Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 49p7jpkSfvjmQGwFVc9O7qzCrJEHkMq9ntvvnKmIehk=
Subject key identifier: 7F:F7:9B:D3:60:4E:04:8A:D1:E5:B2:1A:89:E0:07:0D:8B:EB:5B:D5
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 018F7C20A2658AFBE18459FE9613D10F6B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1171
Signing time: Wed 15 May 2024 12:01:04 +0000
Manifest this update: Wed 15 May 2024 12:01:04 +0000
Manifest next update: Thu 16 May 2024 12:01:04 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: wDJ+aXTahIVhJ46mGkyw5+1mHtOBZf6HXTO53/oVtfo=)
2: ObQ-a-YoT9d0J20R2C8_0PoZ-R4.roa (hash: fUFOhLtcYVAdfkaJN9B9AkGUOQi+JBVh1S7d0tqQ1Wc=)
3: RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa (hash: +ETCKG1R8zYIY/9m7rGuF80mOtbn1yNfyB+Nz4uIxnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:20:a2:65:8a:fb:e1:84:59:fe:96:13:d1:0f:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: May 15 12:01:04 2024 GMT
Not After : May 16 12:01:04 2024 GMT
Subject: CN=7ff79bd3604e048ad1e5b21a89e0070d8beb5bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:59:01:64:ce:2c:3e:e5:17:34:44:79:a1:
2f:5c:e1:b3:50:87:af:83:ee:dc:09:25:7e:f8:e5:
12:3a:67:06:00:22:3c:25:71:d3:00:da:d2:8f:49:
73:0a:99:d4:50:b7:a6:ac:13:4d:3e:32:7b:17:c1:
c9:50:da:d6:b6:22:2b:f6:dd:25:ab:a0:fb:54:1b:
6e:0d:b7:44:e3:6a:85:53:38:82:62:84:ed:35:ef:
27:10:e5:57:08:83:7e:18:77:a9:89:68:8c:8d:4f:
07:33:86:98:43:39:e6:7f:40:60:fd:86:b7:24:d7:
71:23:8a:fa:56:47:d6:70:43:54:6a:60:14:1b:f2:
97:bd:68:fd:03:ba:b7:9f:37:6d:d6:5e:38:f7:f1:
7a:70:8f:71:3c:1e:92:d6:67:a0:b4:16:a9:21:2b:
7b:4c:a5:fa:3a:dc:ff:b1:e1:3d:dd:49:ad:df:3b:
a0:c0:99:6f:f4:ea:2a:04:14:50:98:ea:32:3f:5b:
7b:d5:90:ba:ea:72:b1:55:ce:6e:6f:34:9b:8d:ff:
88:65:92:24:e9:0e:30:48:21:1a:11:50:09:e8:64:
60:56:57:6f:4a:cb:0b:89:bc:ba:8a:ec:ce:f3:8e:
5d:85:f5:82:93:9f:2b:64:2f:e3:6b:02:b1:71:c6:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:9B:D3:60:4E:04:8A:D1:E5:B2:1A:89:E0:07:0D:8B:EB:5B:D5
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:30:56:e6:97:7b:2c:d5:ad:92:05:3c:6c:cf:98:e3:38:
38:9e:93:21:7b:ed:90:dc:c9:a5:19:43:be:ce:f8:14:cf:89:
f9:d7:50:04:bc:85:d0:b9:89:33:64:07:1b:5a:7a:a1:b1:08:
61:77:40:48:6f:ad:f5:47:7e:5e:d0:c5:dc:40:99:6d:d7:bd:
62:3e:16:0c:e8:ce:34:53:25:10:39:36:11:d6:b2:42:ec:f8:
23:83:0b:01:f3:9f:2e:32:62:91:55:c6:3e:92:81:4f:bb:a7:
48:5c:25:60:34:30:aa:0b:17:14:fd:75:80:75:e9:c6:df:13:
8f:56:f5:d5:53:91:d2:4b:64:45:51:ba:6a:96:ef:8c:89:65:
62:e0:8f:17:81:ab:db:ba:f8:aa:ae:43:1f:61:13:79:6e:b6:
93:ab:74:13:ac:18:37:cb:6a:3c:cb:67:cc:1a:3b:35:9a:e9:
75:a4:90:b9:ab:f0:66:7d:b9:04:90:64:00:b3:f1:9c:c7:4e:
bd:94:e7:a3:5a:be:06:5b:81:45:30:42:ca:86:97:34:fd:37:
a9:6e:48:ca:48:fd:d7:bc:04:3b:22:7f:5b:91:9f:30:c5:af:
7d:ed:9e:cf:ac:e2:42:75:c4:eb:9c:df:fe:78:5e:e9:75:ea:
d9:20:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:11:33 2024 by rpki-client on console-fra.rpki-client.org