Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: k0BF5sK0iQ/a82m++lvzYcRjKSVPDklNIFF4Ek21Flw=
Subject key identifier: 50:F2:5C:6F:CF:E2:55:3D:77:C6:7A:0A:F2:E5:31:8D:ED:4A:BF:9F
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019234DE16218BCD032CB2FD6B7889FAA018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 0BD7
Signing time: Fri 27 Sep 2024 19:03:42 +0000
Manifest this update: Fri 27 Sep 2024 19:03:42 +0000
Manifest next update: Sat 28 Sep 2024 19:03:42 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: H3hbZqp9Ge5Njr1wf4P2mJVBTx2YzeoNa/0tA+PXv7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:de:16:21:8b:cd:03:2c:b2:fd:6b:78:89:fa:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Sep 27 19:03:42 2024 GMT
Not After : Sep 28 19:03:42 2024 GMT
Subject: CN=50f25c6fcfe2553d77c67a0af2e5318ded4abf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:f3:96:f7:be:e2:d8:2e:0f:e4:e0:7d:59:
e6:dc:bc:2e:7c:95:7f:d5:61:66:d1:88:e7:f8:bb:
b1:a1:19:1d:2d:68:6f:6f:33:50:42:23:b8:a2:f5:
c6:74:02:35:ee:4f:75:98:7a:5e:83:f6:20:8c:c5:
6d:0d:d1:ab:88:9c:1b:df:bb:71:da:68:9e:9c:18:
ea:24:47:46:b9:40:ee:97:4b:78:b2:9e:d5:29:e2:
e9:82:0b:5d:79:ac:d9:a0:e9:60:1e:61:b9:cc:65:
96:b7:90:9d:55:d5:95:06:1b:5f:a4:c4:a8:df:1a:
54:7d:06:05:91:b3:c4:8e:90:9c:09:39:02:c7:a3:
d3:c0:0d:85:86:eb:7f:a4:c6:dd:6a:4b:b7:11:e5:
45:ee:c3:af:b5:4e:e4:ab:81:c0:25:45:23:0e:5f:
6c:36:5f:8e:e8:8c:2b:c8:6f:cc:e6:1c:3e:c8:4b:
fb:a8:7b:88:b8:e8:d2:81:20:7e:41:0c:64:85:a3:
26:6a:7f:a8:54:1e:9e:85:a6:5b:1f:c0:84:1b:5d:
08:d0:8b:82:2b:37:02:a8:a0:aa:7b:f5:28:37:b3:
35:87:98:de:da:38:4c:fd:49:5f:8e:cd:9c:05:01:
2f:94:e4:82:b8:d6:aa:71:7f:5a:b2:12:79:18:81:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:5C:6F:CF:E2:55:3D:77:C6:7A:0A:F2:E5:31:8D:ED:4A:BF:9F
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:92:be:7d:a2:1d:8d:ec:40:1e:d7:3d:37:e6:47:fd:ab:
99:19:5e:1b:68:1f:c7:83:2e:23:f5:a9:b7:fc:67:94:13:e1:
06:5a:19:47:66:e2:f1:25:85:99:32:81:5d:e0:04:59:38:5a:
a0:01:c7:1a:ca:4e:4d:a3:5b:f3:62:2c:a9:10:12:b0:09:8d:
70:36:16:ef:b8:cc:ec:69:ab:d9:39:ea:ee:cb:70:17:fe:56:
8a:1e:d1:34:64:a0:41:e5:18:c1:9a:7c:0a:8f:da:ff:4f:82:
3e:37:ba:dd:89:0f:6a:13:d7:48:dc:05:d0:bf:3e:50:82:67:
d5:ae:8c:e2:a2:92:eb:db:d8:6b:58:24:e7:a0:4a:51:a1:27:
00:a6:0c:90:7a:00:3d:2b:32:ed:4c:e8:be:59:23:b2:23:67:
9c:73:2a:36:25:8a:01:3d:c3:80:6e:05:7b:e3:8e:e0:f7:a3:
f8:f6:26:1d:af:f8:34:f0:bb:b0:c1:71:69:71:2a:64:dc:a8:
17:0b:a0:48:03:4d:78:36:10:3e:5a:69:b1:ad:86:4e:93:83:
81:6f:9c:6e:4d:ab:4f:21:4f:e5:b2:9b:4c:6e:a3:50:23:9e:
60:fc:37:1b:92:18:49:a9:20:fd:93:62:1d:be:08:89:c3:81:
fa:2d:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:21:35 2024 by rpki-client on console-fra.rpki-client.org