Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: biQR7tyyyhHTNi+O4xMXgydiHYwPHbnvC95E/hmcm1c=
Subject key identifier: E4:3C:8F:80:39:AE:1E:22:2A:F6:56:6C:C5:2C:5E:60:40:0D:12:42
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 018F4DFE67221242D2E1D51B0168F2A3CCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0567
Signing time: Mon 06 May 2024 13:01:09 +0000
Manifest this update: Mon 06 May 2024 13:01:09 +0000
Manifest next update: Tue 07 May 2024 13:01:09 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: cQuMSVihkens8qvkiT+niIC6/Ex3z0OLw9Z01GbqR8g=)
2: zLVd2KSZFVzGAzCsp4qkjH2ROUg.roa (hash: c8cdmjACfrWc+i/lpPbA+SgfaQW8+wph1RE8gz+vPtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:fe:67:22:12:42:d2:e1:d5:1b:01:68:f2:a3:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: May 6 13:01:09 2024 GMT
Not After : May 7 13:01:09 2024 GMT
Subject: CN=e43c8f8039ae1e222af6566cc52c5e60400d1242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:32:ad:5a:eb:e3:02:2f:65:db:85:21:dc:
8a:48:87:1a:c9:b6:bf:bf:e1:a9:3f:ef:b8:70:41:
71:b4:c4:f8:57:d1:84:ac:64:c1:50:2e:68:8c:ff:
4e:8b:ee:9d:dc:09:bb:34:27:2e:95:fb:75:ca:83:
8b:5f:68:4d:33:24:38:12:95:40:35:55:93:e4:3d:
37:ed:44:ef:45:22:06:4d:fe:ec:80:8d:66:6c:49:
f4:79:a9:90:f9:7d:44:98:da:39:9d:02:b9:ba:f2:
1b:ac:7f:ad:4f:e8:df:85:3d:2e:b5:2a:4d:0f:4a:
b1:29:63:97:73:e7:66:3e:b6:96:c5:b4:eb:e6:e4:
b2:5e:e6:11:de:62:e3:9d:25:df:c9:72:7f:23:47:
13:62:e3:d9:61:6c:ac:20:29:70:de:da:17:86:0b:
b3:be:a6:aa:83:1b:9d:a2:03:2f:9c:ad:3c:7a:a2:
97:cb:a2:20:19:a9:33:c0:01:3c:72:18:15:cd:e9:
bd:59:04:bc:55:83:1b:d1:3a:68:25:a7:ad:eb:99:
4d:1b:95:50:73:e1:22:17:cc:0f:1b:29:47:ca:24:
a8:22:51:13:17:9d:36:9c:35:6d:18:0c:9e:3d:1b:
18:7e:20:14:96:b6:63:87:00:fa:97:a1:86:c6:9f:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:8F:80:39:AE:1E:22:2A:F6:56:6C:C5:2C:5E:60:40:0D:12:42
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:39:59:57:db:ca:15:0d:81:27:f7:7a:cd:47:de:82:49:
90:92:b5:52:18:eb:73:4b:b1:58:12:74:ea:02:7e:f4:91:ac:
18:10:12:18:39:48:98:18:1f:0b:c8:81:fa:11:6c:0f:81:be:
e7:7b:98:48:6a:53:1d:f1:05:6c:2a:eb:f4:d5:1a:6e:b0:d4:
5f:90:53:7e:cd:3b:7e:5a:ea:b6:53:56:fd:df:d4:54:b0:6b:
fd:d6:39:14:9d:ad:73:7d:7e:35:d4:64:11:e8:81:bc:9e:bb:
f0:59:85:56:6d:1b:88:d4:9e:b5:e7:38:c2:01:e9:15:00:c9:
75:d8:ee:6f:ba:6e:f3:e8:10:ce:b7:89:61:a0:29:0a:ab:82:
bd:1f:41:c6:5e:d1:6f:df:5b:07:42:44:b7:ac:c5:97:0e:4e:
f2:21:89:d1:eb:fc:38:4c:a3:90:9e:22:98:4e:af:d5:de:cf:
75:71:a8:4f:c9:ed:85:6e:7f:ee:4f:99:4b:84:bf:ba:34:45:
62:50:8c:f4:df:d0:74:d4:f5:80:bf:c7:ec:d4:3a:e7:ea:cd:
4a:af:b8:b6:89:2e:af:d5:78:0f:96:bf:75:6c:d5:3b:d5:49:
ec:80:70:cf:9d:5a:d4:50:1e:3d:6c:88:91:00:44:5c:30:0d:
27:6f:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:28:31 2024 by rpki-client on console-ams.rpki-client.org