Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: nugn2qT+X6byr1T9M0+mG+7Gfx9+hEYaxcrwAX2qJGQ=
Subject key identifier: B5:0F:CE:35:71:6D:43:18:A8:04:7A:1F:29:05:B5:F3:A3:38:C7:E2
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 018F33626B6F90E7DC61C7E42EF3C5CD80BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 09D3
Signing time: Wed 01 May 2024 09:00:39 +0000
Manifest this update: Wed 01 May 2024 09:00:39 +0000
Manifest next update: Thu 02 May 2024 09:00:39 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: +sKqXwYN34W4ka3qkXAltd9zwdZ5zYID1U1ucsiwT/8=)
2: 5Lue1BBrhP-uljYRCo0sqjb0oDs.roa (hash: MZSjcbifjet8Hnypu0zjI5hL3Rcq4h0448vdIPNV+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:62:6b:6f:90:e7:dc:61:c7:e4:2e:f3:c5:cd:80:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: May 1 09:00:39 2024 GMT
Not After : May 2 09:00:39 2024 GMT
Subject: CN=b50fce35716d4318a8047a1f2905b5f3a338c7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:c6:33:6f:3b:fa:90:9e:cb:88:5a:01:d2:
ac:d6:84:ef:f0:b3:b7:d4:bc:42:1e:7a:43:4e:bc:
e5:3e:4d:ba:e2:b1:ef:2e:36:28:96:a1:36:fc:f3:
60:8f:80:14:6c:11:ed:75:34:b1:24:9a:47:10:d0:
f0:4c:70:02:83:0f:ef:1c:a0:69:46:10:28:06:3b:
e9:3c:36:08:ad:7f:50:71:9a:d6:3f:3f:ec:67:92:
3f:50:64:92:b9:ef:99:b4:64:30:0f:c6:48:34:c8:
8e:93:98:ac:0e:cf:0f:de:d2:9a:09:f3:a9:e1:94:
c0:f0:ab:e4:a5:06:41:24:17:01:a9:cf:8b:6c:06:
7e:a1:0b:92:17:62:41:b6:0e:5a:fa:5f:9c:98:42:
72:42:e9:b5:70:61:10:bb:6d:8d:7d:88:46:10:38:
1f:ac:10:61:17:8a:7f:bc:bf:1c:09:0a:46:2c:65:
11:cf:1b:29:8d:62:cf:19:ba:aa:99:06:4a:9e:1b:
03:da:24:e4:e7:14:a5:03:b9:91:52:ad:11:b0:a3:
b2:40:51:4f:d0:6d:2d:68:26:92:b6:59:55:99:ad:
02:85:9f:ab:33:23:ab:16:c2:27:66:e4:b7:5b:1c:
5f:75:28:b1:24:e3:53:2b:bc:2a:6c:7c:5c:18:4e:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0F:CE:35:71:6D:43:18:A8:04:7A:1F:29:05:B5:F3:A3:38:C7:E2
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8d:2d:4f:50:21:a6:e8:fb:c6:ec:65:72:d1:05:91:7c:22:
3c:e8:53:86:b3:77:4b:b2:5b:6e:73:2c:8a:3f:77:90:fb:56:
4a:6a:22:26:a3:9f:7f:a3:21:2c:2f:0c:0e:c2:5b:41:36:b4:
28:d0:9d:7c:55:70:62:53:2f:da:a7:0e:ac:21:02:93:50:37:
44:36:70:33:5e:11:2d:50:df:11:cc:eb:33:03:9d:7f:a6:08:
50:8b:f0:b2:23:d2:db:25:af:c4:9b:2b:a5:ea:75:fa:54:fd:
d4:3d:c8:40:5d:82:bc:62:5e:4f:d8:95:58:d3:f5:4e:3d:9e:
d4:1a:38:72:e7:78:06:91:46:87:53:6e:8e:43:d9:0b:97:b0:
3a:71:a3:d2:ab:27:13:de:09:ce:14:44:24:c1:0c:ec:e3:d5:
ab:a6:af:db:21:5c:8b:d6:7b:31:23:e7:2f:79:78:aa:2e:61:
ac:81:23:2a:46:c2:6b:4e:1c:ee:93:c1:1c:f2:9b:b0:08:e0:
7d:87:4a:05:2e:b4:a8:4d:09:6e:53:b6:e4:c8:d0:f1:17:3b:
63:8e:14:9d:f0:25:61:96:2b:37:4d:8f:26:6b:8b:4e:97:5f:
e3:0c:13:63:16:4e:aa:c4:b6:52:01:67:d6:25:f7:94:df:b8:
c4:e2:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:59:41 2024 by rpki-client on console-fra.rpki-client.org