Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: j3Wy4MZsUEisA6rUP7pbTXW+oppUajzvTxbIFbQTzxk=
Subject key identifier: 20:AE:12:5D:F0:FC:1E:6F:70:64:A2:18:58:3A:81:B5:FD:32:7A:79
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019369D996AD321A9F949C5357DD715AD5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0457
Signing time: Tue 26 Nov 2024 19:01:27 +0000
Manifest this update: Tue 26 Nov 2024 19:01:27 +0000
Manifest next update: Wed 27 Nov 2024 19:01:27 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: WGJCLoXyohwjtmuGZ85oOfM6zfOIC0TwdweCC7q+aBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:96:ad:32:1a:9f:94:9c:53:57:dd:71:5a:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Nov 26 19:01:27 2024 GMT
Not After : Nov 27 19:01:27 2024 GMT
Subject: CN=20ae125df0fc1e6f7064a218583a81b5fd327a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:b1:78:b5:e3:26:0e:e0:04:bd:06:56:a9:
c8:b3:15:3b:90:02:e4:d0:f1:e8:b0:03:b5:a5:91:
05:ec:85:47:58:0d:5e:1d:50:50:00:6e:3a:17:df:
d0:07:4d:66:60:60:4b:19:60:d3:78:15:43:47:65:
a1:3a:3a:ad:17:5d:b3:40:a1:9c:70:5a:03:7a:ea:
d6:a0:58:5b:a9:17:7e:60:db:44:61:d0:a7:50:88:
f9:b9:ec:c4:8a:42:8a:ec:b2:d3:52:c0:02:1e:cb:
30:ab:5f:99:64:bd:f9:9b:1b:10:55:72:8d:61:3d:
7d:44:bd:a0:ee:96:74:35:0e:d6:66:11:7a:59:c6:
85:56:bc:57:4e:a0:2f:5b:7a:2d:07:71:54:5d:50:
55:3b:59:da:98:ca:9d:30:7b:27:92:3e:e2:a6:53:
d0:9b:12:c7:d4:6a:fb:2f:30:a9:05:36:4f:5f:61:
12:51:4e:fe:1e:f8:f3:f0:9b:e8:73:fd:7b:ab:b2:
24:df:1b:22:da:90:b7:29:e2:38:84:85:70:89:4d:
c9:3d:32:84:b2:34:8f:5b:f5:c7:38:24:16:5a:2f:
29:e9:f6:7e:bc:02:0d:19:9b:fd:ad:f7:05:e2:1d:
a5:63:60:f5:1b:5f:57:6c:25:14:04:6e:df:20:cd:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:12:5D:F0:FC:1E:6F:70:64:A2:18:58:3A:81:B5:FD:32:7A:79
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7f:3f:9c:49:bb:5b:5c:8c:af:1b:c4:c3:d1:71:6f:c5:9d:
c1:df:ca:47:d8:b5:37:e6:b7:cd:d3:97:a6:33:d3:ef:1e:11:
39:fa:b1:91:31:b2:e8:95:ab:c5:99:19:a5:1b:87:9d:82:20:
bf:dc:23:e5:b4:93:51:87:08:aa:1f:2f:1e:4a:dc:ee:07:5e:
f9:c8:b0:2e:70:ac:e3:8c:34:e0:4a:17:81:d2:9d:50:f5:09:
e8:bd:42:d2:27:ed:80:61:a3:d3:ec:6e:34:95:bb:84:7a:ac:
fa:77:08:f5:f7:39:63:0d:3b:df:ea:46:c4:9a:11:de:f7:8f:
3f:2b:63:30:e4:85:4b:b1:5a:16:9d:69:5a:c6:94:1e:67:ca:
26:10:66:80:7a:71:75:f0:db:b4:51:96:67:1c:25:ca:a2:a2:
47:9f:e2:cf:3f:88:cb:c7:8e:6b:44:06:f3:2c:9f:dc:c3:73:
12:0f:2c:23:a4:d6:66:64:bc:19:aa:04:bb:17:56:ec:9f:47:
4f:d6:1c:08:18:14:cb:17:2e:45:4c:94:71:11:39:89:e1:1e:
81:5e:ec:20:c0:e9:97:ed:60:d6:15:61:99:e3:c5:37:fd:d0:
30:45:75:d4:22:dc:fb:13:cb:f0:00:1f:83:dd:d6:d5:24:77:
b0:d3:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:37 2024 by rpki-client on console-fra.rpki-client.org