Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: eR3GHN6p7966PmDuqL0dAbZ8asJvR1PMTwxlCuUC6m4=
Subject key identifier: 2A:72:27:4A:5F:82:DE:0F:B4:2F:3F:71:BD:14:1C:0E:14:39:32:A0
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 0179BDC654FC32D4726194B0A9955E8A3610DA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: D0
Signing time: Fri 22 Nov 2024 11:23:34 +0000
Manifest this update: Fri 22 Nov 2024 11:18:34 +0000
Manifest next update: Sat 23 Nov 2024 11:28:34 +0000
Files and hashes: 1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: Q91Bzh8xj4mP4Doq/FTrjPncDOwrBZZ+U+rMILAMT+c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:79:bd:c6:54:fc:32:d4:72:61:94:b0:a9:95:5e:8a:36:10:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Nov 22 11:18:34 2024 GMT
Not After : Nov 23 11:28:34 2024 GMT
Subject: CN=2A72274A5F82DE0FB42F3F71BD141C0E143932A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:4e:6f:29:fb:a0:b4:2e:19:be:2a:7f:de:
86:98:84:bd:6c:ae:d9:8c:9d:77:13:45:e0:73:7c:
67:3e:64:96:96:44:97:8c:f2:ca:68:dc:25:3d:96:
ac:7f:9d:50:43:5a:d7:e2:e7:f7:eb:d8:aa:c5:50:
e0:96:83:8f:af:e6:a3:96:33:38:63:26:a4:77:22:
5a:86:a4:a2:a7:cc:4e:dc:e7:80:cb:c8:c3:4b:2c:
e1:0b:26:1e:0b:95:26:8f:fa:16:bf:c1:10:65:c5:
3f:27:d1:d2:91:99:36:ee:3c:48:7e:77:d9:c2:48:
aa:43:b0:f4:0f:13:96:d1:bc:cc:18:2f:3d:f3:04:
72:0f:e9:5a:ab:a0:c9:f3:31:3b:88:02:73:0a:79:
63:3b:61:10:f1:61:90:96:e1:4a:ee:f5:92:de:89:
4b:7d:30:c3:d3:f4:6b:87:f4:c6:9c:8a:21:e6:33:
34:7b:05:d7:1d:90:de:f0:fa:93:ba:1f:2d:64:22:
ee:2e:f0:5e:68:c3:4b:47:ee:4f:fb:0b:2c:bc:7a:
b8:24:90:c4:1e:0b:d7:cd:d0:df:ac:6a:fc:e6:5b:
ed:76:a7:df:63:e7:a0:00:8f:6e:2e:c7:63:35:50:
7b:d3:26:6d:d6:54:d1:cc:b6:45:a0:3f:86:60:81:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:27:4A:5F:82:DE:0F:B4:2F:3F:71:BD:14:1C:0E:14:39:32:A0
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a6:aa:26:4f:d2:ba:b8:e8:0b:97:a1:f7:20:6f:40:9b:a4:
f7:15:5f:39:73:85:f4:c2:37:49:5e:72:e1:00:c1:94:fd:af:
9e:e6:45:b9:b2:aa:5d:fa:0d:3a:70:25:80:2c:25:fe:5b:16:
fa:b7:05:1a:e8:71:ad:f2:2e:48:4b:44:21:b1:b9:a5:40:d2:
34:72:7c:f5:82:8a:d9:ee:c7:42:23:a8:5a:06:2e:37:04:74:
61:9e:6e:f7:bf:12:27:c6:fe:01:64:cc:18:5f:db:f3:97:e5:
36:fb:05:26:25:9a:f4:cc:35:c0:c6:24:44:d9:97:b3:ce:03:
47:7d:b7:7c:08:a8:13:cc:75:93:7c:93:0d:56:eb:04:56:59:
e7:cc:5b:2c:6c:41:cb:75:8f:bd:7b:88:78:e4:77:93:57:36:
71:04:a5:02:84:f6:ba:d6:2e:56:cf:04:19:51:84:81:97:65:
8f:3a:e7:14:5c:20:fb:2f:53:32:e4:60:d7:85:92:02:56:b4:
93:a6:ba:41:8a:1b:79:db:b7:a9:75:e0:a1:c1:c6:2d:7b:33:
80:2d:e0:19:af:e4:21:03:49:92:a8:3f:71:6e:c0:02:c5:b4:
7e:9c:5d:bd:73:3e:d1:74:6f:3b:58:d7:99:fb:3e:42:a5:73:
e9:2e:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:21 2024 by rpki-client on console-fra.rpki-client.org