Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
File: IyYoKFK1RzuXS_-ersILA6XyAQ4.mft (raw, json)
Hash identifier: lUd8SsBoQo/bn0EBWqutz3LIEVdNtfLX7cfK1wqgpeY=
Subject key identifier: 0C:0E:CE:FE:A3:30:1A:36:42:04:2F:60:95:62:AF:75:D1:78:4E:13
Authority key identifier: 23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
Certificate issuer: /CN=2326282852b5473b974bff9eaec20b03a5f2010e
Certificate serial: 019357D247941952D0EDE45B6BE704E9615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
Manifest number: 70
Signing time: Sat 23 Nov 2024 07:00:18 +0000
Manifest this update: Sat 23 Nov 2024 07:00:18 +0000
Manifest next update: Sun 24 Nov 2024 07:00:18 +0000
Files and hashes: 1: IyYoKFK1RzuXS_-ersILA6XyAQ4.crl (hash: yHbP4repmDMkWA3vfEOwhEjVQaU3DXd6+eQqZ5t4THg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:47:94:19:52:d0:ed:e4:5b:6b:e7:04:e9:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326282852b5473b974bff9eaec20b03a5f2010e
Validity
Not Before: Nov 23 07:00:18 2024 GMT
Not After : Nov 24 07:00:18 2024 GMT
Subject: CN=0c0ecefea3301a3642042f609562af75d1784e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:0c:cf:2a:67:60:c5:26:53:6e:59:06:1f:
81:e5:7d:81:1d:9f:b4:26:ee:b2:a9:91:50:16:7c:
ec:61:1b:c2:96:7f:97:90:9e:47:1d:a4:6c:aa:8a:
49:14:eb:bf:09:cc:7b:e5:97:04:00:d6:f2:56:09:
e3:0c:0e:5a:f1:25:cf:4d:3a:17:44:43:d4:37:fb:
ed:de:41:1a:9f:44:30:d7:85:a4:5b:0e:a5:08:1f:
fb:05:6f:a4:7f:5b:39:19:b6:07:7c:55:fa:af:9c:
87:dd:38:6c:b9:0e:2c:a9:0c:62:7b:67:f9:9d:8d:
de:5c:ff:54:9c:5d:2d:3e:8a:c5:bf:53:7f:fe:a5:
74:53:79:67:54:3d:e1:f2:eb:30:fe:6e:22:1d:c8:
94:f7:f0:63:5f:2d:66:50:eb:e8:51:56:da:94:4d:
1d:16:70:04:ff:6e:03:fb:ba:a1:29:cd:82:28:27:
f9:ef:c4:04:99:12:6a:47:07:b4:c8:ee:b5:84:4b:
49:4b:b5:23:e1:90:67:68:8b:89:51:99:d4:42:eb:
b7:7b:ea:88:9f:b9:3d:8b:d1:88:29:5b:35:a7:e4:
1b:f1:0a:24:d0:52:40:92:02:32:70:77:42:a3:83:
26:c5:31:d7:3c:93:9c:87:1d:89:4a:ab:1d:0e:fa:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:CE:FE:A3:30:1A:36:42:04:2F:60:95:62:AF:75:D1:78:4E:13
X509v3 Authority Key Identifier:
keyid:23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:08:04:98:db:14:4b:cc:3b:73:6c:ba:d0:cd:48:ae:25:97:
75:b0:6c:e6:89:ba:da:24:86:39:39:a1:af:e1:94:3e:2c:c6:
9a:4f:72:46:de:27:4c:96:ad:99:4a:b1:7c:53:f7:42:04:c7:
24:d6:be:99:6f:97:9d:8f:78:d7:2f:47:57:fb:db:9f:22:d5:
99:f8:55:6d:f4:c3:a1:81:5f:8c:6a:9a:bf:74:a9:68:a5:71:
5a:d2:df:be:4c:cf:de:34:d2:f1:79:58:c5:8a:25:5d:e2:51:
d1:ab:04:0c:91:ab:21:20:28:87:47:e6:b0:65:7e:23:7a:47:
79:ee:82:73:bc:60:00:ca:c3:79:ad:fd:6b:f8:67:33:93:13:
1f:76:cb:1e:3a:84:d7:f0:37:a2:37:59:24:57:47:1b:b8:a9:
93:ef:7e:3d:56:cd:7d:22:2b:e4:e8:65:95:1a:9d:61:13:12:
55:e6:ac:1c:70:db:5a:b7:97:d1:3c:62:e9:31:b7:ef:3a:ea:
8a:9c:37:2b:f7:9c:bd:e2:d5:f4:f2:0f:2d:6c:84:df:bd:54:
8c:63:16:75:89:eb:34:bf:43:64:ae:36:80:2c:3a:69:a4:5a:
9d:9c:97:63:dc:3c:49:18:9a:70:bf:ad:87:70:83:86:30:8e:
f8:fd:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:13:13 2024 by rpki-client on console-ams.rpki-client.org