Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: 4iaLhFBtootDF+qFzvT0+G+9LGzUVkQlYz23ZGd1mbM=
Subject key identifier: 53:CB:DE:DF:FB:58:50:B5:0F:57:7C:36:D9:3F:A3:9C:69:17:4B:70
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 0CCE8A1B6DD29A2C3082C2085D402EBDF4BDC8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: CB
Signing time: Sun 03 Nov 2024 03:46:51 +0000
Manifest this update: Sun 03 Nov 2024 03:41:51 +0000
Manifest next update: Mon 04 Nov 2024 07:03:51 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: qw6TFCMzm7ZytBu9tFiRu+6SU+DcdIAaYHnO6wF43pA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Nov 2024 04:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ce:8a:1b:6d:d2:9a:2c:30:82:c2:08:5d:40:2e:bd:f4:bd:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Nov 3 03:41:51 2024 GMT
Not After : Nov 4 07:03:51 2024 GMT
Subject: CN=53CBDEDFFB5850B50F577C36D93FA39C69174B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:63:e5:01:19:6f:8f:db:65:d1:fd:dc:6a:
61:be:54:99:55:db:24:41:fc:d6:d4:cb:72:48:2a:
05:99:81:f8:51:06:bc:5d:65:18:fc:a2:a7:c6:49:
2a:d1:8f:24:ab:ea:64:e9:98:7c:d8:5c:af:68:a8:
da:09:53:3a:0c:b9:bd:e5:95:a2:32:41:00:72:b7:
ff:5f:4d:c2:df:a5:84:45:0a:ec:80:08:cd:36:57:
5a:14:10:6c:5c:4b:01:cc:ee:ef:71:82:2d:e5:cf:
93:28:ea:e1:f1:fb:dc:8e:f2:3b:f3:e4:53:83:b3:
cc:b5:06:87:0e:a5:80:36:24:1f:c9:89:22:fd:e7:
84:00:a3:92:53:22:b6:bf:8c:f5:d9:88:47:6c:df:
5f:9d:1b:b8:39:bf:00:ce:0f:a8:88:51:8b:34:83:
17:38:62:57:64:84:76:a5:55:cc:a2:37:9a:89:08:
34:b0:fe:bf:96:8e:2b:5e:54:5c:45:5b:db:55:1f:
b3:a7:33:e8:7f:61:78:4d:8e:83:3d:e3:0f:57:f8:
d9:d9:59:00:f4:23:d6:43:a0:7b:12:76:d2:03:61:
6f:1a:9d:9f:cf:e5:5e:1c:c7:0e:0c:6e:e4:a0:e7:
03:9a:1a:cf:d5:bc:01:97:55:8f:ad:21:73:8a:fc:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:DE:DF:FB:58:50:B5:0F:57:7C:36:D9:3F:A3:9C:69:17:4B:70
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:23:8e:55:7d:75:da:ba:08:b8:96:5a:59:e6:ba:c2:1b:40:
e8:bf:56:4c:15:14:86:d1:b1:7f:bb:2e:31:87:14:86:bc:37:
16:54:44:0c:6b:4c:87:ed:2b:0f:bd:c6:2b:d9:ca:55:38:ef:
b1:d1:30:8a:5e:47:5d:46:44:aa:f1:0c:49:35:a8:cb:ac:bb:
20:bc:09:5b:71:77:b6:1a:89:36:98:f1:ce:71:be:ae:1b:d9:
9c:0a:30:dc:38:1d:84:26:b8:bf:1d:81:d9:ae:c0:2f:65:bf:
fe:37:80:62:d7:d6:d2:c9:65:33:10:c4:c1:fe:0d:db:51:21:
76:22:eb:02:4f:23:de:a5:74:7a:ea:a2:b8:60:fd:33:ea:5d:
e5:5c:a9:48:88:81:e6:fe:20:48:24:ea:b1:1f:18:ee:d0:d1:
81:24:3e:c2:41:3f:17:47:4d:14:bc:78:b9:7b:48:27:9e:45:
1e:59:bf:ed:bc:4b:2c:ca:62:b6:a5:15:d7:d8:36:ed:b1:98:
15:a6:d8:55:89:10:59:5c:3d:6b:83:e2:8e:41:1a:a3:b1:58:
d9:1e:7f:e5:a6:01:f4:7b:e3:88:62:49:5b:9d:1f:73:19:08:
75:a4:5d:b5:65:71:21:09:00:af:e0:f0:c4:9f:2e:fa:80:b7:
58:8e:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:35:58 2024 by rpki-client on console-ams.rpki-client.org