Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: dYMEg5t6crGONykBCncYhrVjzpkKqTKWh5R4HmZa1us=
Subject key identifier: 94:EA:08:C6:46:9C:2F:32:54:67:CA:52:74:D9:F7:5B:D0:6D:93:01
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01901E8F98F708A68484FE0FA750D8CB182B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 02E0
Signing time: Sun 16 Jun 2024 01:00:45 +0000
Manifest this update: Sun 16 Jun 2024 01:00:45 +0000
Manifest next update: Mon 17 Jun 2024 01:00:45 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: 9r4lvAxkDgIcFHw16BKE+BfK2pQ2llHOsxylgOtlnnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:98:f7:08:a6:84:84:fe:0f:a7:50:d8:cb:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jun 16 01:00:45 2024 GMT
Not After : Jun 17 01:00:45 2024 GMT
Subject: CN=94ea08c6469c2f325467ca5274d9f75bd06d9301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:cf:3a:3f:3d:87:0d:42:ba:81:f6:1a:f3:
bf:10:2c:8f:aa:ec:bf:b3:ff:3a:1b:0b:1d:9f:f5:
6e:ba:fa:38:c1:8d:0c:bd:f4:3f:ab:13:38:28:c3:
26:a3:3b:ba:fb:97:00:4b:58:f8:45:15:3d:c7:f8:
8c:20:5f:8c:27:ad:ae:5d:b0:5a:f2:52:e4:1c:13:
dc:26:35:85:23:f3:a8:08:7b:7e:5d:dd:1f:b0:ff:
d3:b1:f5:7c:33:13:d1:b5:00:06:18:78:a0:93:01:
1a:c3:7b:af:08:08:60:bb:da:ce:ec:7b:a1:9b:e9:
70:9f:9c:cc:8a:10:aa:b6:8c:ce:04:3c:06:7c:9d:
3d:5e:40:46:22:d5:b2:cb:d5:f4:27:0f:fb:4a:16:
4f:7c:a7:fe:17:be:1b:4c:ad:7a:29:ec:59:68:36:
4c:da:a8:f0:6a:0c:7c:10:db:77:9e:e5:83:c2:95:
70:9a:3c:f0:31:f1:4f:8d:85:93:e0:23:dc:10:af:
ad:32:3b:42:cc:0b:4e:15:3c:6f:3e:d7:19:40:8c:
e3:3f:67:de:fb:d0:4e:2b:21:85:0c:ea:93:c5:21:
7e:12:aa:9f:28:50:02:e0:ae:4d:61:b2:c7:d4:b4:
da:39:a6:ad:7d:96:e5:9c:3b:a8:b4:22:7b:18:64:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:08:C6:46:9C:2F:32:54:67:CA:52:74:D9:F7:5B:D0:6D:93:01
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:49:b7:c6:67:3b:b7:47:72:92:2f:bc:6f:9b:0c:5e:6f:74:
00:45:64:e4:43:80:f1:3f:e7:8c:72:03:20:05:42:4f:12:59:
bb:ea:8e:75:12:8b:1c:ea:d6:eb:62:c4:ab:49:19:ef:ba:7a:
f5:73:3e:a7:79:71:45:00:8a:29:cf:92:c1:6d:40:ce:80:40:
ef:c7:44:8d:22:d7:42:1b:5b:e6:7b:12:6c:8a:af:f5:c4:89:
21:04:b1:12:79:a6:e9:b8:6f:4c:6e:19:d6:50:a2:39:f3:36:
ca:66:d0:e6:ac:6b:c7:03:a6:01:00:7f:1d:89:6b:ab:14:41:
f0:33:82:3f:41:0f:e3:3b:7a:24:44:e3:c9:85:99:bc:9f:d8:
41:fb:b5:0c:65:af:84:b7:4e:52:59:2b:c9:82:7d:ae:54:cc:
4b:8c:4c:c5:b8:6e:fd:45:2c:ef:a6:7a:8e:f1:99:89:79:63:
b7:c0:1c:f8:68:96:8b:a2:49:04:f9:d3:84:e5:a9:3c:0a:4e:
2d:67:29:e0:38:a7:ad:dd:1a:30:72:16:19:da:68:1c:88:bb:
01:94:4d:ec:00:fb:4a:17:19:0f:ac:47:12:db:df:c1:f3:dd:
12:3a:2c:e8:41:8a:59:72:fd:8f:dc:e9:00:0e:7d:d5:ff:2d:
ba:b1:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:34:05 2024 by rpki-client on console-ams.rpki-client.org