Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: FLMYaX6mDmAl0r2gKaeOBt4SCRHvyOut1iiHA7Vb7aE=
Subject key identifier: A3:EB:05:CB:AB:D0:81:C2:1E:35:0A:8B:BC:28:AD:68:35:44:74:33
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 0193568B6141EF509269FF15C54AEB449DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 07D8
Signing time: Sat 23 Nov 2024 01:03:15 +0000
Manifest this update: Sat 23 Nov 2024 01:03:15 +0000
Manifest next update: Sun 24 Nov 2024 01:03:15 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: AtSSCoalfwusWiaTN5JGzLb4hEjXgCxm+SB/xyjlhPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:61:41:ef:50:92:69:ff:15:c5:4a:eb:44:9d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Nov 23 01:03:15 2024 GMT
Not After : Nov 24 01:03:15 2024 GMT
Subject: CN=a3eb05cbabd081c21e350a8bbc28ad6835447433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:c7:eb:de:fc:9d:20:65:ef:97:38:c6:9e:
8f:a4:8b:fd:30:6a:68:14:18:26:c7:11:77:82:17:
34:84:42:ec:c0:32:0e:2c:ec:22:70:46:e8:62:f3:
93:82:80:c3:60:24:93:06:8c:b3:9d:ac:73:3f:87:
9b:b2:c0:1b:28:6e:dd:7f:ea:33:6c:cb:51:05:55:
92:99:9c:19:ac:67:54:db:ab:cb:ef:9b:44:6b:e0:
62:20:0f:2e:8f:1e:e6:98:14:13:a1:a5:ca:41:1e:
de:fe:d4:85:07:71:4e:36:dd:4c:a7:04:60:1d:6e:
e5:92:5f:e9:07:6e:a1:c3:db:35:49:89:72:8c:9b:
73:5f:c8:25:54:cf:fd:d1:41:42:d0:d2:43:46:b1:
f7:6f:86:c6:4d:83:ab:f1:73:ef:42:9a:1e:b6:00:
1c:54:e2:4d:6c:4e:14:30:dc:17:14:11:f0:05:3c:
97:db:c3:0b:4e:4c:3e:a0:fc:02:e1:55:a3:c9:fd:
53:b2:6c:28:69:f8:5a:30:19:1a:7a:7f:f9:1c:22:
74:b6:83:58:e5:9a:1e:1b:8b:55:25:ed:73:fb:63:
79:6b:c9:62:04:bc:ce:14:09:4b:1d:70:ba:e8:d8:
61:71:d5:2d:6e:d5:a3:dd:7e:56:26:5c:87:88:80:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:05:CB:AB:D0:81:C2:1E:35:0A:8B:BC:28:AD:68:35:44:74:33
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f5:51:f2:69:2d:1e:c7:20:09:56:66:a8:c5:49:4f:5f:52:
d0:71:1f:f3:20:5f:e8:6b:34:cd:59:f0:a8:43:ec:73:c8:7d:
14:5b:a1:f7:8d:c6:74:7b:90:89:c4:05:bd:cc:f5:3f:56:08:
aa:61:28:9d:b2:cd:c9:f9:62:e3:cf:ea:4e:7f:1d:4c:c8:53:
a8:f5:5c:24:51:6e:d7:97:ef:96:64:f7:85:80:6f:37:c0:7b:
ca:76:ae:f5:bc:cf:24:b5:76:ef:17:05:e5:5c:94:c5:4e:e9:
86:a1:b1:94:e0:0f:05:23:46:9c:e5:57:4b:4d:88:e2:5a:27:
2f:fb:93:a5:82:a2:f3:14:df:5e:cb:9f:06:d9:45:0e:fe:81:
1b:ee:73:9a:91:ce:e6:29:e5:05:c0:b3:14:cb:74:0e:88:bf:
fa:02:a2:3c:b2:f2:6c:68:5d:75:df:7f:18:21:fc:19:f0:7f:
52:01:0f:f9:82:87:7c:28:bc:56:04:c0:89:e4:3a:0a:18:58:
7a:50:31:a9:1a:59:f3:e3:75:d0:70:b7:6b:5c:71:ac:4b:14:
5b:b3:45:97:90:10:1d:d4:53:8a:25:c9:0a:3d:d9:6f:4a:b1:
91:b2:3c:bd:d6:37:84:f5:2f:93:1f:63:7a:6a:6c:6a:fb:f4:
b4:ae:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:43 2024 by rpki-client on console-ams.rpki-client.org