Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: u/+IBNXZEE0LRCFCyEPq5VYm5DudU6fYOQD+nyF1E8g=
Subject key identifier: 32:4D:EC:87:79:72:CD:6B:3E:72:BD:09:78:F9:75:09:60:89:7E:C6
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 018F91CC6521BED0B53F3E72F6C29CD2C521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 0E9F
Signing time: Sun 19 May 2024 17:00:42 +0000
Manifest this update: Sun 19 May 2024 17:00:42 +0000
Manifest next update: Mon 20 May 2024 17:00:42 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: Wom9OqsklXKKltUz5cmqSslzmZrHK+TOI370v0KorQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:91:cc:65:21:be:d0:b5:3f:3e:72:f6:c2:9c:d2:c5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: May 19 17:00:42 2024 GMT
Not After : May 20 17:00:42 2024 GMT
Subject: CN=324dec877972cd6b3e72bd0978f9750960897ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:32:49:76:22:36:12:fa:46:6d:ae:b9:86:
52:8a:ff:a4:b6:d5:1b:4d:f5:26:61:63:92:0b:7f:
4b:b9:c1:6f:07:bb:c9:d4:87:23:bb:1d:d0:74:41:
3c:c5:06:c4:0e:01:25:2c:40:26:23:52:81:89:a9:
8f:90:44:5f:98:90:16:28:12:43:70:6c:13:f8:51:
85:df:81:92:86:37:53:83:da:91:4a:70:ac:50:58:
e0:2d:76:4c:ae:a5:6c:3b:3b:c4:76:27:8e:5e:a2:
31:f7:6d:f7:6a:78:35:8e:2b:54:60:b3:65:a3:78:
96:9a:ab:9a:30:4f:9c:30:76:60:a4:7a:cc:51:5e:
57:be:08:56:02:6c:84:eb:d1:45:71:cb:71:53:a3:
59:29:83:98:a5:ba:11:6b:15:5b:e7:04:1f:2d:8d:
60:4a:8f:ba:f1:c5:cc:2e:bb:27:c7:5e:ea:09:89:
19:96:ef:40:29:aa:6d:cd:ca:64:d4:ea:9a:c8:cf:
8a:65:41:19:58:b0:e7:2d:83:e8:aa:5f:f3:01:02:
8d:ed:fa:85:05:f2:72:68:c0:bf:3b:79:c4:20:0c:
5a:79:30:73:6f:24:c9:57:7d:df:0a:90:50:ea:51:
a9:12:e5:39:67:e7:70:71:b0:5b:cc:98:de:65:cf:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:EC:87:79:72:CD:6B:3E:72:BD:09:78:F9:75:09:60:89:7E:C6
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:1c:aa:a8:45:f0:89:88:b4:d4:9f:c1:65:94:09:45:31:
98:53:ab:f2:6a:13:0f:df:23:08:e0:b2:79:60:2c:99:ca:d5:
ce:28:65:de:65:ac:1c:d8:9c:5f:84:64:a4:a1:f5:43:91:26:
99:98:20:f6:c6:f0:11:1b:25:94:1f:7b:be:ff:1b:5c:64:b6:
8b:57:39:fc:fa:eb:c8:f3:4c:5c:cb:3d:f3:59:22:02:bf:0a:
06:0e:56:a3:db:a3:3b:35:d2:ea:99:95:34:65:90:85:65:e6:
07:24:74:32:59:6d:d7:fd:eb:f4:d4:e8:8c:8e:6c:53:b5:c9:
d1:85:21:d8:f5:4f:40:4c:d3:b7:64:50:5b:37:70:fe:fa:ed:
64:a4:5b:d1:e8:8a:7d:c4:de:10:0a:78:ee:df:bb:07:0e:b0:
c9:c3:57:b7:7c:33:9e:98:1b:01:d7:87:5d:a7:15:66:02:dd:
95:f7:43:27:d0:1f:b5:31:6c:62:d7:c6:4a:1d:2b:dc:84:a4:
d8:7e:8a:ef:1a:e0:dc:0b:2c:10:0e:3b:a6:ab:ef:07:51:bd:
3c:be:63:fa:ee:5e:a8:e6:72:1c:b1:13:68:55:c9:4a:ef:3d:
2d:26:f1:44:f6:e6:39:22:e2:00:8c:f7:eb:19:c5:f9:9a:4f:
08:79:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:00:34 2024 by rpki-client on console-ams.rpki-client.org