Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: KAuLfiGegyeXVEsRGBJh30yIoRtRgRRnl+G40Em8XPY=
Subject key identifier: BC:ED:8E:06:A9:A7:25:D2:C8:EE:FB:A5:70:54:79:25:07:C0:71:0D
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 018F2539478CF6A9B40AD963215F5D17053F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 049E
Signing time: Sun 28 Apr 2024 15:01:01 +0000
Manifest this update: Sun 28 Apr 2024 15:01:01 +0000
Manifest next update: Mon 29 Apr 2024 15:01:01 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: ZHatYSNGonQjJiBNyYdnPiv+5zhTt2G5VMhIhiXc67I=)
2: OjWHkO9Fp8HNvgGOFjzb8fbBDvQ.roa (hash: s4Jir+A11EG1cAY25HRmV6/tdu9hHRSFBL68394KABA=)
3: zCSUjkmYpzRl6PTG2rOlRzEu5nI.roa (hash: kv+cl6m0WgfjQ8koba7ByooF+FeU4gxgIAQhbia7j4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 12:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:25:39:47:8c:f6:a9:b4:0a:d9:63:21:5f:5d:17:05:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Apr 28 15:01:01 2024 GMT
Not After : Apr 29 15:01:01 2024 GMT
Subject: CN=bced8e06a9a725d2c8eefba57054792507c0710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:be:b9:45:2c:24:2e:c5:c0:69:86:d1:95:
dc:a3:d3:78:4d:01:30:38:f9:75:09:7a:9e:27:ae:
f9:75:60:c7:fc:32:43:f4:9a:33:11:de:8d:49:d8:
00:f6:7c:fc:be:84:00:bf:b1:94:8e:1f:30:2b:f4:
b5:fe:5d:3f:24:8f:1c:2a:d6:5e:74:e9:c8:93:5f:
32:40:64:dc:96:30:21:77:4c:a4:70:5d:5c:b5:49:
03:b8:42:a7:12:05:73:b3:52:5f:a4:46:83:f4:29:
ff:0e:0a:de:36:cf:93:52:85:b8:c8:ba:bc:97:05:
03:be:ed:44:26:94:9b:27:12:d6:a7:36:a9:da:4c:
9a:c8:20:3b:f9:6a:61:f2:51:47:ca:a8:72:59:c6:
2b:62:df:8f:c5:69:c0:9f:da:8d:47:f9:3a:2e:e2:
ef:1d:00:9d:c5:33:99:40:83:3e:f2:c0:58:49:54:
ae:fc:7d:f3:1a:09:1c:d9:69:4e:25:70:06:e5:ed:
df:80:e1:35:9e:ff:b8:19:8c:80:0a:b8:41:d3:60:
30:6e:de:1d:df:08:dc:6e:51:66:51:00:54:8c:f1:
f3:23:ec:dd:63:00:b8:d5:81:00:a3:d2:61:83:ac:
b5:a8:8f:b3:ed:6a:ed:0a:02:08:6d:a4:a4:2f:04:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:8E:06:A9:A7:25:D2:C8:EE:FB:A5:70:54:79:25:07:C0:71:0D
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:29:80:03:f0:85:d1:1d:88:6e:9b:0b:06:18:25:75:86:
d2:45:86:5a:36:25:e0:0e:bd:f4:31:2c:ac:b9:78:3a:24:b3:
88:de:96:04:f4:f4:52:1e:1f:82:76:1b:9a:4f:f6:ef:f9:38:
84:d7:43:d0:90:f4:ba:c5:15:66:39:3f:a0:48:03:77:97:62:
4e:fe:ef:30:78:73:d4:ed:e8:38:f8:96:9d:5b:8f:00:5d:fb:
df:76:bb:ac:4c:ac:bd:10:a2:80:66:05:c7:47:0b:76:a9:0a:
fa:44:a6:98:9c:e9:63:17:a4:f5:95:73:aa:5a:39:2a:04:16:
c1:d5:40:81:c2:0c:7b:89:ec:57:3e:6d:46:43:4c:c8:13:59:
54:29:97:43:fb:ae:6d:ed:48:08:05:12:01:fa:06:54:48:27:
06:a3:f3:a1:bc:d4:75:4b:57:82:67:77:96:a6:88:de:7e:af:
18:e0:78:a9:8a:80:fe:2f:39:01:d9:07:5b:f9:8f:ae:98:52:
52:80:80:25:1b:1a:ea:19:89:b5:6f:be:a3:46:55:a6:9b:03:
2b:4d:2e:53:ad:8e:11:7c:a6:24:cf:15:90:47:f1:46:32:f1:
ee:ac:80:f4:39:92:c2:f6:4b:fc:10:be:72:3e:eb:ea:36:30:
a1:86:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:30:28 2024 by rpki-client on console-fra.rpki-client.org