Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: 1BrnKaop1PJ89N9zkudlBV88Qi4Jh8zGFPNyOAmp/Ak=
Subject key identifier: DE:A3:74:96:F2:5F:0D:4D:C5:0B:3A:0D:FF:CF:E9:19:6A:EC:2C:29
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01940721EDDC890FC0240001AB9DD5818D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 10E3
Signing time: Fri 27 Dec 2024 08:00:51 +0000
Manifest this update: Fri 27 Dec 2024 08:00:51 +0000
Manifest next update: Sat 28 Dec 2024 08:00:51 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: tRF2pc6igDExCI+/G1C6/LOTxP2SD9CkD3qwjVHalCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:ed:dc:89:0f:c0:24:00:01:ab:9d:d5:81:8d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Dec 27 08:00:51 2024 GMT
Not After : Dec 28 08:00:51 2024 GMT
Subject: CN=dea37496f25f0d4dc50b3a0dffcfe9196aec2c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:a2:af:c8:06:6c:ea:b7:e7:ce:9f:c5:7d:
99:88:ae:d9:8d:ab:f2:3e:3a:1e:49:e3:be:a5:e0:
76:fb:0e:99:fc:8e:82:79:74:66:ab:a0:d7:23:2d:
00:d2:5f:ed:b0:ed:c4:d2:50:4f:da:8f:f0:b5:ee:
0a:83:39:86:42:95:72:7a:96:a7:b2:fb:e6:1b:95:
1f:f3:d8:be:78:98:77:26:b3:77:a5:79:dc:7c:83:
f9:89:5e:72:7f:73:b4:28:9a:06:af:6d:a3:d5:cb:
5c:9f:b9:41:ee:ac:51:20:b6:cb:fc:98:81:a7:dc:
dc:44:f9:fe:5f:3a:76:75:0a:75:13:9a:70:f0:7d:
ce:22:4c:79:9a:65:ba:78:1e:83:c3:a8:f0:be:04:
14:03:69:e6:64:2b:f1:6f:9c:0c:c9:b8:66:72:c2:
55:d7:57:19:ea:e8:d7:24:89:2e:54:a2:bb:c4:f3:
78:d8:cc:26:83:95:3c:0a:09:42:b1:92:05:41:2a:
d0:2a:07:6d:39:62:53:0f:33:9f:5f:83:58:97:22:
4e:25:56:42:4e:8f:6e:dc:68:22:92:bb:df:39:73:
46:0f:5c:f4:a0:ec:04:6c:da:e4:cc:c3:f6:e9:38:
80:1c:d7:1d:11:d6:1e:ec:98:dc:58:ee:9b:fc:1e:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:74:96:F2:5F:0D:4D:C5:0B:3A:0D:FF:CF:E9:19:6A:EC:2C:29
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:ce:1f:28:7e:70:2c:fb:68:33:64:56:71:72:d0:ca:9b:
08:cc:46:fe:13:58:ce:f5:67:42:9e:e2:ab:4b:4d:ae:2b:3e:
90:80:84:88:85:40:e1:ec:e9:b1:56:6a:07:5f:28:4c:72:55:
44:fb:0a:31:d6:9b:42:27:bf:08:b8:d4:61:07:2e:07:9e:a6:
99:67:a7:b8:99:70:da:a2:dc:9f:88:a5:bc:8f:1c:35:c0:96:
0b:14:e6:b5:1b:df:51:fb:10:fe:3b:09:56:d3:d8:2b:67:22:
bf:8b:2f:b7:be:97:a6:30:27:0e:59:36:ea:38:e1:35:ea:1d:
63:4b:d4:0b:0f:e9:fc:0f:8a:62:42:1e:25:9d:c3:a7:2f:65:
e4:c0:3a:22:75:9f:ff:f9:94:00:de:5d:f7:1c:f4:de:bd:d9:
7d:9a:54:15:b7:35:70:a6:87:e0:cc:a6:c7:62:ad:e7:f6:36:
21:bb:c5:e0:00:75:bd:c2:5b:21:b0:2a:2a:91:be:1d:67:d9:
46:96:da:27:cd:d6:3e:8d:98:d2:0f:2e:49:d3:c1:cd:f0:c5:
90:e8:16:a6:9a:76:6f:a9:b3:0c:77:22:73:90:9f:5f:c4:ba:
5f:2e:38:2a:b5:91:a2:a0:9d:b9:37:7f:6b:6b:ee:54:7b:37:
f4:08:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:19 2024 by rpki-client on console-fra.rpki-client.org