Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: LUZjb30UB8ZJjPolNEl41LB8CxpeF1iHukaEAWWopX0=
Subject key identifier: 33:6A:A7:33:F4:D2:3D:3E:85:FA:07:48:B1:23:DF:D0:23:6C:92:C8
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 061C885FF4D96B3FC79C51AB9CF6519D466ED1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 20
Signing time: Thu 19 Sep 2024 17:29:56 +0000
Manifest this update: Thu 19 Sep 2024 17:24:56 +0000
Manifest next update: Fri 20 Sep 2024 20:10:56 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: 84BtJWtyjBEcImfZyZMc53w16iWGEdeYxOPQp5TNVkg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1c:88:5f:f4:d9:6b:3f:c7:9c:51:ab:9c:f6:51:9d:46:6e:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Sep 19 17:24:56 2024 GMT
Not After : Sep 20 20:10:56 2024 GMT
Subject: CN=336AA733F4D23D3E85FA0748B123DFD0236C92C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:e9:cd:bd:bf:c7:55:8d:cd:a2:14:9c:17:
ee:fa:59:f4:4c:00:8e:c9:c9:de:7d:3c:c5:f0:df:
80:69:b5:ef:28:fd:e9:b1:41:41:fd:2f:dc:58:04:
d1:89:3f:0b:d8:a3:d3:3f:7f:b2:3c:e1:a9:17:32:
42:e4:74:13:63:5a:c2:8f:cc:1b:45:4a:03:06:43:
7f:22:17:38:fc:40:ae:8a:99:7c:e7:11:ef:36:d2:
87:a4:fc:c9:48:2e:c9:4e:45:d0:26:cb:59:76:c0:
17:05:bc:03:ad:97:6e:72:4f:dd:c9:07:ef:94:ec:
5a:58:d1:78:7c:30:3e:11:e1:c3:dc:28:31:86:d5:
e6:73:3b:02:8a:b6:2d:7c:04:2c:bd:ca:19:1c:c2:
7f:bd:41:23:8a:f2:18:0f:09:6d:5f:69:a6:55:28:
60:d7:c9:1a:66:d0:66:21:7b:34:f3:e5:ea:bc:6f:
c7:db:04:47:a2:31:71:cb:df:61:24:e8:fe:26:b8:
58:5c:73:7d:6c:f2:62:ed:a4:85:6c:ba:62:7b:8e:
7c:80:5c:1d:55:e5:dc:71:e7:d6:7c:5f:8d:bb:3a:
71:5a:24:52:f9:50:85:a5:c6:dc:25:b4:2d:f2:70:
fe:c2:c2:bd:df:fc:99:8e:5b:79:2e:9f:bf:d1:3a:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:A7:33:F4:D2:3D:3E:85:FA:07:48:B1:23:DF:D0:23:6C:92:C8
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ac:5c:4c:96:fe:09:f5:14:57:fa:b5:5b:a9:bb:6d:1d:43:
2f:01:ce:50:8f:28:20:0c:0a:c7:b4:56:af:75:a7:8b:3c:93:
35:cc:7d:27:25:a4:4a:e9:6a:3a:98:e8:80:64:e1:97:6f:11:
f7:67:1d:03:72:19:0c:53:41:74:b8:a7:24:1f:66:27:d3:7a:
79:a0:67:e4:08:34:ac:b6:39:e4:62:e7:10:62:70:51:6e:02:
76:11:0b:98:a0:f8:ce:c9:7e:d8:7a:56:27:57:d5:62:bf:15:
84:b7:a7:b5:86:48:15:39:c8:df:ac:65:42:80:37:c7:ef:73:
26:bf:2e:c8:49:1b:42:97:10:7a:d5:55:22:56:66:09:c6:27:
09:8a:94:bb:e1:ca:ee:ae:a0:ac:3d:0c:ee:2a:f3:cd:eb:00:
e3:ad:0e:e1:2c:1d:90:6b:52:f3:bf:d2:13:45:e8:da:c1:f4:
c8:a5:fc:89:a9:60:3a:97:6f:06:1e:3f:27:38:2b:95:ac:52:
b0:d9:41:ce:93:3c:20:72:4e:be:0f:ed:0f:75:0d:ab:9d:cf:
be:0b:45:de:72:a1:88:ae:15:8c:f3:d2:d8:0d:27:f1:a6:e2:
cf:aa:f5:f4:bf:77:26:04:02:2b:02:5c:02:5e:cd:52:4f:1c:
bd:1c:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:30 2024 by rpki-client on console-ams.rpki-client.org