Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: j/b+/I+6rt3And6csojWxKlk2BEWZR9KKg995Nos2w0=
Subject key identifier: DB:B0:0E:98:1C:D2:52:6C:2D:FD:98:65:3F:A9:36:47:10:DB:BC:E7
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 018F3EC2A5870F6A43A689FE46EAEECE7DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 04BB
Signing time: Fri 03 May 2024 14:01:34 +0000
Manifest this update: Fri 03 May 2024 14:01:34 +0000
Manifest next update: Sat 04 May 2024 14:01:34 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: g3deJSRzPvM8g4NARffa2Gxm0cz0n1LOYil5K5EKRQM=)
2: KgVLdPNj87BaVHiyjmSZ_Ls-Ifg.roa (hash: zrb3Uvv435MVV3nLCO0vLaMvpc/2ldT+g0IPwPsA3zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:c2:a5:87:0f:6a:43:a6:89:fe:46:ea:ee:ce:7d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: May 3 14:01:34 2024 GMT
Not After : May 4 14:01:34 2024 GMT
Subject: CN=dbb00e981cd2526c2dfd98653fa9364710dbbce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:79:67:68:a1:f6:69:a2:64:22:71:11:de:
41:45:17:bf:2e:a3:8c:c3:7d:23:ee:4c:8d:a7:e6:
bf:9a:68:5c:3e:76:32:52:9b:70:bb:20:a8:60:94:
61:d0:e6:49:b2:64:bd:ab:38:1b:f9:f7:96:41:85:
bd:84:fd:24:89:32:5f:1b:4a:62:37:59:c6:e4:ab:
3a:a1:19:75:16:6d:a1:34:65:1c:e2:9a:06:92:ed:
fd:1f:a6:5c:95:61:74:aa:dc:aa:3f:6a:b1:1d:aa:
5f:61:45:5c:10:d4:ae:d8:7a:9b:7e:3c:8d:11:7f:
18:82:05:55:1f:14:b9:1d:e3:2d:9d:9e:f1:9d:14:
e7:f6:49:64:7c:03:81:87:25:e1:b0:14:04:2d:b7:
ad:1f:40:6c:e5:76:a6:8e:3d:27:bd:f4:7f:9c:14:
6d:ac:05:48:f7:45:24:2b:6a:4b:c4:86:39:d3:2b:
2f:8f:2e:a2:73:2c:93:a9:90:f0:f4:36:35:ba:75:
6a:79:2e:5e:1b:e8:76:34:85:62:9f:dc:48:00:ab:
80:a9:d6:8d:bd:bc:66:dc:67:0e:a0:35:57:a1:4d:
16:c9:41:a4:4e:df:95:e6:c7:a7:89:61:4a:65:a4:
fa:ba:20:56:71:3f:74:3d:39:13:a8:66:ed:87:bf:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:0E:98:1C:D2:52:6C:2D:FD:98:65:3F:A9:36:47:10:DB:BC:E7
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:13:21:ba:8a:66:f0:ad:6f:28:c2:63:90:7e:98:cb:d3:
7b:ff:7d:f9:fa:3f:37:10:c0:e8:2e:59:34:71:ef:e4:c5:5e:
ca:80:c5:63:28:2c:35:19:41:bb:ec:52:82:a8:0b:6e:23:c8:
65:0a:12:b4:3c:99:ce:37:aa:f6:b9:67:af:90:c9:13:a2:48:
a6:dc:a8:b0:7c:53:4b:c6:34:95:ec:4b:53:3e:0e:71:6b:a5:
ba:1c:c3:2e:3b:eb:88:bf:fb:66:19:a9:2f:f5:39:f9:f1:0f:
2d:80:88:26:10:73:d4:29:2a:3f:6d:f4:3c:da:b0:af:63:d1:
53:d1:2d:b2:23:07:4b:7e:14:e2:be:88:20:87:e5:9e:e9:20:
79:58:35:ad:68:b5:34:8a:02:04:4f:0c:da:bb:36:3e:86:98:
a0:cf:90:4d:e8:ac:3b:2c:fd:ed:23:90:22:7e:67:4f:0e:b8:
32:78:49:6c:6c:8e:94:0e:1b:1e:74:4d:8e:81:95:a6:f3:86:
19:88:ae:57:a4:b1:60:12:37:af:20:95:13:e4:68:7c:69:73:
29:76:94:4c:7e:27:a0:04:84:e6:15:22:8b:fa:40:e6:36:03:
64:39:5b:0a:a3:8c:3a:76:ed:d4:38:a9:ab:11:d9:db:0c:9c:
46:98:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:08:42 2024 by rpki-client on console-fra.rpki-client.org