Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: 2s8Ntt20L31d9lyz8FKSjAif+3fcM28hEGrwc/BGoQw=
Subject key identifier: F2:47:CE:7F:A9:4E:9D:58:8D:96:80:08:95:B4:D2:AC:5A:FD:43:DB
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01936A7DB64F69C6C4628E5EF04D3594C433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0302
Signing time: Tue 26 Nov 2024 22:00:43 +0000
Manifest this update: Tue 26 Nov 2024 22:00:43 +0000
Manifest next update: Wed 27 Nov 2024 22:00:43 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: hNqJpHl7tOJK9QWiCYkVV/S4jC9H7NGnOtRiWFLBXIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b6:4f:69:c6:c4:62:8e:5e:f0:4d:35:94:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Nov 26 22:00:43 2024 GMT
Not After : Nov 27 22:00:43 2024 GMT
Subject: CN=f247ce7fa94e9d588d96800895b4d2ac5afd43db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:94:e1:93:31:61:4d:ac:2d:2a:34:b5:eb:
7f:b5:6d:68:1c:73:b5:83:cf:54:2b:86:1a:e7:2e:
bd:ca:c0:7f:a6:99:39:fa:5e:83:92:1d:a2:e8:27:
bd:fa:98:13:dd:a0:bd:36:ae:9a:9b:23:5a:76:94:
d5:9a:81:13:51:b2:f7:a9:99:92:dd:ee:62:79:b9:
0f:b0:31:aa:f9:3e:35:f6:32:b6:3d:ef:57:31:4a:
5f:74:09:21:3d:3e:2f:e1:d0:97:61:86:e7:fd:45:
d6:40:db:c2:6e:05:1b:0f:5a:4c:18:53:3e:54:b1:
8b:ac:e1:85:e9:94:c2:0f:36:5e:1e:3d:b6:c7:cb:
e8:bd:b4:f6:71:a5:b8:a6:18:cb:4b:2a:ce:76:d7:
ba:99:c2:b9:33:90:79:57:e0:83:a5:d6:2b:c1:ce:
99:f5:6a:a5:2c:d4:fb:09:46:6a:a4:aa:1c:c8:ae:
b9:9f:d0:95:65:5d:ff:7f:7f:8d:80:1d:d9:e6:6e:
44:cd:fd:7e:3a:9f:c2:e0:2a:9a:2b:36:42:ce:1c:
93:31:cf:68:e1:ea:cb:20:4d:28:97:43:17:97:53:
77:78:21:4c:ea:fb:2c:3b:b3:54:35:95:fa:b0:9e:
fe:61:14:ab:0f:df:65:6b:3e:ab:3d:e0:91:fa:4b:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:CE:7F:A9:4E:9D:58:8D:96:80:08:95:B4:D2:AC:5A:FD:43:DB
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:39:95:95:30:c4:4e:84:af:d1:13:51:9c:a7:9c:2e:87:
9d:30:92:85:34:3a:5e:08:54:af:8e:61:39:b2:fa:f4:3d:e8:
95:54:91:56:4d:3d:b5:66:0a:93:43:76:7f:26:9b:2b:e6:0c:
cb:70:c9:d1:0e:69:d3:36:1f:6a:81:52:d0:cc:fb:7d:6f:12:
e4:b1:42:d9:a7:a0:10:58:5b:de:b8:5b:88:d6:52:e4:36:3a:
83:b3:56:57:9a:88:5e:30:33:7a:8d:85:12:e2:05:cb:99:c4:
eb:99:ce:98:0d:ff:58:6c:ec:6b:d0:5c:d3:66:aa:61:29:6e:
eb:0f:54:6f:b3:5d:f7:d0:73:af:a2:75:0c:a0:b5:4c:a9:1d:
85:9b:34:ae:7b:c9:99:57:e4:8d:d5:f4:99:dc:bc:79:b1:81:
68:32:34:30:25:d9:32:72:f9:f0:c0:dc:18:ee:3e:e8:84:58:
2d:92:a4:8d:f6:70:8c:74:82:dc:e0:c8:80:3c:1b:5c:0e:86:
d6:0f:69:98:ff:29:0d:a5:6a:8c:fb:d4:98:99:cf:53:35:c4:
dc:0f:60:4d:18:ad:b3:01:6a:b9:14:7f:60:ea:42:55:d8:f0:
38:45:0d:ce:47:73:17:ea:52:b4:f3:1f:74:ad:80:a0:7c:74:
99:95:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:37 2024 by rpki-client on console-fra.rpki-client.org