Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: RxOU617hRneLjJHuCrx2WphyggFhYF+TdBZ/m+ZmwiQ=
Subject key identifier: F1:DB:10:8D:FA:80:7E:3E:8D:B1:EF:C0:5A:31:89:FA:3C:03:5E:42
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 6C8DB97759439E28F79AE26437246C2F480F2716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: DF
Signing time: Mon 25 Nov 2024 14:05:31 +0000
Manifest this update: Mon 25 Nov 2024 14:00:31 +0000
Manifest next update: Tue 26 Nov 2024 17:06:31 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: syazRMzop3mDuZFUHmw2azNzWgxMnd4Swcu0ahU7lkc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8d:b9:77:59:43:9e:28:f7:9a:e2:64:37:24:6c:2f:48:0f:27:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Nov 25 14:00:31 2024 GMT
Not After : Nov 26 17:06:31 2024 GMT
Subject: CN=F1DB108DFA807E3E8DB1EFC05A3189FA3C035E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:9e:d7:58:3e:4a:b9:4a:69:2f:4f:27:71:
c6:89:19:e8:50:b6:1a:c2:68:38:e1:e0:6d:bb:c1:
8c:54:21:27:de:de:04:07:21:40:08:fa:28:18:bd:
b6:30:01:e1:81:93:0a:44:18:8a:9a:21:a4:7d:85:
0a:ff:6e:59:e7:fa:d8:02:c1:22:a3:5b:8e:2c:b7:
ce:0f:04:4c:f3:bd:d4:f9:2e:1e:f4:b5:da:84:1a:
3a:df:ff:8a:c9:b4:7b:07:59:90:a8:49:38:18:85:
4f:c1:c4:1d:4b:a2:2b:b7:15:e4:5a:75:ea:de:7f:
aa:1b:83:59:c2:d3:6a:5b:52:27:0d:01:a5:41:c3:
13:67:fa:cf:74:ed:14:28:1f:5e:95:db:d9:82:9b:
e9:32:40:2c:f0:71:a8:47:5d:e8:dc:02:b7:21:90:
3c:a2:09:27:74:2a:11:71:05:d9:63:e8:6e:24:76:
d3:2a:48:ea:66:d1:ec:f6:ba:67:43:46:3f:c0:c6:
58:80:7a:f8:35:84:3b:cd:9d:5f:ac:ef:bf:db:26:
44:92:d7:a0:c4:15:e3:95:78:b9:d1:aa:a2:e2:ff:
b7:6d:d0:a8:46:43:5b:44:7b:a1:52:4c:71:7e:6f:
cd:02:a4:57:88:0d:f1:a2:70:2a:b0:b1:a2:51:95:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:10:8D:FA:80:7E:3E:8D:B1:EF:C0:5A:31:89:FA:3C:03:5E:42
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:36:81:ea:53:98:69:75:7b:20:7f:97:a2:2b:95:63:cf:92:
25:30:04:18:00:28:2c:c3:27:34:91:ff:0d:9e:13:10:05:eb:
17:02:f1:20:5c:9c:a3:33:6f:a0:47:2e:77:e1:b3:65:ed:af:
b3:aa:37:0a:46:76:c0:fc:e0:fd:09:25:42:b5:f6:7c:59:23:
2d:8c:4d:a7:be:38:27:2e:41:15:9b:44:67:e1:3d:66:f3:7c:
4e:3d:70:f3:ba:32:52:4a:2e:f1:3f:73:82:e2:76:f8:c0:aa:
98:9d:a2:dc:81:eb:86:20:70:cb:30:12:48:42:ac:7c:db:36:
dd:3e:b9:b7:54:1c:03:57:6e:1c:dd:68:3c:5c:3b:4f:57:92:
9c:02:52:85:b3:b9:65:2e:38:00:2c:35:9f:e3:76:c4:b0:ab:
81:b3:cf:5c:87:43:18:98:e2:8e:36:2b:69:97:97:a1:d1:73:
87:8c:2a:ba:21:62:0e:f2:f0:a2:95:bd:d4:4e:c6:d3:5c:e1:
f5:3f:e0:e7:e6:b2:aa:66:32:f9:69:8d:48:bb:d5:52:76:54:
20:8e:17:0f:36:95:c1:0b:be:8b:93:4a:fb:42:b2:11:14:a5:
8b:1d:4f:f6:b6:bf:51:3f:f8:08:72:72:e1:52:1c:8e:7e:a1:
4c:d1:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:40 2024 by rpki-client on console-ams.rpki-client.org