Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
File: brSehwcSq7ZLGajs62HlGo4MF2g.mft (raw, json)
Hash identifier: Lpjymke3hRqn7J6CbNWnKWY3l4R/0oVJMOYE3pExlQQ=
Subject key identifier: 43:B7:26:86:E1:74:47:5C:51:39:D2:2D:BD:17:BE:52:34:37:B0:79
Authority key identifier: 6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
Certificate issuer: /CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Certificate serial: 019356F73BCD892877A581CB80C5699E5EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
Manifest number: 0922
Signing time: Sat 23 Nov 2024 03:01:03 +0000
Manifest this update: Sat 23 Nov 2024 03:01:03 +0000
Manifest next update: Sun 24 Nov 2024 03:01:03 +0000
Files and hashes: 1: brSehwcSq7ZLGajs62HlGo4MF2g.crl (hash: vNqs2ERVZT9lR0hPqN3X20xz113eqLoL9QQtILrx18U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:3b:cd:89:28:77:a5:81:cb:80:c5:69:9e:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb49e870712abb64b19a8eceb61e51a8e0c1768
Validity
Not Before: Nov 23 03:01:03 2024 GMT
Not After : Nov 24 03:01:03 2024 GMT
Subject: CN=43b72686e174475c5139d22dbd17be523437b079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:4e:9d:9b:38:6b:fd:f7:e4:4c:73:40:ab:
49:24:00:d9:57:84:e9:c4:5b:f4:85:85:4f:e9:49:
90:95:e2:ae:1d:f5:11:20:67:fb:bb:56:a2:f6:b2:
6f:50:be:78:84:cf:31:bd:84:8d:b4:ed:25:2e:4c:
1e:72:c1:83:3d:56:b3:48:92:e3:24:78:e3:3a:19:
12:6d:f9:4c:c1:ed:dd:44:3e:55:0e:e0:d3:c3:30:
b8:9e:a0:fc:1c:c2:69:d4:e4:fc:58:2e:44:14:47:
65:7b:74:dc:0d:fc:ba:e8:17:04:d4:b5:d4:e0:d0:
b5:26:2a:d5:a6:89:07:54:db:8b:5d:d9:5a:e2:a9:
9b:4e:c0:db:89:4b:31:0a:ae:70:e3:27:08:0c:4c:
09:a2:28:5b:a8:1b:8b:95:41:80:2d:c7:4d:55:80:
c6:af:f4:73:fa:9e:1b:f4:b9:bf:af:ae:3f:36:f4:
6c:f6:70:c1:eb:15:4f:3d:08:53:78:5b:37:b9:40:
f2:16:a7:c3:7c:cf:2b:e4:c4:57:5d:f8:d4:2a:c5:
69:0e:17:d1:7a:d3:9c:59:7d:95:56:7d:54:8f:c6:
9b:f5:92:91:ec:3e:8a:17:ce:aa:b4:6f:d3:9d:9e:
82:82:e3:b2:60:fd:25:fb:09:73:ec:d3:6a:16:c0:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:26:86:E1:74:47:5C:51:39:D2:2D:BD:17:BE:52:34:37:B0:79
X509v3 Authority Key Identifier:
keyid:6E:B4:9E:87:07:12:AB:B6:4B:19:A8:EC:EB:61:E5:1A:8E:0C:17:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brSehwcSq7ZLGajs62HlGo4MF2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/371f8f-8ea6-47a4-8959-9fc3babbafdf/1/brSehwcSq7ZLGajs62HlGo4MF2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:eb:6a:d5:a0:6d:35:fa:f4:e4:22:b0:f0:30:9c:b1:ae:
66:7a:62:08:34:85:ab:d6:72:8c:65:9e:95:ae:c1:6a:ce:9f:
18:88:a7:3c:83:de:6e:d4:b8:24:f4:e8:b5:76:d3:90:30:8c:
45:fc:3b:3c:08:48:65:1f:73:2b:ad:3d:2b:78:24:c9:cd:81:
8b:a5:c4:78:60:80:7a:ea:36:77:94:21:14:a4:c3:58:69:b3:
f7:51:1d:8c:61:63:da:3d:95:1d:f0:af:3d:16:35:d1:85:aa:
67:92:6f:23:94:a4:eb:41:d0:d0:79:ff:68:55:e5:39:ea:f8:
cf:52:31:19:07:4b:be:5d:df:f6:06:34:b4:a7:f4:d3:3e:4d:
df:46:0e:71:e5:81:34:50:00:b5:a9:e4:0e:4b:b3:8d:02:5c:
20:71:ce:30:8f:36:f7:14:40:eb:1a:8b:38:86:85:ea:88:ea:
49:f2:f2:76:4b:e5:d0:72:23:20:76:dd:9c:1c:16:53:42:43:
cd:68:a5:95:45:f4:f8:fe:fc:f6:9c:3b:16:a8:fb:87:37:a9:
84:33:16:c8:b6:95:44:6d:33:ff:d7:1f:a5:bc:e7:da:74:43:
46:70:80:47:03:57:ef:01:4f:dd:a4:9c:f0:1a:e4:d0:b3:97:
f9:a0:29:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:42 2024 by rpki-client on console-ams.rpki-client.org