Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: IFLJ3IjCpPXE1kCxL+cg0UmHYG02XdSxa3BJkDwBZd4=
Subject key identifier: AF:BC:09:B7:21:28:A5:28:82:50:05:7A:D6:DE:AD:13:32:A7:F7:F6
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 018FBF4BD821D2A9E957EE5D62825D12647A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 069C
Signing time: Tue 28 May 2024 13:02:49 +0000
Manifest this update: Tue 28 May 2024 13:02:49 +0000
Manifest next update: Wed 29 May 2024 13:02:49 +0000
Files and hashes: 1: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: +mAdMLWn5Npnr1jQQWdZiLgi7FPHOocHxffjKgqryu8=)
2: Yco_Ak8eibcXT96Lpa7zlI5Onek.roa (hash: kF5VjalBFGgnqYneTbLKUHhRmtytARDwPg+xMXCn6fc=)
3: xVzftmqGU_zp0OkZmXduubjuN-k.roa (hash: N/Xdj/Z61idSvFi1nHuCN6vbQhllKeOxG9GUxDvqidA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:4b:d8:21:d2:a9:e9:57:ee:5d:62:82:5d:12:64:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: May 28 13:02:49 2024 GMT
Not After : May 29 13:02:49 2024 GMT
Subject: CN=afbc09b72128a5288250057ad6dead1332a7f7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:d2:95:b9:03:c3:4b:64:1f:5a:28:74:c0:
bc:69:ca:dd:6f:87:15:b3:74:7e:fb:0d:1e:97:cd:
3c:27:77:6b:be:a1:2a:22:90:92:a1:bc:e2:6f:e5:
ba:72:c3:bf:15:f9:15:4b:e8:ad:6f:dd:7b:ec:f5:
c7:67:fc:1b:8a:1a:10:f1:15:a8:99:bb:43:41:ad:
a5:73:0e:c1:75:bc:d3:c5:d6:de:e7:a4:1a:cd:bc:
b7:07:82:65:64:ef:09:7d:4a:3c:04:ee:ec:47:6b:
b1:e1:f4:57:9c:cc:d8:0b:50:a0:06:c6:74:c9:7e:
bf:61:b9:ca:e4:de:98:9c:82:2a:cf:6a:88:e2:70:
e5:4f:2b:c7:bf:8d:65:ef:1d:f8:de:53:c0:6e:dd:
7a:23:40:de:dd:af:70:07:11:7a:10:19:c0:13:69:
1c:cc:fe:90:9c:b9:bd:5c:8e:89:7c:d3:32:67:fc:
81:72:7c:fb:86:e4:2d:17:fb:e0:53:bc:5f:f0:63:
fc:6f:20:4b:fa:66:6e:aa:e7:0e:02:2c:9b:45:a0:
33:97:0b:73:7b:3c:65:81:0d:98:26:72:3f:3b:d6:
ab:02:02:d2:b9:6d:af:0b:4e:f3:d7:12:7f:0b:90:
87:fd:ec:8a:9b:5a:31:54:c5:34:6b:b9:e9:60:d1:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BC:09:B7:21:28:A5:28:82:50:05:7A:D6:DE:AD:13:32:A7:F7:F6
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:60:92:1b:d5:f8:d0:23:88:9e:e1:e5:5f:89:17:75:36:
42:21:aa:52:c8:0f:93:02:1e:7f:36:80:35:4d:fb:39:16:1e:
3e:24:f7:2d:86:2a:4d:f6:0c:4f:36:8d:55:91:8a:c2:58:d4:
29:b5:01:1a:dd:4f:a0:bd:22:a2:d2:c1:cb:71:e4:32:7f:31:
09:fd:82:23:ba:02:d4:e4:a4:66:9d:47:45:be:da:a1:1f:21:
ed:31:f3:0c:8f:22:c2:ea:5c:69:e2:4c:5b:53:31:ad:a2:b2:
0a:7f:46:4b:a7:10:5e:e2:13:24:7e:a1:18:7c:25:4b:ff:9e:
f1:52:e1:c8:0a:09:56:fd:9b:5b:ba:30:78:e1:35:3f:2b:70:
b1:8a:4f:c2:4a:44:1b:96:0d:06:28:e5:36:ef:55:78:4a:9f:
fb:fb:ef:5b:82:af:06:b6:32:cd:9f:cf:62:6d:fb:c1:c7:26:
e3:b7:a0:36:a4:db:b8:64:9b:b9:ee:a5:40:03:df:09:69:14:
cd:cb:1b:29:e7:c0:d6:bf:91:6d:c6:5f:6f:a7:4b:9e:da:1a:
a0:e0:58:20:c2:67:56:0e:74:45:e4:2e:d4:0c:a2:02:7f:29:
96:4c:62:d1:4d:a5:da:6a:30:e3:c7:26:9f:1b:a1:7e:ef:31:
2a:bc:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 20:23:18 2024 by rpki-client on console-fra.rpki-client.org