Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: G8f5Jw6UrWbHoWmRCBidrltnLlhPYWM21p55wh+jwoE=
Subject key identifier: F0:A6:9E:71:47:94:14:60:C0:B2:95:FB:B2:2A:7A:08:3F:FA:DE:8B
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 018F20EEE28B5CA3E8F3FE137E9C19BCAC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0553
Signing time: Sat 27 Apr 2024 19:01:17 +0000
Manifest this update: Sat 27 Apr 2024 19:01:17 +0000
Manifest next update: Sun 28 Apr 2024 19:01:17 +0000
Files and hashes: 1: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: 0nas27/RCkaGchtpAGTFgA537ofbCXVq3QzJL96nj1I=)
2: hbRSajZqXcqh9vtqSGd4mGXriQQ.roa (hash: qCkFA4pZ4RRH26gVG/cyBm4oPh3KyHDlvgpjaVNPrAo=)
3: yKo-CbjxLW0bNXfKVddcYcSe-8g.roa (hash: eYHmo0CUSUsDNqbPcqGOXa7l8kqt7mVufpMD1iQ5kZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:ee:e2:8b:5c:a3:e8:f3:fe:13:7e:9c:19:bc:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Apr 27 19:01:17 2024 GMT
Not After : Apr 28 19:01:17 2024 GMT
Subject: CN=f0a69e7147941460c0b295fbb22a7a083ffade8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:48:7e:3d:b0:20:46:28:65:c7:51:25:ca:
dc:f0:3e:9d:a1:44:55:55:59:5b:3a:b6:51:ab:ed:
f9:31:d8:9f:40:08:da:30:4c:ca:42:c4:7d:9e:7d:
09:72:81:e4:42:80:4b:e5:05:9f:2e:7e:e8:61:c9:
7c:51:32:54:d0:6c:b0:34:78:b0:2d:10:3a:ca:0b:
a1:39:3e:06:f7:fa:b4:1a:2d:5e:55:1f:e9:25:99:
ac:c4:49:ca:ac:a0:01:d0:e9:50:19:8d:0e:16:5d:
1b:8d:83:4a:70:db:37:76:4e:b3:ba:94:96:c7:33:
b6:a1:c8:05:2a:36:b9:72:9d:50:69:72:df:08:0c:
de:d4:b7:60:c2:ac:e3:d1:25:19:dc:dc:66:21:82:
dd:bc:3c:11:ad:d5:3c:f5:c3:7e:f5:50:2a:1f:59:
70:1a:25:76:a2:36:31:9d:3b:72:6a:d9:e1:64:68:
22:9e:15:2c:21:ba:9a:a0:0c:67:bb:2b:0b:84:b9:
a4:71:19:67:52:06:ec:bc:99:03:fe:f2:83:14:3b:
ca:91:66:29:21:cd:47:40:48:50:a6:2e:67:d2:a7:
0b:2f:cf:8b:22:fb:77:6f:46:b4:f1:19:2c:e8:dc:
84:d4:57:1f:76:13:85:e3:c0:11:89:80:90:15:05:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:9E:71:47:94:14:60:C0:B2:95:FB:B2:2A:7A:08:3F:FA:DE:8B
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:75:3e:51:01:2b:85:85:95:79:ac:0c:36:a7:6e:1c:1a:
fb:41:53:fb:e0:87:a0:c1:23:dd:71:2f:61:2e:88:90:07:10:
77:65:32:42:b4:41:ef:8f:38:a4:a4:ec:de:82:28:d2:bf:94:
6e:28:26:bc:81:60:f6:63:ab:b4:73:29:97:69:d7:f0:f4:1c:
4d:a6:4c:a9:6f:9c:e0:f8:95:1c:59:82:e5:fd:70:f0:e6:f4:
30:b2:17:b0:39:97:25:cd:c8:58:d7:f4:c3:0f:00:39:c5:b2:
21:7c:2d:9e:3b:35:69:53:e0:a2:28:1a:5c:04:9c:0a:a0:b2:
b7:f9:62:f4:98:ba:7d:a0:b9:8b:8a:d9:24:91:0a:b8:8c:99:
71:fa:5c:cf:56:19:a3:80:8e:b6:59:3b:38:e3:da:a1:8a:f7:
c4:63:48:4e:fd:23:90:e2:33:ef:6b:2b:47:5d:af:32:6d:1f:
87:c0:39:4d:be:11:ce:f2:af:6d:54:db:5e:50:9d:ce:49:1c:
3d:87:21:43:d4:7f:fb:39:00:aa:89:93:ff:39:ff:ea:0a:55:
62:5c:79:95:71:b2:2f:a1:1b:ea:57:40:ec:1c:c5:e3:5e:7d:
19:86:ff:bf:ea:80:c4:77:2d:97:5c:c7:c3:9b:db:b3:e0:2c:
f4:c7:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:07:15 2024 by rpki-client on console-ams.rpki-client.org