Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: 0EA02kpob6y3WgMtEIw5P+Bmf1lVveDSbJgcJYrjEDY=
Subject key identifier: A5:C5:89:92:B4:8A:5D:78:85:D0:59:28:D9:E8:8E:8E:B6:78:A6:BF
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 01901DEB43935BC4649486D5DE43E7C0CFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 11C2
Signing time: Sat 15 Jun 2024 22:01:15 +0000
Manifest this update: Sat 15 Jun 2024 22:01:15 +0000
Manifest next update: Sun 16 Jun 2024 22:01:15 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: V94zPcK+86z9CSNB1Qm7U3KCuJdzPyr/ajA1f07Oqes=)
2: PHoYvpSHtbfyE7VOvl2PMfXwWV0.roa (hash: wcIGz83WpsGpBckHeDjSAoRJqwejp3yCHDfVbIO3hOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:43:93:5b:c4:64:94:86:d5:de:43:e7:c0:cf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jun 15 22:01:15 2024 GMT
Not After : Jun 16 22:01:15 2024 GMT
Subject: CN=a5c58992b48a5d7885d05928d9e88e8eb678a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:3f:31:84:33:28:53:fc:02:4f:d7:02:f9:
72:43:f4:f9:15:54:14:f9:37:9d:6f:6b:e3:4f:27:
89:3d:a8:30:54:87:10:b1:28:4a:49:66:5b:14:c6:
34:40:96:6c:e7:c9:60:1b:90:7f:7b:0f:19:60:a7:
bb:3e:33:59:26:63:da:43:53:e1:b8:45:47:ed:42:
06:fc:57:bb:a4:37:da:1e:8e:d6:cf:30:4e:b8:0c:
8a:9e:0a:f9:b4:88:4c:53:4e:78:66:1d:ca:1e:72:
8b:a4:ff:15:0e:23:13:1b:f1:3d:53:7f:b4:93:7c:
10:01:ef:56:a9:fd:6c:44:63:86:a8:a9:76:6b:b1:
91:5c:58:51:5f:41:4d:7f:af:9f:d8:9d:c3:20:b4:
85:3b:11:43:5c:be:de:99:eb:45:ea:c7:4c:84:62:
47:d7:b1:a1:3f:62:bd:fc:f1:29:cb:a3:86:06:37:
51:21:74:93:d9:f5:30:39:96:84:43:fa:ad:26:fb:
8c:b7:7f:19:40:84:49:be:78:ff:0c:49:2c:65:31:
83:7e:3a:83:3c:cc:20:21:88:2d:b0:17:3f:a5:e5:
ea:b6:3f:81:e4:e8:69:2c:5f:57:d5:3a:45:62:6c:
da:19:e7:8b:15:ec:a3:3f:e6:5c:96:8e:d2:47:12:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:89:92:B4:8A:5D:78:85:D0:59:28:D9:E8:8E:8E:B6:78:A6:BF
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:cc:74:e8:7d:66:5f:08:96:3c:46:45:4f:19:a1:36:79:
8c:10:08:b6:d6:b5:59:bf:ef:38:9c:bc:6a:63:7a:c6:3b:b5:
d1:85:99:42:97:74:8e:39:29:0d:e9:2b:f6:0a:6c:53:f4:5d:
07:ef:87:3a:b7:d0:32:12:94:56:b6:65:ce:50:1d:61:9d:d0:
9a:76:67:35:d0:4b:6d:f7:1d:b5:bf:49:a5:55:14:a3:78:8d:
55:30:43:9e:c7:02:23:46:1d:b1:9e:ad:28:ce:32:cc:09:01:
4c:00:27:0a:79:3a:01:fc:97:fb:dd:94:b6:22:cd:e0:08:36:
8a:5c:75:8f:92:2a:2f:ce:ee:5e:9c:d1:98:80:63:41:11:aa:
55:bb:66:0c:2b:09:cc:76:63:8b:d1:66:7b:9d:09:f8:51:12:
98:3c:68:62:8b:42:a7:6e:9b:bf:79:70:86:2a:5d:6c:ab:31:
9e:1e:e2:c5:bd:08:5e:99:d0:68:af:0f:29:71:ad:b7:5b:c1:
e7:45:71:8b:85:86:21:53:9b:c1:a3:e6:09:05:83:ae:cc:26:
64:55:cd:47:f9:92:70:fa:a3:58:aa:a8:1a:fa:e9:79:e4:7d:
b7:26:36:e1:87:01:8d:ac:b0:a5:d4:81:ff:23:0c:80:5f:b0:
03:7d:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:39 2024 by rpki-client on console-ams.rpki-client.org