Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: mAI60PZQIs4BICSwGbDLSImNXlFJayKNxxO8XbTfxzw=
Subject key identifier: 93:1C:1C:E3:38:3E:8C:C9:4F:59:0E:84:9D:B2:4E:00:A0:27:C6:8F
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 018F8F025B08B1AD8432CFE12254862F2BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0998
Signing time: Sun 19 May 2024 04:00:47 +0000
Manifest this update: Sun 19 May 2024 04:00:47 +0000
Manifest next update: Mon 20 May 2024 04:00:47 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 4XjljY0Yn1N+D3xdVHsB7utGrg6DQyrTyJUdKFLRlko=)
2: STqApr7X1ug1uqSaDPqxzAwqcYs.roa (hash: EiNnN4KMS8MWRBeApq2yhm40SJvdY76bImhzgcNjTV0=)
3: qpERSnH4Aqhg72wW15GA57f3WF8.roa (hash: yDfkRMnmnNihj+FTjCo5VWTFjCH2QIg6BWunHAW5H88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:02:5b:08:b1:ad:84:32:cf:e1:22:54:86:2f:2b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: May 19 04:00:47 2024 GMT
Not After : May 20 04:00:47 2024 GMT
Subject: CN=931c1ce3383e8cc94f590e849db24e00a027c68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cd:52:48:33:e7:7a:ef:94:09:c3:17:97:7c:
97:99:09:27:c2:82:85:48:f5:2c:cd:a5:98:02:7d:
d6:39:9e:8e:7a:f6:8c:83:d1:01:8e:b0:c2:9a:c6:
66:98:a3:f8:eb:e1:22:00:2f:32:70:06:3a:7e:ff:
24:26:62:80:e5:3f:ed:c4:64:25:eb:73:b3:6d:ee:
87:22:1d:61:6b:41:41:16:a9:05:3d:8e:46:9f:d1:
78:ac:ea:36:cc:72:0b:f7:65:17:dd:b0:eb:91:99:
04:71:b2:85:a3:83:06:2f:04:c4:a0:e4:46:5d:0d:
c6:71:e0:49:09:38:6e:a1:9b:5f:14:5f:38:95:08:
c7:78:c7:c2:eb:6d:ce:2f:61:b2:6f:9a:57:a3:88:
b8:0e:8c:be:4b:ad:39:6b:92:df:e8:9f:d1:2d:23:
79:23:bd:30:96:3b:7a:78:f3:f5:98:57:c9:1c:b1:
6f:66:15:fa:00:45:d4:cd:9a:b6:96:0f:6f:14:95:
0c:5e:d2:ef:17:87:e5:3e:38:b9:86:48:b6:d0:03:
ff:80:f9:c8:f5:e2:82:c7:44:cb:0b:e0:f6:ba:45:
82:7a:2f:3b:4a:ec:8e:8c:ac:0f:57:12:c5:e7:ff:
bc:f2:b7:8a:a0:ba:91:86:f6:f2:6f:b9:d0:44:9e:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:1C:E3:38:3E:8C:C9:4F:59:0E:84:9D:B2:4E:00:A0:27:C6:8F
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:29:d7:c2:ab:fa:41:45:fb:48:21:3f:ae:df:df:ff:b1:
20:22:f6:ed:e6:23:00:be:aa:5c:64:58:87:ac:7c:e8:57:3c:
2b:fb:dd:82:c5:96:92:ef:af:ae:cf:6d:49:31:f2:9a:dc:43:
47:9d:dd:bc:1f:4c:b1:68:d3:cd:be:53:df:63:8f:96:0a:f7:
e2:79:82:69:c7:ab:e6:68:3b:a2:d5:10:5c:22:3a:8e:af:73:
79:fb:a3:9c:ed:7d:9e:f0:92:43:44:22:39:08:c0:0c:f9:a8:
9b:06:31:88:f6:ba:c4:ad:75:df:05:2b:21:84:b6:e5:06:2d:
70:1b:31:ac:09:62:3d:ba:7f:5a:29:3c:8f:de:8b:e9:65:43:
dd:9b:57:21:76:be:e9:db:1e:75:8b:b5:71:af:14:3c:42:eb:
ae:58:fa:a7:3b:ac:ed:5d:06:f4:e4:fb:09:50:96:df:fd:7a:
42:26:2a:33:01:e0:f1:ba:b5:7c:95:95:80:cb:8d:a5:43:43:
bb:c7:67:6a:e4:f3:20:9a:31:12:66:b4:d0:7d:55:36:49:07:
17:0d:b8:a7:6f:ac:7b:16:f5:52:0e:93:25:8c:b7:32:98:57:
84:36:2d:47:94:9f:d3:0e:95:70:7c:ba:2e:a5:77:4a:cf:49:
ed:0b:0e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:09:07 2024 by rpki-client on console-fra.rpki-client.org