Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: OgH4BpkKaDIEqRJo/NmWxgkEzpvmmDwehlfZYXIER+A=
Subject key identifier: E4:1B:A9:A6:43:29:45:9B:0F:9C:5A:04:EA:6F:16:A6:1F:4A:C3:32
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 01901DEAB3C60A386CEB1799C1AF1B5822EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 0EC6
Signing time: Sat 15 Jun 2024 22:00:38 +0000
Manifest this update: Sat 15 Jun 2024 22:00:38 +0000
Manifest next update: Sun 16 Jun 2024 22:00:38 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: vIp9EzNcNipqsrauqLzZC4PZI7dmxSXa+D+i6wIhOg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ea:b3:c6:0a:38:6c:eb:17:99:c1:af:1b:58:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Jun 15 22:00:38 2024 GMT
Not After : Jun 16 22:00:38 2024 GMT
Subject: CN=e41ba9a64329459b0f9c5a04ea6f16a61f4ac332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:c3:87:cb:5f:84:91:a8:0e:72:cc:38:09:
3c:58:93:03:62:31:1e:66:2e:e6:bc:7d:94:85:6e:
dc:3b:80:44:95:6f:4e:c5:d7:5f:7e:bb:70:8c:b1:
f9:54:61:b3:43:1a:f0:a9:01:41:65:4c:64:d4:5a:
ca:d1:f7:eb:87:7a:aa:af:fe:0a:b2:25:e7:ce:9f:
8b:ca:7f:63:03:0d:52:91:39:76:76:33:0b:56:6a:
74:da:e8:ea:0c:ae:2d:d7:47:87:5f:ee:3d:24:cc:
d8:7b:b7:b1:43:e0:b9:42:8c:92:f6:ab:47:82:ee:
98:f0:62:25:05:10:a6:f9:88:39:a8:a6:49:f3:8e:
94:77:ac:5d:61:f7:58:55:8c:59:b4:f2:57:f8:49:
89:2a:61:a2:8d:d5:7e:9a:fc:98:06:64:3a:24:7f:
7e:9a:42:74:d9:8f:9c:53:93:53:b3:36:0c:19:69:
74:7f:62:f6:82:8a:e4:74:d9:e0:63:b5:90:06:a4:
b3:b7:d9:25:a1:5e:56:9f:6f:19:e7:ff:e9:52:c1:
f8:df:71:24:1a:ca:0e:d9:fb:44:5b:17:2f:a3:df:
1e:dc:cf:2b:f5:a4:ff:b8:4a:7e:fa:be:e0:da:e3:
0b:51:3c:73:29:e9:b0:9d:0f:e6:1f:a5:03:76:7a:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:A9:A6:43:29:45:9B:0F:9C:5A:04:EA:6F:16:A6:1F:4A:C3:32
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:02:eb:5c:61:ce:05:fb:af:1e:6c:7e:ca:99:f2:6a:1d:16:
cd:42:ab:ec:f2:00:37:5c:5e:52:b4:79:7a:2d:3b:1a:4e:77:
08:f0:e6:a7:ec:f0:f6:16:46:0f:b2:89:78:1d:37:0f:2d:45:
2d:f7:20:b7:cf:b7:52:dd:de:cf:75:0d:10:6d:90:e8:96:b2:
06:01:0d:bf:62:19:70:f9:49:38:e4:9f:92:c6:60:55:c2:3c:
75:e1:d0:70:9a:70:1a:2a:92:63:c4:4e:53:31:b2:5b:75:bb:
22:25:04:0d:9d:aa:ad:82:09:46:75:15:3f:ae:ed:72:06:34:
6f:57:0f:b2:9b:8b:c7:c3:0d:06:d1:dc:fe:99:bb:74:a9:3e:
9a:48:bc:3b:25:97:8f:39:e1:54:cb:ce:80:12:37:b5:fe:64:
67:60:42:89:24:b9:c0:8c:96:81:78:b7:3f:db:5f:67:3d:cf:
00:64:5a:cb:ef:32:12:2e:5e:d5:d7:f0:e9:dd:02:ad:f8:07:
83:3f:6d:8a:24:a1:b2:a1:81:7b:a2:08:27:0c:be:56:6b:ba:
b7:65:2d:26:d2:70:43:15:c5:f0:53:a2:e7:93:df:eb:96:fd:
97:2b:68:12:70:5c:9d:3d:20:9f:0a:c2:ad:eb:17:f4:09:ae:
e3:21:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:56 2024 by rpki-client on console-ams.rpki-client.org