Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: HrO2gHotQuMVvZNhLgyR614ij5kdonL7nQDTzg/oSNg=
Subject key identifier: 29:B1:CF:DA:44:DF:CD:BC:4D:E4:01:C9:E4:96:41:A6:9F:C0:09:88
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 018F874A185AED7659D52578042CCB687724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 07A5
Signing time: Fri 17 May 2024 16:02:11 +0000
Manifest this update: Fri 17 May 2024 16:02:11 +0000
Manifest next update: Sat 18 May 2024 16:02:11 +0000
Files and hashes: 1: D2sic2OTpdCSs0nGVib05YlMVbY.roa (hash: p45iQtmvxqkGEDHiO9+fDExwigJgUTnXy8oMYVQX7HM=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: g9PPczROtTHMl2iCwKN+/KNrauuh3cGoqKkGo0/aUGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:18:5a:ed:76:59:d5:25:78:04:2c:cb:68:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: May 17 16:02:11 2024 GMT
Not After : May 18 16:02:11 2024 GMT
Subject: CN=29b1cfda44dfcdbc4de401c9e49641a69fc00988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:58:cf:87:76:ca:3a:3f:a5:a6:4a:24:af:
5d:c8:2e:a7:e2:63:2e:96:6e:e6:dd:d1:eb:ae:0d:
0e:5d:4a:ce:91:dc:08:9f:67:3e:d8:b3:40:0d:35:
b6:8f:57:97:11:f2:51:0d:a4:66:25:34:9a:18:00:
a5:e2:0e:75:3b:47:0c:4e:cc:b6:f0:ca:93:f2:dc:
36:a9:f7:08:a5:78:d2:24:1c:4e:d1:fd:c8:51:5f:
4e:00:a5:a2:22:82:54:9d:09:58:36:99:7e:16:cf:
80:71:34:ac:b0:a5:42:e3:a8:70:81:25:82:4b:e8:
22:ed:c7:8c:29:f0:60:c4:8d:0e:ba:6d:1a:db:2f:
35:ac:db:19:9a:8a:75:4f:4f:88:3f:45:3d:a8:a0:
72:e1:f5:19:1d:1f:87:8b:02:52:d8:89:5b:c8:ef:
6e:89:cf:41:38:2d:fb:0b:c2:95:e9:19:e8:e9:e2:
39:18:63:d2:b0:1f:04:d6:a3:ac:6e:4d:b1:5b:69:
1b:50:e6:b3:98:4e:76:d0:84:4a:41:d8:46:3f:91:
d7:2c:6c:11:87:67:1a:ad:e9:85:e9:3d:e5:13:a2:
88:cd:18:cf:25:be:d5:e0:7a:27:4c:7b:59:19:37:
63:2b:a1:8e:b2:07:00:69:57:f8:9b:99:21:c1:82:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:CF:DA:44:DF:CD:BC:4D:E4:01:C9:E4:96:41:A6:9F:C0:09:88
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a0:02:29:95:81:8a:72:e4:0f:9b:8e:f0:27:e2:ff:0d:93:
38:22:87:54:61:e1:6b:e1:28:cd:78:c9:81:8a:4d:11:30:a8:
b3:cf:23:69:00:38:7c:20:dd:a7:94:7f:db:4d:9b:aa:88:ef:
74:d9:0c:fa:73:10:15:7c:3a:91:74:f0:69:41:5d:99:ca:35:
5a:ca:99:a8:cf:55:65:09:75:f9:78:e8:4c:e4:c4:c7:1b:ed:
58:f1:09:27:7a:39:ce:f2:50:f2:94:20:d3:71:91:67:63:ae:
e3:e8:54:ef:bf:81:c7:7c:3b:58:a8:8e:ae:ef:99:a3:33:e5:
1c:af:93:6b:c3:39:51:11:f3:2c:79:da:58:0b:92:2a:b2:1a:
16:61:6a:fd:39:63:52:95:77:76:b9:a5:8c:47:08:d9:6c:f8:
94:9c:07:00:51:75:95:7d:70:c5:b9:7f:f2:f8:99:0c:b4:0b:
69:0f:08:52:e0:a9:db:ae:09:27:5d:23:b2:fd:ca:17:cd:05:
2b:c6:04:8c:97:26:a2:88:b5:d4:d6:6f:c5:ca:9e:37:40:c3:
37:b1:72:29:a8:ab:c3:e1:ef:2d:9e:cf:8b:bd:44:8f:70:0c:
b2:58:dd:25:95:75:f2:fd:b6:e3:a9:8b:d9:83:92:33:33:31:
30:4f:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:40 2024 by rpki-client on console-ams.rpki-client.org