Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: O18+5xK09sCpQPN1Allnvg4dPTddeqnNKVc35bBm7g0=
Subject key identifier: C6:49:E7:31:D6:DF:02:90:1B:DF:AC:97:28:E8:80:B2:DA:C7:40:F9
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 018F9F87CAEB33438BCD998B9E53F0886369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0B7E
Signing time: Wed 22 May 2024 09:00:27 +0000
Manifest this update: Wed 22 May 2024 09:00:27 +0000
Manifest next update: Thu 23 May 2024 09:00:27 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: hypTNgVIwd5uP3bnhWkw2pSzT+2SFgITxgSwINUM9zI=)
2: 8GIvJtJizN9wJS9RttgPc3kdVIM.roa (hash: Sf7iQfKfH4sDFBy09aD5dc6Qemkb4hsSBwyFzyteXI0=)
3: AmBxCry7bL4vmGvsHzDqpKN4rGQ.roa (hash: U3AFDno7fOM1hpEvBpvS0uGtylX/YY6iTfPkYKBqGXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:87:ca:eb:33:43:8b:cd:99:8b:9e:53:f0:88:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: May 22 09:00:27 2024 GMT
Not After : May 23 09:00:27 2024 GMT
Subject: CN=c649e731d6df02901bdfac9728e880b2dac740f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:ac:a9:f4:f3:99:54:f6:a4:51:15:05:5b:
b8:eb:84:cf:48:de:fe:4e:22:da:e7:5e:b8:17:39:
81:08:46:fa:cc:33:fa:36:2a:47:29:89:14:90:e9:
fd:be:77:14:a2:46:2f:87:39:f9:d6:1a:74:e1:06:
75:7c:14:ab:b1:c3:d6:ed:4a:d6:71:98:76:39:cf:
af:e2:34:42:0f:e8:46:5d:e4:1f:fc:23:dd:33:58:
9b:f2:54:9b:45:a1:19:07:d9:1f:26:6b:c4:2a:45:
a1:02:92:01:8e:00:26:4b:b7:7c:6a:ec:ff:3f:5b:
70:69:53:42:32:90:5d:06:5a:d7:8b:6e:5e:18:57:
79:9d:93:80:34:a2:46:67:7b:c5:36:4a:51:f4:6a:
65:9f:f8:aa:03:05:1f:a9:c3:ee:df:2b:c2:e9:06:
8a:4c:98:00:31:bc:d3:93:89:be:bc:05:ea:ce:53:
18:cd:a6:5e:ca:77:fc:d3:6f:a6:54:89:07:53:14:
73:91:0e:f1:45:ad:cf:39:b1:bf:2e:dd:60:aa:f9:
33:14:e9:d0:55:37:3b:75:6a:c5:80:ae:90:fc:03:
40:a2:fa:0a:fc:2b:db:8d:23:03:98:fc:31:6d:14:
de:a3:bd:73:14:11:ee:2d:c3:a4:1e:3c:6a:43:c1:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:E7:31:D6:DF:02:90:1B:DF:AC:97:28:E8:80:B2:DA:C7:40:F9
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:1b:75:50:ca:44:8d:76:06:08:8f:ec:94:aa:94:29:84:
70:0d:ed:16:22:06:81:4d:e3:96:4c:f2:86:a9:f6:12:8e:47:
c5:b3:83:2b:16:94:1b:24:b1:54:7a:ca:d9:6d:69:1c:ec:6a:
ac:71:38:54:15:56:6d:76:75:0e:cd:eb:5e:18:ba:76:ed:87:
43:54:a7:d8:2a:fe:7c:c2:9c:a6:ab:29:b1:b0:5a:18:b5:98:
40:ae:bf:29:ff:a4:96:ca:4b:4f:63:55:5b:fd:f0:8b:44:eb:
77:a4:1b:9e:c0:45:3a:13:de:70:4a:3f:e8:59:29:b7:aa:71:
e0:b1:ab:20:68:61:f6:69:b0:03:6f:54:ca:98:e1:ed:0c:e8:
23:62:89:56:2a:00:78:bb:8e:57:e2:e3:e6:0c:76:6d:69:1c:
b2:d1:7e:32:11:7a:92:7f:98:cd:a2:71:fe:7b:0c:da:5d:bc:
93:9d:c1:1c:12:0c:20:ad:c1:2f:ac:14:44:1e:bb:cd:91:e9:
ff:de:65:c6:12:e8:ff:20:f6:3c:71:e4:ae:61:a6:5f:c2:f1:
7a:55:e1:5a:62:0d:c4:57:29:2c:4a:38:63:01:b5:93:d5:c0:
99:60:19:91:3b:f4:26:9d:a7:8f:06:52:40:d5:5b:c6:ed:db:
c5:62:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 15:01:05 2024 by rpki-client on console-ams.rpki-client.org