Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: Hh3C6WNlxGd9yG9x5qYJXN/988pMau10izt9sEdOh6c=
Subject key identifier: 4D:FB:7A:CB:C9:BB:21:D1:CF:B2:7C:77:14:BD:24:F7:94:EA:3E:2A
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 018F1F02BF4FBC7C89968767CA4DB1A82804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 0E8F
Signing time: Sat 27 Apr 2024 10:03:44 +0000
Manifest this update: Sat 27 Apr 2024 10:03:44 +0000
Manifest next update: Sun 28 Apr 2024 10:03:44 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: 3xj4KDZ++L42YHYk+lnLDQIDgBUj8+rOUrnW8JomnQU=)
2: 2rNzZMm3INs3ag552XvlxKkgsEA.roa (hash: rXgG+DRcB2ter41Rh6MQzi6NzNIXCAXcCRzWcNp6m8A=)
3: JjD70XtvsSvkaZBweUdcuKhN3yA.roa (hash: GO3gQG8eTSJNbnd5pUYnqL5orXdpm5el+bYg314piV8=)
4: qBimJ_xTI3zsMP3DZW0q9b64J8s.roa (hash: HvmBdVhBYF42ATzFIZjkSUg082Xc4Okka4eSxDJe88s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:02:bf:4f:bc:7c:89:96:87:67:ca:4d:b1:a8:28:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Apr 27 10:03:44 2024 GMT
Not After : Apr 28 10:03:44 2024 GMT
Subject: CN=4dfb7acbc9bb21d1cfb27c7714bd24f794ea3e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:35:71:7d:5e:68:1d:8d:44:2d:f6:cf:6f:
a6:0d:99:9e:4f:e6:26:41:f4:d9:05:21:df:b7:f5:
8d:3f:d1:be:96:c0:21:fe:9c:ae:c5:8f:ac:45:b3:
a6:e7:a5:71:19:0a:38:ff:bf:52:9e:59:b8:6b:1f:
c2:d6:ee:31:43:7f:6a:ce:24:f0:8d:93:d4:ce:e4:
11:c0:0e:21:40:e9:55:95:c6:6e:70:56:b0:a5:90:
2c:46:bb:ce:ef:22:a6:2b:7e:e4:e0:eb:e5:ca:c1:
bd:c3:11:52:b4:e0:bb:aa:c4:aa:86:35:57:d5:b7:
19:36:bc:35:94:db:33:4b:b9:f3:fc:cd:b0:7a:3b:
cb:7a:eb:76:b6:4b:de:5a:f1:ee:86:27:26:7a:5f:
af:50:55:4d:31:ca:f9:29:11:a7:b7:5f:b4:0f:fc:
d6:ad:24:3d:5c:d1:c4:ea:b8:16:8c:b3:b1:86:44:
5b:d3:dc:47:80:96:08:05:f8:a3:0e:8a:37:6e:e2:
2c:d4:74:fc:21:81:db:b6:a5:26:1c:d9:eb:2d:65:
4a:1f:55:25:f5:68:17:a3:37:58:87:e3:f8:1c:e8:
74:05:c4:f3:e9:12:81:12:35:61:91:bb:66:70:ed:
13:d4:97:cd:9e:03:9f:65:85:bc:0b:31:af:b7:1a:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:7A:CB:C9:BB:21:D1:CF:B2:7C:77:14:BD:24:F7:94:EA:3E:2A
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:a7:56:fa:50:c5:b4:fb:b5:2b:23:e7:b0:c6:5f:53:43:
1d:63:b2:5e:47:f6:2b:62:a2:c9:16:dc:6b:43:b7:13:ae:1c:
f7:b1:53:75:f6:7f:7f:7e:6d:86:c0:0a:48:0f:f5:16:73:73:
dc:3e:53:fb:f7:d8:31:ff:90:3d:d7:63:34:ef:b0:15:b3:31:
03:07:4d:c2:08:5a:5d:5c:4e:ff:cb:f1:66:e8:23:21:2e:6e:
16:f5:eb:23:35:8e:c9:c9:2b:49:57:bf:60:6f:4d:36:a5:ae:
aa:72:2b:a7:9f:9c:27:19:58:09:55:81:0d:b3:bd:48:70:0c:
e3:a9:96:d3:56:44:a5:9c:c2:db:d3:69:2f:c9:82:02:a2:b7:
0c:e2:f6:e2:5c:0d:6f:6f:9c:2d:8b:9f:ec:eb:6f:92:12:74:
5b:b8:f7:5c:8c:80:bb:dc:a4:1f:f5:1b:f6:4d:9f:7b:1e:52:
36:55:c3:1f:9b:bd:43:70:3a:f7:61:27:21:58:19:6e:60:1f:
b9:e8:fc:c9:d0:b0:ab:99:43:a0:ef:fc:fa:07:95:b1:1f:e8:
fb:e7:a0:0e:90:02:05:af:ca:86:5c:8a:33:c8:cb:70:14:f5:
56:12:be:01:94:68:67:b1:b0:aa:f6:32:95:e8:be:02:6b:43:
18:e0:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:09:50 2024 by rpki-client on console-ams.rpki-client.org