Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
File: A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft (raw, json)
Hash identifier: ixp+WMm3BS11BwCGT+nAOg6yyzxh4e5UuhSj31GRF24=
Subject key identifier: CA:CA:81:E0:7C:49:7C:A8:AD:81:15:41:FC:6A:47:E2:37:61:1B:86
Authority key identifier: A8:C1:21:52:A8:5C:AD:E1:EE:31:B6:08:3F:7E:4D:55:7C:B8:69:04
Certificate issuer: /CN=a8c12152a85cade1ee31b6083f7e4d557cb86904
Certificate serial: 62E53A0B8BDFC8643F0EC201B2B4620BEC7220C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMEhUqhcreHuMbYIP35NVXy4aQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
Manifest number: 5B
Signing time: Fri 22 Nov 2024 05:05:23 +0000
Manifest this update: Fri 22 Nov 2024 05:00:23 +0000
Manifest next update: Sat 23 Nov 2024 07:03:23 +0000
Files and hashes: 1: A8C12152A85CADE1EE31B6083F7E4D557CB86904.crl (hash: +hDNy1GpSgglRWDUD8Y07zVbN2miiQ5wpGyp8fNXCms=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.crl
rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMEhUqhcreHuMbYIP35NVXy4aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e5:3a:0b:8b:df:c8:64:3f:0e:c2:01:b2:b4:62:0b:ec:72:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c12152a85cade1ee31b6083f7e4d557cb86904
Validity
Not Before: Nov 22 05:00:23 2024 GMT
Not After : Nov 23 07:03:23 2024 GMT
Subject: CN=CACA81E07C497CA8AD811541FC6A47E237611B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:09:37:45:5f:c7:bd:f3:02:0e:3f:46:56:
e2:ec:aa:fc:22:a8:45:d1:21:8c:c1:bb:51:c8:83:
2a:30:d9:04:57:28:a8:c3:ae:c3:e8:ae:6e:d3:ac:
8a:eb:95:4a:cb:2e:89:dc:5c:00:cc:51:8b:01:92:
02:6f:04:87:e9:59:af:b9:42:47:7b:29:5e:d7:f4:
1f:de:6c:5c:77:8c:6c:ea:77:e9:eb:75:92:73:f2:
c3:5c:2c:47:9e:57:2b:7e:15:22:70:38:fc:54:bd:
db:c9:89:80:6e:61:23:aa:31:fb:41:54:44:5c:1b:
51:bd:2b:93:8d:87:b3:a8:87:81:57:22:7f:af:d5:
1c:b0:74:d0:29:1a:88:09:55:22:58:af:c8:cd:b0:
02:75:06:4c:d4:45:b2:65:6a:1e:23:22:de:86:93:
bd:72:e1:49:21:0e:1b:98:db:89:a3:23:31:d3:c8:
49:de:17:ca:c5:9c:fd:df:6b:e2:a3:a9:62:31:1c:
1e:aa:0a:03:b9:75:ca:f2:9b:08:98:b3:69:04:a2:
e1:c1:21:a7:3b:4f:dd:49:2d:8c:1f:d1:d1:d0:9c:
4c:5b:b0:d2:f5:db:9c:94:9e:b9:f7:ff:96:02:eb:
58:6c:7d:ee:f9:8b:8f:f9:c1:7b:68:47:6d:b8:33:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CA:81:E0:7C:49:7C:A8:AD:81:15:41:FC:6A:47:E2:37:61:1B:86
X509v3 Authority Key Identifier:
keyid:A8:C1:21:52:A8:5C:AD:E1:EE:31:B6:08:3F:7E:4D:55:7C:B8:69:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMEhUqhcreHuMbYIP35NVXy4aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/0/A8C12152A85CADE1EE31B6083F7E4D557CB86904.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:d4:89:4c:b6:76:01:08:fb:ff:6b:08:f0:24:5b:ab:de:
9b:bc:ad:bd:41:3d:9d:ce:aa:59:00:4c:24:af:20:8e:33:b1:
24:ad:95:f5:d5:50:a0:36:bf:63:d2:7b:5e:d0:46:ef:8c:0c:
07:ed:f8:8f:35:61:9f:22:b0:2d:42:6f:d3:3c:7d:c7:f6:63:
d3:94:5b:ca:34:0b:b3:ab:22:89:88:81:12:cd:72:db:ec:ed:
ed:f0:fa:c0:c2:db:c2:b7:58:17:80:1d:bb:c2:71:a9:dc:de:
2b:62:04:ad:13:fe:71:fb:89:4c:22:77:b8:9a:d6:db:43:c9:
02:e5:17:ff:b7:d5:cb:6c:45:fa:71:c7:05:79:57:97:9a:da:
a2:d5:b8:81:ff:e1:fd:57:25:2a:e0:94:bf:29:0a:6c:68:27:
b9:cb:0f:da:07:1a:1a:97:ca:83:91:12:e3:d6:2b:b8:cb:ab:
d7:c8:9a:91:fd:de:95:61:c8:15:16:54:dd:8f:1b:41:2f:b9:
ba:7d:37:1e:99:3d:ca:a3:a2:bd:80:aa:cc:3a:2d:99:f3:97:
1e:90:3a:eb:72:b8:4a:d7:21:17:26:b8:94:90:90:2d:a8:96:
00:33:e7:96:7a:a0:6a:86:a2:55:78:65:d0:06:65:36:71:42:
be:88:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:32 2024 by rpki-client on console-fra.rpki-client.org