Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: /DC99O/bc+LaKtCS3ti8G4O63kPmfvMaSnCt+RXe2Dc=
Subject key identifier: AF:79:D4:22:8E:C2:DB:15:B5:35:1A:0B:14:2C:31:C0:F1:54:8C:C3
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 018F373F8E9359C7B906F8AB3BFF1D84F406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0577
Signing time: Thu 02 May 2024 03:01:03 +0000
Manifest this update: Thu 02 May 2024 03:01:03 +0000
Manifest next update: Fri 03 May 2024 03:01:03 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: QcvJzJlUe6idTBHRIJ47u8HSqdoWsWYDS+ysTsL81TA=)
2: cUWKAioA_J7gOte-XX6pWdeiQGY.roa (hash: WvLaHJmcX6uN0fLjPxU/9RdVHA2dq8KLA1STC4+TWAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:3f:8e:93:59:c7:b9:06:f8:ab:3b:ff:1d:84:f4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: May 2 03:01:03 2024 GMT
Not After : May 3 03:01:03 2024 GMT
Subject: CN=af79d4228ec2db15b5351a0b142c31c0f1548cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:c4:ec:92:e4:c4:ef:64:13:93:85:c4:1d:
26:c3:75:1d:81:03:67:f1:08:eb:2c:8e:e2:84:4e:
0d:2e:2b:4e:4e:85:64:20:bc:7b:9d:4b:45:6d:f9:
e7:2f:35:e9:93:35:32:3a:bb:6a:09:fc:6f:f4:3b:
b4:08:81:85:88:5c:e5:47:8b:b6:d1:3f:47:a9:8e:
33:8c:09:a0:5f:62:e0:f2:59:f2:77:ab:80:91:f1:
11:98:14:b7:6c:3c:c7:4e:ee:87:96:aa:a3:36:bf:
a9:ab:7d:8b:94:02:bf:a3:13:50:21:03:52:5a:65:
e8:ae:b8:bb:57:9f:40:df:f9:3c:c8:4a:a2:e9:bc:
d0:d4:1e:3b:20:2c:c3:1f:6b:94:07:f9:63:8d:00:
b0:ec:7c:02:78:32:ae:c2:1d:e2:e7:8d:20:71:a3:
f3:b7:bb:26:bd:95:8a:b6:9e:06:4d:6b:fe:58:48:
46:55:4f:17:d8:41:b6:82:ea:5d:23:a6:0c:9e:f6:
28:84:5f:44:f9:04:b6:1f:06:db:61:56:3c:10:bb:
e3:08:b1:c4:50:81:ad:db:45:0a:c0:e6:75:17:64:
44:16:23:76:6c:9f:a5:65:4c:5d:1c:fe:35:69:db:
89:06:7f:9b:d9:11:7b:8f:d2:c4:1f:e8:5f:e7:1e:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:79:D4:22:8E:C2:DB:15:B5:35:1A:0B:14:2C:31:C0:F1:54:8C:C3
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:4a:98:e7:3a:f8:e9:f5:e7:2b:82:b1:84:db:ab:8e:2c:
34:9a:e7:4f:76:8c:9c:5d:f3:07:d4:06:9e:5a:04:a2:dc:eb:
ee:cf:a1:06:d9:d2:74:87:9d:5b:cb:61:50:18:dd:15:70:06:
5e:02:11:1e:dd:8b:89:0c:73:b2:3f:fb:1a:a7:84:9d:56:e7:
90:92:4c:67:46:c9:5a:c1:81:6f:50:1f:0e:3d:15:a2:08:50:
f4:ee:34:e0:13:0e:df:c1:d1:48:d6:29:a4:80:aa:e1:01:a9:
e7:c3:80:e8:22:a5:d3:5b:ce:2a:c7:32:1a:e2:ae:be:98:14:
f5:5e:ed:23:28:cb:9c:38:07:ec:2a:4d:35:98:dc:1c:89:3e:
6c:30:ed:d6:74:46:51:1f:4e:f3:1c:12:b7:ef:ac:65:85:1f:
21:27:f0:8d:71:d5:1e:db:a9:73:02:93:f6:97:9c:66:8e:ea:
0d:9a:33:9e:14:4f:29:44:28:c3:d1:26:07:5f:88:ec:49:ce:
ee:37:f3:f8:ce:7c:0a:70:c4:b6:b3:89:a9:76:4f:8c:26:65:
de:e4:f3:95:a1:b9:2b:c6:b7:df:f0:6a:83:29:e1:04:ad:be:
e6:5e:bf:a1:9a:99:d6:b3:9d:f0:c8:9b:d0:5c:2b:8c:a4:a5:
da:36:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:55:02 2024 by rpki-client on console-fra.rpki-client.org