Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: Gj3YfnCxCUwEBpEYyF5AuSHbc7M2cvss1lYWeiP328A=
Subject key identifier: 18:47:46:6C:89:2D:9F:AC:88:0A:A6:02:EF:F3:75:98:14:5B:B2:7B
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 01901CD7FA123DD70A17FA84C20C7871C41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 0B41
Signing time: Sat 15 Jun 2024 17:00:34 +0000
Manifest this update: Sat 15 Jun 2024 17:00:34 +0000
Manifest next update: Sun 16 Jun 2024 17:00:34 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: LF/X9PvKMZce+qKnCrIRinJGUbu4cQyvBgwNJCGNZ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d7:fa:12:3d:d7:0a:17:fa:84:c2:0c:78:71:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Jun 15 17:00:34 2024 GMT
Not After : Jun 16 17:00:34 2024 GMT
Subject: CN=1847466c892d9fac880aa602eff37598145bb27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:87:a5:55:08:11:61:19:47:7b:54:89:0e:
82:bf:df:07:4f:38:37:ad:1a:fa:6c:41:1d:9c:77:
30:a6:89:97:fe:8d:98:c6:10:5e:05:05:17:ae:ac:
19:1a:4e:50:18:fb:01:4c:ff:8b:3a:c6:40:27:15:
30:e0:c1:02:63:c9:19:9f:f6:50:41:9f:b0:b0:6c:
d4:6f:ed:84:c9:bf:64:be:91:39:4d:6e:94:e7:95:
b7:f0:b2:b5:54:35:99:cf:0a:1c:22:15:40:41:25:
f7:4a:89:8b:ca:6e:a2:3e:da:22:65:ee:96:f3:2a:
ba:2a:2b:b5:f1:33:63:ca:9c:11:4e:b6:51:92:c5:
c9:3a:d8:a7:a4:85:6c:e6:69:bf:47:61:4e:be:f4:
f1:a9:bb:6b:e0:70:ba:d8:66:8d:c9:85:cb:5c:cf:
76:b8:db:1f:b4:9c:26:be:82:2c:21:ce:ea:b0:f4:
42:1b:34:ab:f7:7c:5e:c4:f5:13:46:cc:04:fd:71:
b7:e4:3e:47:6b:65:d7:bc:e7:38:d4:f5:6c:e4:58:
49:0a:a8:6b:f3:36:0a:b5:a5:28:7e:1b:85:4d:6d:
6d:73:02:bc:14:9c:eb:7f:8b:d9:53:ca:ee:60:bd:
82:b9:23:82:ec:66:29:a2:4a:3b:25:4c:c5:86:a3:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:46:6C:89:2D:9F:AC:88:0A:A6:02:EF:F3:75:98:14:5B:B2:7B
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4e:a5:37:4b:ee:5a:5a:37:a0:0c:cb:69:81:91:46:5a:25:
35:b1:7a:dc:ab:3c:7e:d4:2e:f2:af:30:3f:41:ad:fa:67:61:
e8:0e:39:b4:a4:93:ac:f3:8d:bd:44:12:80:3d:38:ff:93:fb:
ec:14:93:51:90:a6:59:10:5f:98:0a:fe:5f:db:f2:3d:b8:6c:
e8:31:b0:66:db:02:d8:86:b2:7f:8e:3e:07:fe:05:2d:5e:91:
d8:7b:75:4d:c8:eb:11:d0:b4:f6:e3:33:da:ec:6d:9a:b8:07:
34:45:7d:5e:e7:42:a1:a3:bc:2a:39:95:88:0b:c5:de:33:51:
25:77:d7:e9:74:d6:20:80:32:e6:b2:9e:d5:7e:4d:50:4e:29:
27:2d:1c:de:ce:d0:da:69:27:6f:a7:6d:ec:b0:fb:19:b1:e8:
94:ba:c2:d3:dc:f2:75:08:dd:5d:43:6b:f6:47:36:9d:c0:89:
e8:e5:67:24:fa:9c:ba:42:d3:d8:cd:ad:69:27:f4:d1:95:c9:
c3:fc:96:51:92:9f:f4:e3:17:6e:23:bd:8d:f5:35:e2:55:7a:
0a:c1:94:5e:61:6f:9e:0b:10:a6:de:78:ed:51:3b:fd:fc:0b:
86:93:aa:61:70:78:e6:e1:1e:7f:34:c6:d0:5f:14:d3:94:16:
da:53:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:31 2024 by rpki-client on console-fra.rpki-client.org