Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: tYh0MbYu6kExz/R0wRjOHRrRa5EbAkL/WUcMob7EUN8=
Subject key identifier: 32:94:87:02:4F:A4:88:E9:D2:89:49:F2:70:C5:70:2A:11:FF:85:C0
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 018F43B26AD8E7AF7986F5B01976E62E32C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 0DF3
Signing time: Sat 04 May 2024 13:01:57 +0000
Manifest this update: Sat 04 May 2024 13:01:57 +0000
Manifest next update: Sun 05 May 2024 13:01:57 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: z7KKPf/xyZ7uTVa/gwuDRnVmsrwwB9MbYZBjTgYkVHI=)
2: QNstPQE9ZulDLKdz8jmTmvilx7o.roa (hash: Q8sF2hSBUCyfSRRRg9gV0DcvIyX77Fnorxv/6suBlBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b2:6a:d8:e7:af:79:86:f5:b0:19:76:e6:2e:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: May 4 13:01:57 2024 GMT
Not After : May 5 13:01:57 2024 GMT
Subject: CN=329487024fa488e9d28949f270c5702a11ff85c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:74:8f:f0:2c:41:84:33:25:22:5b:6d:95:
3d:eb:ab:be:23:a4:b3:14:4d:46:19:b5:89:25:6d:
27:d4:4e:79:be:05:9c:1f:aa:7b:65:25:c3:3b:9b:
d1:92:81:54:e1:03:13:ea:5e:fc:ae:a1:54:63:43:
63:0f:8f:83:d4:be:83:ea:04:b7:22:d6:11:f1:da:
17:8d:7c:4c:cc:95:5b:d0:e3:d6:1d:e3:e7:9f:19:
5e:cb:06:94:7d:61:d9:3f:80:03:a2:e2:90:01:f8:
7b:7f:b1:16:7e:d9:f1:67:f6:3c:2d:b8:f4:75:fc:
9b:99:89:04:81:e2:eb:00:e6:39:ad:9e:09:0a:51:
3c:90:ca:0b:63:83:24:8d:52:13:1d:27:b9:14:ae:
57:1b:dc:0a:8c:c4:bf:53:09:65:8e:a6:81:b3:24:
b5:92:ea:91:fc:d1:32:e9:22:b3:75:8a:7b:bb:c2:
29:41:8d:f0:b5:db:2e:4f:fa:97:5b:61:a3:59:24:
12:61:bf:1e:15:95:0e:21:9d:e7:c8:24:27:fc:f5:
6a:c1:a8:4e:6f:11:52:ad:80:a9:72:5a:a7:b3:26:
f1:a8:f7:54:40:18:c0:c2:1d:2e:db:a0:00:0d:e9:
3a:21:09:df:a9:c0:a6:c7:c7:5e:ae:44:ff:e3:da:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:87:02:4F:A4:88:E9:D2:89:49:F2:70:C5:70:2A:11:FF:85:C0
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:45:f5:3f:82:2e:7d:e1:ec:b1:72:11:0b:ef:0c:4a:c9:72:
c5:51:58:15:fa:e6:6f:57:e9:43:52:89:db:61:9f:12:0d:15:
9a:1c:30:1a:c6:2e:95:e4:ea:ba:48:6a:ed:5a:92:68:78:9a:
f3:a4:8b:d2:ef:c9:a8:1f:b7:92:2b:8c:1b:e5:c3:8d:e3:af:
98:16:90:c5:97:8f:6e:9a:34:86:39:30:3f:c3:1b:f3:8e:38:
58:4b:2c:eb:53:b2:a6:23:0e:11:23:1f:45:40:d0:94:1d:14:
bc:82:32:c3:06:f7:42:df:a6:b9:a2:c7:ea:9c:4e:8e:5e:87:
8d:39:dd:6b:ff:ea:26:05:e2:d9:62:e5:dc:3f:1f:95:ab:f9:
5c:1d:5d:21:78:61:51:5e:c9:82:57:14:4a:0c:e7:f7:71:12:
3f:b0:0d:70:23:2c:b3:10:47:51:52:30:a7:7e:4e:55:e5:94:
21:f3:7a:bd:b6:59:38:e2:da:0f:ac:a6:48:f3:5f:d4:f6:a6:
26:ab:8b:92:4d:f9:17:62:20:ec:57:8d:f1:f8:40:26:ad:29:
f1:6d:04:16:e6:4e:88:55:d1:4d:14:16:f5:0e:e7:b7:0d:52:
ee:40:33:98:23:92:36:62:e4:4b:d2:e7:5a:7d:23:5c:93:b4:
bb:1e:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:02:26 2024 by rpki-client on console-fra.rpki-client.org