Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: TqPUQsLMMsVq/5a8qmILdluanM+4MtEchqqy8y6hHyk=
Subject key identifier: DF:4B:9D:01:21:F6:1A:0A:2A:3F:8A:23:0F:9C:A5:23:80:19:A7:5C
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 0192F109E7F842AFD22CF068658930A0DFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 01BB
Signing time: Sun 03 Nov 2024 08:00:11 +0000
Manifest this update: Sun 03 Nov 2024 08:00:11 +0000
Manifest next update: Mon 04 Nov 2024 08:00:11 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: CJyN0Om99jin5UaSAvIuUPRBl4LKoGKXw3Cy4xqgx2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Nov 2024 04:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:09:e7:f8:42:af:d2:2c:f0:68:65:89:30:a0:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Nov 3 08:00:11 2024 GMT
Not After : Nov 4 08:00:11 2024 GMT
Subject: CN=df4b9d0121f61a0a2a3f8a230f9ca5238019a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:31:d5:70:1f:d6:fe:da:68:79:21:ea:cc:
6d:75:9e:54:57:c6:e1:5d:04:f6:c5:61:a6:07:17:
a1:3a:fb:fc:7b:c2:43:49:e2:a6:5d:69:04:6d:50:
34:87:e2:9e:7b:5e:ca:ab:09:4f:5f:ee:02:ba:97:
29:d3:90:ba:9e:62:90:25:1e:01:0e:09:2a:b5:f4:
95:38:b6:0f:5f:79:00:13:14:ff:e3:ea:90:bb:0d:
20:d4:79:6c:7a:82:c5:66:0d:c2:31:2d:d2:b4:34:
45:f7:4b:74:ae:3c:d3:d3:08:a1:ed:ba:68:cd:bf:
de:81:c7:d8:0e:37:5e:c2:65:59:ab:64:cb:79:7d:
96:71:7c:ed:4a:cb:6f:c8:c3:da:86:16:5e:27:53:
4d:d6:93:4e:cb:8e:5c:c1:24:d7:b5:bf:40:40:6b:
d6:ff:7a:68:ab:d6:1b:4e:4f:cb:55:67:fc:85:95:
db:15:85:85:93:ca:d5:62:04:14:cc:4b:b0:45:63:
90:80:12:04:f5:99:0b:0b:3e:78:e2:d4:77:5a:c3:
60:79:4f:b9:7c:d9:b1:b0:84:75:3b:cb:d0:e5:d3:
f8:f5:19:9d:33:88:8b:28:6b:60:37:3b:d6:c2:2c:
b0:88:32:65:a2:04:ec:16:2b:5a:81:c7:d8:72:2a:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:9D:01:21:F6:1A:0A:2A:3F:8A:23:0F:9C:A5:23:80:19:A7:5C
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:4a:9e:97:5b:74:92:c6:1e:17:dc:b9:94:16:90:c2:c4:
e1:9f:62:67:b2:9b:85:59:b2:91:81:8c:d1:17:f1:1b:9d:40:
e9:f2:8d:2e:75:62:12:06:d0:40:5a:43:27:83:fb:e1:af:7b:
f5:f1:3c:f9:30:15:bf:c7:3e:ff:4d:80:68:e6:80:0f:4b:dc:
ef:e9:3d:ad:9d:6d:0e:cb:83:6a:06:28:eb:bd:33:74:c9:26:
73:7f:17:8b:1a:e4:26:b9:8f:f4:83:fc:a4:11:80:8e:94:2c:
24:b9:36:02:f5:4d:80:1e:4d:1a:b6:30:ac:76:ea:3f:9c:c1:
5a:6a:9d:ab:14:ac:18:a3:35:ad:aa:b5:86:c1:ca:5e:44:46:
4b:df:d9:a0:ac:f1:55:fc:9c:e5:74:9c:bb:54:3a:50:39:5c:
55:07:94:b0:67:57:7e:fe:d4:fa:13:91:0c:4a:5d:35:bc:b6:
15:8f:66:9a:b9:d7:1f:8f:20:4f:f0:f8:a1:33:bf:57:d7:0e:
84:01:57:f9:7d:f9:dd:c8:f7:50:f5:8d:56:84:62:d0:bb:f0:
fe:94:a9:e4:9e:a9:cb:63:ba:b0:c2:c1:8a:b7:8c:96:75:ba:
b9:1b:a9:62:83:d1:7c:19:3e:79:97:a1:40:06:41:ab:33:d0:
2f:42:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:41:08 2024 by rpki-client on console-fra.rpki-client.org