Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: 1KTvlu84kOb6rGdUSHbRTmFtUoFDUvYy5Dytge9/IVA=
Subject key identifier: BD:B7:C9:2E:7F:2D:06:FF:52:F2:FD:38:AE:70:A3:3F:AD:E1:D1:C9
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 018F3250769060F3CD76EAEC38057E6C1B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 070F
Signing time: Wed 01 May 2024 04:01:24 +0000
Manifest this update: Wed 01 May 2024 04:01:24 +0000
Manifest next update: Thu 02 May 2024 04:01:24 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: ZjCiQplDosr6+6tmi6Si+bPqfn+VrljGSuU1ehON3II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:50:76:90:60:f3:cd:76:ea:ec:38:05:7e:6c:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: May 1 04:01:24 2024 GMT
Not After : May 2 04:01:24 2024 GMT
Subject: CN=bdb7c92e7f2d06ff52f2fd38ae70a33fade1d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:45:a0:f0:b5:8c:48:a4:94:c3:99:f0:a1:
22:ad:c1:0a:f0:da:6c:51:af:f4:4d:02:68:e7:52:
6a:8e:9f:37:63:d3:de:37:74:9a:99:a2:89:8c:85:
78:db:a3:0b:10:ac:e0:79:67:e7:6f:5c:4e:f8:ea:
bb:d4:dd:9c:3b:11:06:62:68:81:59:73:56:58:6b:
7f:13:87:45:bc:92:9a:35:94:b5:96:a1:07:82:59:
c7:c0:0a:a6:be:92:5b:f0:c4:70:7b:35:87:b6:9c:
14:69:30:2b:5a:98:b8:ad:8d:3d:83:2f:39:7d:4f:
07:84:38:fb:46:a0:1b:06:ed:17:15:d8:5f:03:3e:
b4:b8:3b:97:95:57:4b:a6:12:9c:bb:1e:8b:60:b1:
ac:c6:f6:82:47:8f:09:e5:31:ab:51:44:d4:09:30:
82:d8:0c:78:7a:f1:d3:bb:bf:c1:b4:fc:9f:c3:92:
c0:44:34:96:68:e3:3b:59:ae:ed:c4:0c:f1:d5:80:
9c:1b:a8:09:9e:f7:eb:93:81:fa:dc:ef:9d:b6:76:
f8:4a:53:6a:79:11:2a:4b:de:c7:81:6c:3e:f8:89:
28:1b:db:42:2b:d7:ab:78:00:67:8b:62:19:16:36:
53:34:c2:6a:68:34:cf:c6:fc:46:cc:f3:25:c8:a3:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:C9:2E:7F:2D:06:FF:52:F2:FD:38:AE:70:A3:3F:AD:E1:D1:C9
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9a:d2:96:3d:a4:86:fa:ff:da:7f:be:7e:e6:be:c5:3f:8a:
bb:2f:cf:30:3a:21:a4:e0:71:30:61:8c:19:43:aa:2b:6d:d4:
46:4f:e9:16:92:7f:59:f4:96:0a:3c:22:da:ca:18:3c:61:a8:
a9:35:9b:07:b0:17:75:d8:40:7b:47:72:8e:45:9e:9f:58:c9:
43:c0:56:a6:4c:8c:25:32:80:80:d9:9e:70:8e:84:97:c6:37:
57:0a:a9:3c:53:d8:58:97:2a:86:99:3d:1b:24:eb:4f:01:4c:
cd:07:05:36:4c:99:c4:d4:8b:5d:d2:6d:66:d7:14:fc:4a:8b:
03:c3:b7:31:12:34:21:3a:60:74:69:4b:4a:86:a5:77:36:11:
5c:f6:24:07:ea:5a:83:22:04:0e:d3:e2:1f:f2:49:8e:0c:04:
ce:4c:2c:6e:46:a2:11:8e:e9:cd:a6:bd:06:c8:55:2b:39:ba:
2f:37:75:e6:51:72:12:24:35:e3:d1:db:c4:9b:00:73:39:98:
8e:87:84:32:06:68:f1:10:a5:11:dc:23:d8:ae:7f:e0:72:f4:
f6:30:05:2f:14:f7:c7:9e:f1:71:ac:cc:43:fd:f8:f9:42:3a:
14:f1:d3:ec:5c:67:b5:b3:ca:fd:3e:47:f4:70:3c:84:9f:14:
44:23:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 08:06:25 2024 by rpki-client on console-fra.rpki-client.org