Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: l4TPHC3ebSwC5dzJtLCjsZWi6QGTivfRTWZQhfOwwgA=
Subject key identifier: 11:24:E3:06:E8:13:C0:7C:47:B3:8D:38:55:9F:03:FE:D5:7B:95:43
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 019356F72445EC740482A94B38823CA358BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 041F
Signing time: Sat 23 Nov 2024 03:00:57 +0000
Manifest this update: Sat 23 Nov 2024 03:00:57 +0000
Manifest next update: Sun 24 Nov 2024 03:00:57 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: zv3ow9koM6Ev0bcvKETckJNQICxFpQSjjtR/HS4zifI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:24:45:ec:74:04:82:a9:4b:38:82:3c:a3:58:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Nov 23 03:00:57 2024 GMT
Not After : Nov 24 03:00:57 2024 GMT
Subject: CN=1124e306e813c07c47b38d38559f03fed57b9543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:2d:46:fb:12:6c:80:df:c0:69:c4:6c:a4:
9e:57:c8:c3:bf:08:6a:6f:a7:51:d9:7f:9d:67:01:
40:2e:67:b3:a6:08:f8:1d:2c:e6:e9:40:b5:8f:c7:
07:ef:20:8a:17:6d:7a:14:70:00:00:e0:b0:31:e9:
08:a7:6c:bc:77:9d:69:0c:0d:a9:dd:32:14:f6:0c:
e0:79:91:9e:dd:6a:40:3d:b8:5b:92:76:59:f3:63:
38:1b:50:0c:14:55:24:3e:35:e7:11:9c:af:f1:95:
7d:16:a6:ce:c1:54:db:80:94:15:7f:e1:44:46:75:
c6:97:87:70:12:c1:5c:95:fc:e3:54:79:4e:3b:a8:
e9:53:00:f6:28:c7:6b:f9:9c:f8:37:86:3e:a7:ae:
ea:48:27:ee:e3:51:e0:34:36:d6:c4:6c:9f:8a:df:
11:32:b5:35:ba:e9:3e:98:ec:fd:d3:e2:ec:5c:b0:
ae:0c:b3:f9:a3:a0:7d:2c:f3:89:16:02:d4:50:9b:
bf:4c:ce:89:45:57:7b:c5:f1:1d:6f:8e:bb:e6:b6:
c5:ac:fb:f0:91:9e:75:c5:cb:29:ab:ec:42:76:86:
a7:cc:09:7e:9a:1d:f4:b6:09:f9:b7:b1:33:c1:61:
4d:77:4a:55:dc:03:8b:32:52:8a:bd:21:7f:b6:96:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:24:E3:06:E8:13:C0:7C:47:B3:8D:38:55:9F:03:FE:D5:7B:95:43
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:16:fe:cd:49:9b:8a:3d:72:f0:5f:0a:11:62:38:6f:7a:fd:
89:78:3e:50:bc:c7:90:1c:1a:59:ba:e0:5f:88:2b:9d:b5:a4:
ea:5f:da:48:03:75:38:47:31:67:b3:b6:ca:e4:52:16:49:9c:
77:6c:14:50:ae:e2:4b:dd:a4:b0:f3:9f:5d:3c:15:2e:ce:6f:
64:5b:88:8f:fe:2d:63:3b:36:ec:d8:f4:70:1e:e3:0e:cb:b1:
e4:07:e2:85:9b:71:13:c1:6c:b4:ec:a5:82:e8:6c:39:82:b2:
a9:4a:5e:ae:9f:0e:51:00:5b:1d:c6:ba:77:d8:6e:30:4f:b4:
10:e8:db:3a:d9:aa:7a:1d:49:2e:67:a6:67:23:a1:57:94:84:
ed:d7:95:de:56:84:7c:3b:7d:ac:24:ca:aa:46:ac:20:0f:fd:
9b:b9:f2:4d:7a:58:18:63:e8:84:55:77:47:43:4e:32:09:38:
a1:7d:20:0e:c4:50:20:63:26:d8:98:2c:19:78:db:6e:86:83:
46:ae:6d:c6:a0:87:b3:11:6b:1f:24:7d:96:67:78:e6:68:8c:
01:ff:5b:86:75:8b:17:13:a1:b2:d2:6e:08:28:70:18:8a:c0:
f4:e0:85:80:26:08:a5:ae:13:39:18:f1:bb:00:9f:cb:9d:a5:
77:de:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:03 2024 by rpki-client on console-fra.rpki-client.org