55:2b:af:22:11:b6:c2:
2f:c9:ab:80:47:13:0e:da:67:e3:a2:3d:59:6b:8b:f8:a4:80:
1f:01:e2:6f:8f:da:57:08:b5:ad:e1:d0:77:38:45:8a:b9:c1:
58:ca:19:dd:f4:65:5e:5f:bd:a0:9e:a5:f9:a1:3a:50:5e:62:
68:02:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:28 2024 by rpki-client on console-fra.rpki-client.org