Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: 0JMU4N96+GCmQyOAar/CQ4vbvq6AJ3+84aVcbHzw4IE=
Subject key identifier: 49:2E:B8:48:50:A8:66:C3:8B:A0:78:D3:B4:39:6A:E6:05:6D:4C:28
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 018F231375AFF618841C16B5F180DA6920FA
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 01A9
Signing time: Sun 28 Apr 2024 05:00:26 +0000
Manifest this update: Sun 28 Apr 2024 05:00:26 +0000
Manifest next update: Mon 29 Apr 2024 05:00:26 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: g7e5A3ZUaSPTwPI4RWzkW6N+KkGlBGLNUwniFZTktHE=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: XQSFQUMlaDHv1aEUW9lqMWA2KcUZRgYB4UUKul2dUQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:13:75:af:f6:18:84:1c:16:b5:f1:80:da:69:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Apr 28 05:00:26 2024 GMT
Not After : Apr 29 05:00:26 2024 GMT
Subject: CN=492eb84850a866c38ba078d3b4396ae6056d4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:a3:9a:04:12:6c:e8:77:bc:cc:e8:21:0d:
fd:ef:ca:83:48:9e:f3:aa:1e:0b:bb:f2:bf:84:27:
c3:d6:c9:c3:3a:7c:b0:2b:7d:8f:b8:91:0a:83:1a:
e5:28:6b:b6:49:fd:6a:68:bd:83:6b:5a:3b:3c:d8:
0a:02:bc:bc:a2:66:4e:88:d3:e9:f2:fb:b5:ff:2b:
e1:f7:b5:d9:4f:7e:5c:23:1d:fb:8e:59:f2:c6:3a:
bb:fa:83:c6:ac:83:18:f9:e2:c4:88:1d:00:96:08:
a0:13:db:ec:00:43:85:61:d6:1f:34:93:d9:f6:88:
c9:61:48:e7:2f:c7:c5:bc:be:e1:18:a1:bc:5c:b2:
b8:0c:ea:98:37:ef:c1:6c:12:be:52:87:f5:f5:34:
f0:4a:c1:7e:db:63:48:38:1c:a6:02:81:b6:89:8e:
79:ad:9e:d7:50:1b:e9:e9:ba:53:8e:f7:b2:dd:c2:
9f:34:38:8b:e5:7f:32:80:d4:62:68:76:d0:43:c0:
cc:f1:54:e2:da:7e:c3:ba:94:11:14:d2:18:d2:93:
62:44:9f:04:d6:ad:d0:26:f4:5e:e1:32:4d:ba:46:
1b:fa:f7:5d:c7:6e:41:55:f6:aa:d4:74:82:cd:a7:
1b:7b:00:80:1a:03:8f:04:10:8a:68:03:1c:19:6f:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:B8:48:50:A8:66:C3:8B:A0:78:D3:B4:39:6A:E6:05:6D:4C:28
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:dd:42:82:95:85:c0:98:61:d4:fa:56:06:6d:eb:2b:e4:8c:
74:bc:e3:48:f5:8b:d7:f5:2c:6d:0f:cd:c1:b9:7b:52:41:fb:
89:3b:05:e5:36:d6:0a:72:f6:87:35:28:5f:5b:f6:16:09:2b:
ad:0e:36:29:a2:fa:d2:99:4a:cf:2e:34:79:aa:d1:6b:78:aa:
ff:a6:f8:eb:fb:ea:d2:23:de:e9:a9:0b:2f:37:9b:7e:d0:e7:
73:87:bb:74:3c:a7:c1:5d:c9:ae:42:38:c6:2b:73:7b:da:98:
6d:ba:c2:cb:87:ee:fe:19:b0:c9:1c:c9:a2:12:cb:88:7a:3e:
aa:80:94:70:c0:6b:cf:8f:13:2a:b6:5d:d2:03:e8:74:33:ce:
71:3d:23:7c:36:9a:87:72:42:af:d7:f7:8e:ef:33:c5:9f:cc:
cf:3f:ef:f4:03:17:0e:27:53:e6:e6:61:74:63:2c:4c:50:4f:
9d:ac:91:7a:50:c0:96:90:53:18:ec:a5:fd:1d:8f:f1:b3:78:
08:4e:ab:a1:20:3d:d8:9d:60:b7:2b:9c:26:50:f6:42:8f:3f:
dd:ae:44:6f:79:95:fb:b7:3d:a0:70:b4:d3:67:c0:98:72:46:
a6:b4:2a:64:70:9e:04:f1:df:95:09:43:ad:44:22:7a:e3:bd:
a2:06:02:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:39:35 2024 by rpki-client on console-ams.rpki-client.org