Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: h7L23veNW2plfjI5ftyMaf3/pf9phWe9rEWmgurdAdI=
Subject key identifier: 74:26:C3:A9:D3:E0:29:58:47:DA:05:4C:B6:D0:1C:FB:2D:A6:A7:A2
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 018F9B0676F05F16B540D58DAACFB7BC78BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 036F
Signing time: Tue 21 May 2024 12:00:43 +0000
Manifest this update: Tue 21 May 2024 12:00:43 +0000
Manifest next update: Wed 22 May 2024 12:00:43 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: DtoAqFImmkxRt/JbdMD1NkvUbZmKR03xITssOh1ELGQ=)
2: 4-3kj-D14e3EK4sJ-up5ng2XrhI.roa (hash: heHDVmqt3D7pwz3N+6R11nATahu4prWnElQnPRhGA9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:06:76:f0:5f:16:b5:40:d5:8d:aa:cf:b7:bc:78:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: May 21 12:00:43 2024 GMT
Not After : May 22 12:00:43 2024 GMT
Subject: CN=7426c3a9d3e0295847da054cb6d01cfb2da6a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:98:cd:51:07:75:1d:25:5f:9b:99:c6:2f:
c7:67:0a:be:6c:53:2c:67:a3:6c:f9:85:80:1d:10:
26:ae:13:a0:b5:cd:8d:b0:ae:1d:b3:bd:a7:44:52:
c1:20:c6:21:b4:af:ea:d5:06:d9:e5:e4:ad:64:e5:
9f:7c:b7:99:5a:78:4f:6a:28:d1:77:18:b3:10:67:
78:22:b3:d8:14:39:2c:f7:4b:b1:14:82:91:7c:16:
ec:86:5b:7a:3a:c6:05:fd:fd:bc:7b:f7:4a:75:14:
e6:ad:84:08:a3:94:ee:25:cb:78:1b:fa:35:1a:3c:
8f:c0:36:14:6b:82:88:43:4a:e9:02:49:ff:5c:bf:
c4:5a:8e:2a:1b:c8:f2:63:8a:dc:d7:57:57:da:90:
b5:bf:5e:29:3f:23:37:d1:6f:af:2a:a4:9a:a5:10:
d9:69:91:73:5b:0a:95:6b:34:fa:d5:61:2b:d0:46:
ff:c1:ef:de:d6:3f:c3:b8:8d:96:e1:1b:d5:22:12:
73:e3:44:32:cb:33:9e:31:10:ac:3c:d2:f8:fe:5b:
61:33:f7:c7:19:44:55:b4:ff:d4:08:50:9a:37:8c:
20:a0:50:0a:6b:d8:ef:18:1e:3d:e6:c8:2c:4e:ff:
c4:95:b5:cd:13:99:77:b6:5b:2f:4a:6f:31:51:73:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:C3:A9:D3:E0:29:58:47:DA:05:4C:B6:D0:1C:FB:2D:A6:A7:A2
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:aa:56:60:14:30:03:f6:0e:d6:5e:ff:96:e7:af:df:06:76:
ba:bb:5f:ed:fe:4e:4a:bc:88:f3:17:ae:27:21:35:b5:5d:99:
88:8a:76:81:52:c8:34:96:4b:1d:6c:7e:07:82:af:2c:7b:dd:
9b:3a:e9:1c:37:74:86:7d:17:e6:08:5c:ef:b7:c8:6c:dd:5d:
76:b8:4b:8c:77:d2:7f:1e:72:e2:d5:57:54:22:82:fd:61:03:
5f:0d:6c:af:0c:4f:d0:f3:71:1c:4f:83:f2:7a:ee:14:eb:e4:
0d:8b:f3:ac:07:ac:5c:3c:8f:44:cd:25:c1:d2:dd:0e:36:df:
3b:67:d0:e7:a4:c4:4c:6f:88:27:e6:ae:5a:9c:3d:4b:af:c6:
a5:fb:2b:ae:95:98:96:8e:ed:10:4b:39:04:91:14:b0:f1:df:
d9:bf:b1:1d:5a:49:4b:0e:3f:e9:78:d3:fe:3d:c2:a2:29:18:
b2:f3:9d:89:c4:be:ba:e3:92:ad:cf:85:1c:2b:e8:63:12:7a:
20:2e:8a:f3:a4:5a:a8:52:4a:8f:4f:fe:2a:cc:9f:cf:0f:d9:
73:ea:a0:43:6e:63:77:2b:3f:d2:89:e6:f9:95:c6:4a:2e:42:
f7:df:ad:40:9f:f3:3d:2a:46:d8:0c:0b:f3:30:df:39:59:5e:
0d:12:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:36:24 2024 by rpki-client on console-ams.rpki-client.org