Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.mft
File: 2DfDMTFrSuUZLvkigRokIlKApjY.mft (raw, json)
Hash identifier: kZjGuMIJXxKk853M/+F1mKN8Dc1QuDXrRgt+WfGGw3c=
Subject key identifier: 9F:6B:C5:B2:5D:FE:B2:B2:E0:99:62:F8:9E:A8:D2:24:EC:C7:A5:2D
Authority key identifier: D8:37:C3:31:31:6B:4A:E5:19:2E:F9:22:81:1A:24:22:52:80:A6:36
Certificate issuer: /CN=d837c331316b4ae5192ef922811a24225280a636
Certificate serial: 0190516AD533E7CE6C639E27064E364BAECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DfDMTFrSuUZLvkigRokIlKApjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.mft
Manifest number: 0AD4
Signing time: Tue 25 Jun 2024 22:01:14 +0000
Manifest this update: Tue 25 Jun 2024 22:01:14 +0000
Manifest next update: Wed 26 Jun 2024 22:01:14 +0000
Files and hashes: 1: 2DfDMTFrSuUZLvkigRokIlKApjY.crl (hash: tFQjUEAqFtQbe0XJ13q9xllJAhTNqw3RsBqd89Lb9S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DfDMTFrSuUZLvkigRokIlKApjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:6a:d5:33:e7:ce:6c:63:9e:27:06:4e:36:4b:ae:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d837c331316b4ae5192ef922811a24225280a636
Validity
Not Before: Jun 25 22:01:14 2024 GMT
Not After : Jun 26 22:01:14 2024 GMT
Subject: CN=9f6bc5b25dfeb2b2e09962f89ea8d224ecc7a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:19:15:c9:65:d0:92:f9:20:7a:ab:0b:fc:
ad:1c:87:fd:f8:8d:03:6d:04:ea:62:41:7b:67:31:
1a:e6:0f:81:94:27:e2:dc:9c:f4:c8:42:75:48:a7:
f8:ee:42:8d:55:dc:1f:7c:50:35:7b:45:8d:b6:dc:
ad:d8:69:ce:3e:96:a6:30:43:7f:1d:67:46:04:d4:
54:bc:ef:b6:f8:20:1c:53:74:d9:52:3f:11:fb:41:
a7:b8:fa:50:5d:dd:92:f8:ab:f6:18:6a:c6:4c:f0:
1b:5e:1b:a4:46:f0:68:0a:7e:c3:a6:ba:7a:5b:14:
cc:c2:17:45:8a:73:92:eb:f2:1d:cd:75:c5:04:41:
34:8c:20:ee:6c:5d:09:00:51:95:3f:48:57:0a:15:
6b:30:09:10:af:97:39:fb:1e:fd:5b:11:87:cd:c6:
e9:ad:33:ff:ce:43:9e:43:1d:59:59:5c:8e:4b:00:
c9:44:bd:ed:8f:fe:48:3c:82:2f:cb:dd:57:54:76:
51:23:8c:38:01:a0:9c:b6:09:cf:14:85:08:d7:b0:
25:18:4d:c9:dc:51:25:81:e3:72:84:a9:39:62:c5:
b8:40:2c:ea:d3:da:94:e2:12:68:25:2c:b5:14:b9:
e8:86:9b:f2:72:b9:52:4a:2a:af:8d:3d:6b:89:cf:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:C5:B2:5D:FE:B2:B2:E0:99:62:F8:9E:A8:D2:24:EC:C7:A5:2D
X509v3 Authority Key Identifier:
keyid:D8:37:C3:31:31:6B:4A:E5:19:2E:F9:22:81:1A:24:22:52:80:A6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DfDMTFrSuUZLvkigRokIlKApjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/389ae4-25e3-42fa-9c72-250a7fb63fc8/1/2DfDMTFrSuUZLvkigRokIlKApjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:69:e6:c0:6c:06:8b:e7:f1:10:1e:f3:06:f1:8b:63:d9:
ef:b1:a3:68:df:28:5b:6a:72:52:c2:cf:3a:bd:00:32:84:f6:
09:52:4d:b4:cd:69:b2:79:0f:c1:04:3c:77:6c:aa:44:27:14:
e0:e8:97:8f:c7:1a:e3:b5:14:47:86:ac:00:43:b9:9a:9f:8b:
21:bc:d4:35:ca:b5:1f:42:9a:92:ab:59:5a:f7:c3:fb:54:48:
ff:b3:1f:92:95:5f:4c:fb:45:bd:ff:92:be:53:15:6e:c3:24:
4e:58:c4:01:09:ad:19:b3:ff:c7:1e:91:63:a2:60:c9:a0:16:
a4:4d:3a:06:99:10:76:f4:dc:9d:79:51:82:4c:18:e1:c7:38:
65:90:58:9e:44:aa:ae:3e:32:93:93:65:df:d4:e1:db:9e:ce:
c4:17:6e:36:22:40:e5:19:84:3f:f2:30:7b:0c:25:7d:c6:51:
10:81:2f:5c:0e:9f:ab:fd:a0:aa:24:43:08:14:77:86:ff:2a:
0d:06:9b:38:8f:67:f8:b0:9b:e2:9e:1e:ea:a3:9f:f2:87:4b:
86:65:f1:b2:eb:d7:df:25:4f:f9:74:b1:9a:ca:50:13:ec:06:
69:b7:b4:23:28:df:b5:ea:e2:aa:36:e8:6c:af:56:0f:0e:aa:
c3:9c:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:15:13 2024 by rpki-client on console.sobornost.net