Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: r/MtmaHLCEEQp6z0cbOJmTFrdlDpl3fAvxzwLWxWGgw=
Subject key identifier: 08:6C:A7:08:51:20:3E:D9:7A:7E:77:55:5D:3D:5E:A4:2B:BD:99:06
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 04CB900EF42D57678E852AA1B763B28C6256C32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 037B
Signing time: Mon 25 Nov 2024 16:33:25 +0000
Manifest this update: Mon 25 Nov 2024 16:28:25 +0000
Manifest next update: Tue 26 Nov 2024 18:31:25 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: QE78Er8wF/0dpYxnbWGbufID9fhn6iUaA2TxFAtNT04=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:cb:90:0e:f4:2d:57:67:8e:85:2a:a1:b7:63:b2:8c:62:56:c3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Nov 25 16:28:25 2024 GMT
Not After : Nov 26 18:31:25 2024 GMT
Subject: CN=086CA70851203ED97A7E77555D3D5EA42BBD9906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:8b:3f:ee:70:d4:1d:12:c1:6e:b3:7f:1f:
8f:ab:d6:27:de:40:e0:c6:dd:22:9f:10:87:42:77:
62:29:17:b8:14:d9:05:af:68:78:f7:4f:c7:63:b3:
38:25:a2:2c:99:9d:75:b0:42:fb:8a:ea:d8:51:94:
13:8e:c0:49:2f:62:ee:15:b8:93:5a:77:9a:a7:0b:
4b:54:46:f4:b9:a6:d2:d3:54:17:6b:42:ff:fd:35:
db:47:2e:dd:6a:cd:fa:dc:8a:97:87:70:d1:af:86:
2b:71:d6:62:a5:f2:ad:c9:cb:96:94:70:bc:5b:25:
6d:f0:8e:80:5b:77:e1:02:9c:9b:7a:18:fb:ac:d1:
2d:54:51:11:11:0f:f2:90:ad:49:40:65:a1:cb:2d:
90:1d:5d:6e:21:ae:ba:b1:81:79:89:32:9e:61:a9:
11:8e:6a:c3:af:37:65:6c:13:18:c0:65:20:a0:68:
66:19:32:e5:fe:74:f2:e6:dd:bd:3e:a3:4f:52:a1:
e5:ff:7a:13:5d:63:40:e2:06:a1:b4:ed:6c:00:43:
1c:5e:73:9d:ab:96:aa:29:ef:b1:23:d9:62:6d:66:
96:24:a1:3e:37:e8:80:0a:4d:ea:a5:63:9e:c1:27:
ec:c2:f1:a0:97:53:29:c8:6e:87:9c:70:bb:42:a4:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:A7:08:51:20:3E:D9:7A:7E:77:55:5D:3D:5E:A4:2B:BD:99:06
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:ff:3d:c9:de:a4:65:f2:49:93:8a:40:75:be:9a:b5:4a:
71:db:b5:b9:53:7b:cc:44:f6:3f:34:7c:0f:94:77:d5:e5:8b:
27:d5:ba:f7:36:ee:78:0b:8c:31:96:b3:be:17:ee:b9:8d:25:
5b:8c:9a:a6:6a:d9:f7:36:a3:16:59:96:91:98:35:53:bf:6f:
af:97:35:de:b5:16:c2:8d:7b:90:f7:59:b5:b7:15:c8:c5:02:
8e:59:f6:5d:7b:5c:73:ec:13:da:dc:1e:ac:a5:c4:39:87:db:
e7:72:60:02:3e:33:8f:6d:5f:11:03:7e:6b:9b:46:27:48:e3:
21:82:f4:07:f6:d7:da:35:a9:5a:35:e4:14:f6:66:fb:3a:e7:
e1:44:0f:11:c2:80:49:b9:8d:a4:45:51:c7:ce:e2:bf:81:23:
0f:60:fe:72:5e:1a:e1:9b:37:70:fc:92:7e:46:2b:6d:55:23:
34:a9:3b:d7:32:24:d7:2f:1c:9b:44:40:0e:cc:49:05:0f:49:
0d:3a:43:1a:1a:a8:7e:29:31:f5:6c:29:48:26:98:d2:a5:71:
42:2d:8c:d1:a0:18:81:19:94:04:d5:ea:52:26:62:cb:34:b9:
09:b2:23:fc:55:85:6b:c3:7a:ad:bf:0e:57:28:3a:38:0e:01:
86:8e:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:39:34 2024 by rpki-client on console-fra.rpki-client.org