Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: ebW89XWHJcXPAIIEzEjuQ3EdharR8IjcaGfMStEh1E0=
Subject key identifier: BE:2F:98:4F:80:A5:BC:BA:6B:09:DE:A5:AB:00:D7:5F:31:5F:2B:47
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 01901E900898F8C101CB6FEDFC91F1FF5B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 11C5
Signing time: Sun 16 Jun 2024 01:01:14 +0000
Manifest this update: Sun 16 Jun 2024 01:01:14 +0000
Manifest next update: Mon 17 Jun 2024 01:01:14 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: aTd1nRFe4IrzLpf/SzMTLV2EQNBSgAktvdkh08Dwtsw=)
2: NirsDoTKFuQlSUkZ-YfzZHiPB6E.roa (hash: lkb/T0rTBB/rfnIrnAy367jb+dpzT2Lm1rzySFB/8gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:08:98:f8:c1:01:cb:6f:ed:fc:91:f1:ff:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jun 16 01:01:14 2024 GMT
Not After : Jun 17 01:01:14 2024 GMT
Subject: CN=be2f984f80a5bcba6b09dea5ab00d75f315f2b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1e:51:e8:84:82:6b:77:d3:f7:15:16:1a:67:
87:a5:fa:2b:5a:db:8e:a7:25:8c:70:66:ce:43:f2:
3a:80:91:53:02:19:cf:58:30:5a:ed:9e:7e:79:a5:
66:c2:70:ed:3c:56:93:19:c9:61:93:89:0c:0a:97:
29:64:17:bf:9a:8c:c8:fc:b3:89:52:eb:16:10:f2:
4f:e5:fa:90:e5:31:e5:0a:aa:17:2c:d5:cd:68:80:
6e:5c:ad:a7:43:df:f4:3c:7d:75:72:62:af:f8:57:
38:6e:5d:f8:0e:d6:b0:75:4f:02:a1:83:02:30:85:
dd:b4:7a:15:15:60:81:bb:24:f3:a3:f3:22:b9:71:
8d:70:9a:f1:3a:e2:d3:15:88:1c:5d:53:ff:77:05:
83:ae:e4:80:e2:d6:4d:2b:d6:2d:e3:08:5f:32:19:
47:86:b0:68:b1:3a:bf:e4:0c:e0:29:70:a5:d9:7a:
b3:42:57:d9:ca:2d:81:26:85:87:de:26:3a:62:2f:
fe:66:03:8d:ca:05:63:45:45:2f:6a:fe:20:85:dd:
0a:1c:d2:41:6f:ae:ed:ea:81:33:5c:5b:f0:1c:56:
96:6f:a4:3a:1b:7c:55:67:d7:33:fd:57:3b:eb:af:
5d:36:57:1a:07:08:05:7c:7c:7b:03:a5:f1:d0:a7:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:98:4F:80:A5:BC:BA:6B:09:DE:A5:AB:00:D7:5F:31:5F:2B:47
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:7b:08:06:68:14:37:b8:f7:d3:8c:0a:0f:ca:3a:c9:0f:
29:89:2b:2a:9f:21:38:9d:6d:1b:c9:f5:85:c2:43:c1:8e:6b:
7b:8f:0b:e1:7e:e9:6b:d4:a5:22:09:b8:1e:7f:a9:09:17:b9:
98:9e:ad:94:be:a2:ce:1a:3b:7a:66:47:6b:79:3e:41:64:7f:
43:23:63:d0:a3:23:05:2a:d2:f2:fb:8b:59:38:5a:b9:90:dc:
e3:f7:05:f4:e0:64:65:bc:0e:2d:ee:6b:38:4e:2c:ff:ed:09:
11:85:4f:19:fb:3f:ce:11:3d:a1:cd:08:35:4d:bd:a3:08:7f:
8b:72:34:1b:9b:8e:34:c3:8f:50:42:50:cb:e2:3e:96:d3:78:
ef:b2:1a:56:4f:fc:04:78:11:e8:f7:3d:da:02:b5:80:22:83:
71:d1:69:9d:5d:d4:50:6a:ad:af:96:43:5b:0f:80:6d:9f:01:
1c:66:c1:84:2a:59:0d:d5:18:65:d0:96:86:3c:3f:16:56:28:
9e:6c:f4:13:5c:7b:30:d4:5d:f7:d9:87:50:53:57:9d:03:9c:
62:b9:66:4d:b2:8e:09:5c:70:4c:5b:96:f5:b8:ac:b1:87:32:
47:cc:31:d1:74:4f:d7:eb:04:1a:42:5c:b1:8f:87:3e:4f:98:
dc:48:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:03 2024 by rpki-client on console-fra.rpki-client.org