Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier: qV8Ky049poEVSe11f7+D7hrgc/AnBWq9IDAalfFquV0=
Subject key identifier: F5:F9:A6:87:92:CC:B8:04:46:1E:4E:69:54:0D:37:96:B7:F0:51:5E
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer: /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial: 01935B0AC19FF54A8FAA8BB15B9B64C0F4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number: 0D01
Signing time: Sat 23 Nov 2024 22:00:51 +0000
Manifest this update: Sat 23 Nov 2024 22:00:51 +0000
Manifest next update: Sun 24 Nov 2024 22:00:51 +0000
Files and hashes: 1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: obuZMCey87ckC46X7Z3+LIEId4JoSErPicDAKe1HPdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:0a:c1:9f:f5:4a:8f:aa:8b:b1:5b:9b:64:c0:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
Validity
Not Before: Nov 23 22:00:51 2024 GMT
Not After : Nov 24 22:00:51 2024 GMT
Subject: CN=f5f9a68792ccb804461e4e69540d3796b7f0515e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:45:66:b1:82:24:5e:bb:93:44:a8:32:4b:88:
c8:03:0b:b7:6e:1e:f6:8c:db:95:c7:0d:e0:05:7f:
8a:af:f6:ac:1f:b9:d2:73:53:e7:ad:d8:61:07:41:
ff:85:aa:f9:d0:a9:1f:b7:f3:81:3f:46:ee:b0:15:
93:a0:64:61:b7:b0:d1:c5:5c:4c:2d:da:cd:2a:e6:
a8:26:b6:2f:ab:79:65:47:ff:4c:9c:d4:55:c5:b8:
c5:60:01:47:bf:71:3b:3e:ed:e5:f1:93:c9:d3:54:
37:7f:f1:d7:9c:5b:30:c2:f9:a9:1b:d5:0b:a0:db:
6d:59:a8:bc:ba:ef:e1:0c:c4:a9:3b:af:ae:be:f7:
3d:d1:38:68:68:c3:c9:9a:51:c7:14:1e:c6:51:8a:
84:c0:4a:d2:5e:9e:14:27:fd:8a:ff:65:ff:cf:8c:
0f:3b:15:15:db:97:31:cb:d9:04:a7:7e:ad:52:43:
fb:45:48:3b:37:6b:de:e0:23:4b:58:3c:97:d2:0e:
78:3f:c2:8a:8c:ec:a9:d5:e7:bb:72:8c:64:4e:6f:
96:9d:a0:58:7f:ec:09:be:18:56:43:72:c5:5a:ff:
f3:bc:47:94:53:cd:5f:d6:c9:0b:46:bd:6a:c1:87:
20:5b:87:35:75:8e:14:5f:f6:cb:a8:4a:4c:68:4d:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:A6:87:92:CC:B8:04:46:1E:4E:69:54:0D:37:96:B7:F0:51:5E
X509v3 Authority Key Identifier:
keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:02:f5:e9:a7:41:43:f5:24:3b:90:48:99:b0:24:29:10:
af:20:df:88:7b:8e:3c:25:57:38:0d:41:52:be:89:e9:ff:c3:
93:dd:3a:8e:b1:db:48:18:a8:c3:76:73:5a:f9:b6:c5:71:75:
32:84:91:5d:27:8f:e2:aa:77:d6:04:27:99:78:1f:05:4d:a0:
a6:11:a0:6a:81:46:ed:c4:70:3d:40:c4:e9:6c:b0:a9:fc:59:
82:26:e1:04:3b:61:4e:cf:27:37:77:e8:18:7f:87:ed:1d:b3:
24:4d:be:69:44:f7:27:ff:75:a7:2b:e8:98:12:7b:de:fa:a1:
5f:31:8c:a4:20:c5:81:01:a4:ce:4b:c2:c9:07:1a:a4:79:b7:
f0:0d:b7:ef:cb:0b:e9:aa:a0:14:21:51:82:7c:2a:bd:f9:04:
ee:3e:1b:df:2b:a1:41:8d:21:79:9d:61:35:2e:5d:1c:79:fc:
cf:2a:70:8c:94:ec:78:fa:73:df:24:8a:70:ab:36:cd:b0:df:
23:df:06:a4:c6:0c:ff:c8:b8:5a:68:5d:55:9a:fe:92:bd:55:
18:79:ac:16:28:39:dd:32:bc:7f:85:28:aa:17:c0:b8:a4:36:
99:91:66:1c:2d:a0:79:84:d1:6c:e4:13:12:b4:8e:a1:2d:cb:
47:b1:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:42:40 2024 by rpki-client on console-fra.rpki-client.org