Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
File: Illqyngn2jIPE1xhMpnjWi4iJUM.mft (raw, json)
Hash identifier: FDZ0nWqgdH2Z4bksHqm+2SYOnj9iE8wiGDia4uqCgxs=
Subject key identifier: 57:A8:FC:4A:B6:E4:F7:F9:3E:96:D4:23:2C:1D:39:FD:EB:42:E7:03
Authority key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Certificate issuer: /CN=22596aca7827da320f135c613299e35a2e222543
Certificate serial: 019356F74038C4ED54D2FE61B5086198BF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
Manifest number: 075A
Signing time: Sat 23 Nov 2024 03:01:04 +0000
Manifest this update: Sat 23 Nov 2024 03:01:04 +0000
Manifest next update: Sun 24 Nov 2024 03:01:04 +0000
Files and hashes: 1: Illqyngn2jIPE1xhMpnjWi4iJUM.crl (hash: DX90yb3hGSIuzaMvcUsMhH6JhAjDOVWGwuD7+EJlFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:40:38:c4:ed:54:d2:fe:61:b5:08:61:98:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22596aca7827da320f135c613299e35a2e222543
Validity
Not Before: Nov 23 03:01:04 2024 GMT
Not After : Nov 24 03:01:04 2024 GMT
Subject: CN=57a8fc4ab6e4f7f93e96d4232c1d39fdeb42e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bd:37:e8:f7:80:d8:06:c7:5f:4f:9e:a8:ca:
49:41:4d:b5:c0:a5:14:c9:d9:15:18:cc:0b:0e:b4:
e8:3e:e5:85:38:f3:fd:8c:5f:c5:62:a5:6f:40:41:
18:83:6a:95:a5:b1:35:ec:4e:0c:92:d0:cc:be:0f:
15:ee:e9:02:39:e9:47:dc:32:90:3a:6a:db:c3:a9:
0f:f8:b3:5e:48:83:a0:06:33:75:1e:91:77:16:85:
b0:c2:8e:1e:16:68:9f:b4:54:7b:cc:cd:67:61:0e:
18:b1:b9:a2:bf:a9:2a:c0:34:87:34:99:61:20:05:
f8:87:98:39:f0:3e:c4:90:bd:92:67:cc:4c:d2:e5:
1b:cf:91:da:ef:9c:b3:c6:a8:66:77:fc:84:c5:e1:
8a:78:b8:b6:7c:25:c0:5a:8a:23:d9:d2:88:40:c0:
b4:ac:38:80:95:6d:ec:48:7d:af:e6:50:40:69:f3:
a3:d4:22:ce:03:d9:6d:fa:96:37:9c:33:1a:e0:f1:
b1:54:38:89:05:07:e8:60:da:5e:49:20:7a:0c:7a:
67:5d:cd:8d:cc:e1:1e:34:29:5e:ec:e8:20:a1:00:
5c:24:e4:16:f2:16:15:8d:56:cb:a9:fa:0d:aa:6d:
7d:40:b4:85:f0:6a:f4:b9:dc:27:7e:06:a9:ff:a1:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:FC:4A:B6:E4:F7:F9:3E:96:D4:23:2C:1D:39:FD:EB:42:E7:03
X509v3 Authority Key Identifier:
keyid:22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:b6:58:e7:d7:61:a5:6d:e9:d9:86:b4:74:7a:ba:d7:bd:
ff:53:7d:58:49:de:d6:08:af:e4:f5:48:75:1f:7a:4e:96:c2:
f1:c5:8a:88:33:53:7e:e4:1d:8f:37:1a:1f:dd:8f:8a:9a:2d:
20:cc:30:c6:e4:a5:91:ed:30:86:dc:09:e2:cf:3b:cc:d0:35:
4d:3b:8b:b0:33:1c:8f:f8:93:9a:8c:e6:5c:c6:2d:06:41:da:
38:0f:dd:f3:03:88:0c:02:ce:0a:ab:ad:90:f1:c4:c9:37:24:
f7:f6:30:7d:9d:fe:0f:68:56:a2:ee:8a:44:f5:92:e3:8e:e5:
f8:b2:0a:4c:bf:ee:4f:c1:55:be:d6:a7:69:25:87:29:18:bf:
12:81:eb:d7:35:11:7b:9e:dd:4f:db:af:f9:67:77:66:db:bc:
d5:94:8c:a9:4e:c3:5a:66:69:c0:91:50:7b:76:48:77:28:c2:
28:8c:31:28:1b:db:f5:be:fa:f2:9d:26:df:63:ce:dd:34:55:
6b:9f:91:9a:64:df:26:db:5b:b7:42:11:7d:b0:c1:b8:a9:28:
74:7a:1f:31:05:e9:50:eb:e8:15:a0:db:a2:95:18:5d:69:62:
da:b1:51:a2:25:f9:e7:9c:39:00:15:7d:73:29:f4:88:f5:65:
1b:2f:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:57 2024 by rpki-client on console-fra.rpki-client.org