Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File: rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier: MVNtIBDbv3vimH+Nokgjo3tHlbt51MMZFi3RB9hSuNM=
Subject key identifier: 9A:77:73:21:34:09:E6:C7:76:2A:B8:6D:28:E4:75:67:5F:7E:FC:C8
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer: /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial: 018F874AE2755325CE7ACFBDEFF8B6085844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number: 020E
Signing time: Fri 17 May 2024 16:03:02 +0000
Manifest this update: Fri 17 May 2024 16:03:02 +0000
Manifest next update: Sat 18 May 2024 16:03:02 +0000
Files and hashes: 1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: cxOYNl7mJH/1kE1Lk+SebBogFh2/nMO/Vece/PiNjIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:e2:75:53:25:ce:7a:cf:bd:ef:f8:b6:08:58:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Validity
Not Before: May 17 16:03:02 2024 GMT
Not After : May 18 16:03:02 2024 GMT
Subject: CN=9a7773213409e6c7762ab86d28e475675f7efcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:97:3c:69:23:2e:2b:cd:cb:fd:a8:f4:08:
95:6c:94:d0:30:03:49:4b:5a:46:1c:06:23:08:25:
ba:c2:64:ca:d7:80:1c:c9:05:74:5d:9e:c8:7f:8f:
36:d0:10:36:98:86:37:94:89:58:d6:d7:13:27:6a:
b6:4d:a4:b2:ea:24:bf:dd:30:e2:37:53:25:51:78:
2e:9b:78:86:06:e1:87:8f:b0:53:e6:ca:ed:e5:8d:
48:70:23:b5:8d:a4:50:2c:93:d7:56:f8:7f:36:11:
7f:6b:d8:f0:cb:b8:0e:e7:97:64:d6:50:99:95:83:
05:fa:36:59:8b:69:31:e2:83:c3:68:10:32:24:95:
8c:76:eb:b8:b6:84:c9:5c:00:c4:40:c4:bd:19:bc:
b9:a2:22:41:83:69:16:f0:3d:ff:6a:f6:d5:aa:ad:
cf:89:c3:1c:bb:3e:f1:6f:89:37:24:76:03:71:b3:
38:ab:c7:0a:5e:6a:00:7c:0a:16:30:13:b5:15:2b:
14:7c:84:68:c7:f0:b8:c0:fd:b2:16:22:c2:10:06:
69:96:10:e7:80:58:ae:4a:f7:b1:85:46:07:cf:8c:
e9:4e:14:08:39:2f:73:bc:4d:ae:69:55:ee:ac:ae:
be:15:81:5e:96:05:4e:e0:83:1f:71:42:de:88:ce:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:77:73:21:34:09:E6:C7:76:2A:B8:6D:28:E4:75:67:5F:7E:FC:C8
X509v3 Authority Key Identifier:
keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d6:4b:3d:7e:d5:d5:39:89:bc:af:30:e4:38:bb:bd:16:d4:
f2:33:f5:ce:89:96:00:4f:c5:e0:b9:f4:a0:4c:6b:a1:c4:06:
13:ad:1e:ae:9c:24:57:cf:55:69:78:d0:73:76:68:af:1d:db:
2e:01:62:65:30:99:17:ff:22:d2:d4:17:27:3e:61:02:53:52:
22:14:7d:c0:6b:0f:47:75:3a:e3:e8:98:71:16:bc:bc:29:ad:
15:13:25:12:9b:ad:29:3d:9a:48:0d:c6:43:12:e0:4f:fe:b8:
29:66:b8:14:95:62:39:ff:7b:1b:14:90:82:29:bd:be:dc:9c:
80:32:85:e2:6e:94:fc:03:08:3a:f7:2f:d1:35:d1:1e:db:9c:
de:4f:1f:e1:2e:d2:cd:37:9a:33:6f:1b:47:2e:75:29:8e:4f:
8e:63:e6:b2:f9:77:f4:0b:8e:4c:5a:84:a1:8d:66:b4:07:6d:
cb:0f:0a:c1:62:41:7f:43:b2:de:63:58:a8:f4:54:45:de:83:
92:c7:f4:6d:df:a4:bf:64:3f:70:0e:89:cf:db:ac:c6:7f:8d:
e8:68:f5:08:b7:66:af:61:22:8f:97:fd:4a:d7:70:2d:d7:36:
61:f5:b1:01:1a:52:7d:b7:9d:dc:8c:f0:b6:09:c3:7b:2a:90:
8f:dc:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:21 2024 by rpki-client on console-ams.rpki-client.org