Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
File: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft (raw, json)
Hash identifier: X3LzoqvsbwiV/vCWOZJGvYeaptZg/uKn5xc/a71kUUc=
Subject key identifier: BC:78:08:8F:96:40:D2:D7:63:7D:BC:45:5B:1A:9A:71:3D:46:84:38
Authority key identifier: D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
Certificate issuer: /CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Certificate serial: 01935A9C7C7D0665D3683E2C5A1962DF6947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
Manifest number: 0920
Signing time: Sat 23 Nov 2024 20:00:25 +0000
Manifest this update: Sat 23 Nov 2024 20:00:25 +0000
Manifest next update: Sun 24 Nov 2024 20:00:25 +0000
Files and hashes: 1: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl (hash: xCHDuFg8yDCgD/rLrroeXM/VeNajqo6Sxh6htWqiZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:9c:7c:7d:06:65:d3:68:3e:2c:5a:19:62:df:69:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Validity
Not Before: Nov 23 20:00:25 2024 GMT
Not After : Nov 24 20:00:25 2024 GMT
Subject: CN=bc78088f9640d2d7637dbc455b1a9a713d468438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:26:d0:57:b7:3a:33:90:ac:34:3a:a5:00:
79:41:c1:66:84:f2:45:f1:a3:0e:34:84:ac:62:5f:
99:28:e7:ab:91:e5:a6:a3:2a:07:89:cf:7b:46:a4:
82:35:72:fe:3c:b2:c2:e7:54:e6:12:11:89:82:f0:
3e:55:9a:11:ef:98:55:72:59:d9:e4:00:78:c2:a8:
ee:69:cc:9c:67:51:f4:f0:ec:a6:3d:7c:e0:70:e2:
ad:8a:a8:da:0e:86:e2:36:cd:eb:7d:bc:8d:ae:87:
f1:81:78:d6:4a:13:9c:62:c5:16:a3:a3:25:2c:4a:
c1:63:50:39:9e:08:a2:33:fc:28:4d:8f:ea:bd:1a:
87:a2:8d:82:15:90:2b:16:e9:e7:40:77:44:e1:88:
e5:50:b2:46:bf:b9:cd:b3:fd:aa:96:78:22:df:73:
f4:a2:50:0f:1b:41:ee:fc:98:11:7c:73:e3:cc:7d:
6a:a4:0b:79:8d:5c:54:d0:93:eb:87:4a:0e:5e:7f:
c6:8c:08:1b:57:f0:4d:1d:c6:56:12:33:5c:ce:a0:
a6:3f:d0:1d:d9:2a:6a:2e:a3:48:53:3e:e2:e6:84:
85:f2:e7:a2:8d:a8:c1:23:95:f1:a7:d2:c6:d2:93:
95:80:fb:d1:51:95:93:3e:ba:89:dc:18:98:6a:0d:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:78:08:8F:96:40:D2:D7:63:7D:BC:45:5B:1A:9A:71:3D:46:84:38
X509v3 Authority Key Identifier:
keyid:D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:59:93:b0:ff:5c:5a:40:0d:dc:d5:41:14:f7:95:f0:9a:90:
37:0d:8d:df:65:84:81:2a:6a:10:b6:ff:85:6f:66:24:11:8e:
9b:6d:f8:71:5b:d0:f6:70:5a:d2:8d:93:20:9b:9b:96:ce:e9:
de:9d:26:fe:c0:ed:bc:87:7b:58:61:e7:1c:a5:4d:7c:1c:c4:
c9:fd:3e:86:a2:7a:55:d3:9d:0e:eb:ed:fc:52:ec:f6:74:8d:
e9:72:3a:b7:51:98:36:d0:42:f1:a4:59:4a:1f:c5:82:ca:61:
9b:2c:e9:63:22:25:85:b5:ea:c4:2a:4b:bb:fa:47:20:4c:af:
6b:b1:ef:a4:0e:55:5e:b3:19:d7:6a:4b:fe:a6:c9:0c:fe:78:
e5:93:7d:92:e0:c4:f1:16:6d:d3:27:53:88:a6:28:1e:12:ed:
44:4b:ed:d6:cf:74:09:89:ed:4e:67:60:7f:b0:47:1a:53:7d:
9f:9b:12:f1:7a:e8:72:3d:5a:78:31:62:1a:d4:9f:ee:1a:1a:
07:53:4a:3d:cd:cb:2c:fc:41:fb:b6:a7:80:46:9f:ba:05:c1:
d3:2d:3b:b9:25:03:8a:c5:10:a1:d7:d9:c7:23:5b:fc:3f:1f:
e4:6f:7d:2a:4e:8f:ab:16:4a:14:cc:79:de:24:3f:70:56:35:
85:d6:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:01:05 2024 by rpki-client on console-fra.rpki-client.org