Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
File: Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft (raw, json)
Hash identifier: jXL9BBog+Bk1+oTGpCUBIUl4+eokEtT4gCFL/Vs+UhA=
Subject key identifier: AA:93:40:A8:62:90:F3:56:58:A2:4C:9F:73:4E:BB:6E:23:54:EC:7E
Authority key identifier: 43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
Certificate issuer: /CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Certificate serial: 018F87489F6A135DE04F2610F4920C1669B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
Manifest number: 03D6
Signing time: Fri 17 May 2024 16:00:34 +0000
Manifest this update: Fri 17 May 2024 16:00:34 +0000
Manifest next update: Sat 18 May 2024 16:00:34 +0000
Files and hashes: 1: Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl (hash: 3Voqda8nF95QklyrG4zZH3SAkW/UwE/q6813uG99zvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:9f:6a:13:5d:e0:4f:26:10:f4:92:0c:16:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Validity
Not Before: May 17 16:00:34 2024 GMT
Not After : May 18 16:00:34 2024 GMT
Subject: CN=aa9340a86290f35658a24c9f734ebb6e2354ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:1b:df:42:d3:2f:4a:3f:57:36:b8:55:c7:
07:8f:2c:0a:c2:49:0e:b9:f7:cd:9d:99:ee:90:41:
5f:ed:1f:e8:fd:4a:ac:5d:cf:df:9e:49:4a:1e:34:
86:92:01:9d:36:74:06:bf:03:ed:0a:6e:0f:fa:c0:
1e:a3:cc:a2:46:3f:72:9f:52:d5:f0:58:13:56:1f:
2f:90:09:0c:47:6d:5b:10:45:be:cf:6b:6a:27:84:
e1:3d:92:5a:42:2d:1d:13:e3:67:f5:73:92:e7:b1:
1b:d0:61:32:57:fb:53:fa:f9:b8:96:19:b8:26:20:
c7:d1:2d:7a:f2:6b:9a:27:b2:fe:a5:ab:15:39:f6:
0f:43:e8:54:25:fd:62:9c:bd:62:bc:87:ba:f1:d0:
48:1c:33:10:50:22:f2:e7:7a:32:09:69:7e:f5:ca:
d7:2d:dd:23:b3:ec:35:68:50:7a:38:6a:c4:c0:21:
85:51:04:f5:b5:21:34:35:c0:1a:22:c0:85:b6:ca:
98:1a:e6:e9:d6:e9:ce:ab:02:a5:3d:01:df:52:de:
70:97:37:5b:76:a9:f7:be:ac:2f:06:33:00:cb:d7:
d5:10:2f:a8:ba:f0:f8:16:3f:99:93:9b:f7:83:fb:
ec:da:5f:c7:5d:c2:0e:9c:64:f1:c4:29:4f:83:4c:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:40:A8:62:90:F3:56:58:A2:4C:9F:73:4E:BB:6E:23:54:EC:7E
X509v3 Authority Key Identifier:
keyid:43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:22:c1:5a:6b:40:58:30:12:ee:2b:e3:ba:ed:5b:90:e7:
f5:2b:a4:96:f8:ca:29:33:49:64:71:cb:40:ad:8d:e2:8c:e9:
03:ae:22:b7:1c:c2:8a:cf:fb:5b:af:6c:b7:fa:f1:44:6f:86:
08:db:ec:0c:56:28:8c:46:e8:b0:5c:53:03:f6:f8:b0:e4:77:
f2:49:31:13:f1:5d:a5:19:1c:15:2b:1d:9b:97:e0:2d:6a:19:
9e:1d:7e:22:81:f0:ec:dc:30:47:ca:9c:d8:e3:03:45:e7:a6:
9a:8b:6c:96:66:87:98:76:42:00:a9:d5:7a:d9:28:8a:ed:8a:
2c:1a:ac:cf:f6:31:9c:9e:c0:9e:f3:41:42:7d:18:57:14:12:
cb:c1:d3:c4:65:c3:64:bb:b2:c4:93:d3:f0:26:81:69:6d:40:
f3:37:dd:0f:f9:bb:ef:4a:c4:58:ba:94:d0:0b:a6:7c:d0:12:
a7:70:f8:9f:1e:6f:d1:53:f5:0e:a1:cf:63:b6:d3:72:08:a6:
84:a7:ff:bb:0f:be:f5:97:b7:90:fa:41:fa:8e:69:2d:8b:5d:
67:c5:bd:62:0e:5e:d6:26:84:b7:af:3a:54:ba:6f:0d:67:4c:
f4:21:fc:b5:62:d5:2a:58:22:31:02:04:fd:5c:01:2a:53:26:
75:24:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:33 2024 by rpki-client on console-fra.rpki-client.org