Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
File: 9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json)
Hash identifier: lNZd5r/WF90Kzc1MxuERMd9fva9WHBW2pAz3yBVJfDU=
Subject key identifier: 89:E0:96:18:09:1E:BE:20:F0:18:F1:7D:31:27:24:BA:F5:83:C8:92
Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
Certificate issuer: /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Certificate serial: 018F2CF2FA29849ED8A85FBED8EE58E966CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
Manifest number: 0EB6
Signing time: Tue 30 Apr 2024 03:01:12 +0000
Manifest this update: Tue 30 Apr 2024 03:01:12 +0000
Manifest next update: Wed 01 May 2024 03:01:12 +0000
Files and hashes: 1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: fznpixaRr37v2uHs+2+j7HK0yqE9f5sTv8HNRasbpr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:f2:fa:29:84:9e:d8:a8:5f:be:d8:ee:58:e9:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1
Validity
Not Before: Apr 30 03:01:12 2024 GMT
Not After : May 1 03:01:12 2024 GMT
Subject: CN=89e09618091ebe20f018f17d312724baf583c892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:fb:15:97:25:4f:86:8d:f6:e1:11:87:1a:
21:d4:9c:8e:7e:c4:d5:ba:b4:ee:0d:89:89:f9:05:
cb:87:7d:8d:76:e0:cc:24:fe:e7:a2:6e:d0:2e:ae:
0f:93:6d:02:c3:f2:1e:06:7c:8f:3e:04:ec:13:d6:
1d:f8:e3:cc:bb:79:82:de:db:65:b6:f9:e0:9b:92:
9b:b0:b2:6b:27:64:5e:bf:f9:3e:45:d7:30:4d:a0:
5e:af:c8:01:e1:25:6e:00:ec:e9:1d:d2:91:11:10:
08:67:28:98:16:de:8f:e5:fd:b2:36:b2:1d:a2:18:
9e:9d:e3:aa:1d:55:28:ca:c5:8e:f6:19:8a:6a:21:
37:e2:0d:c5:b9:95:fd:79:99:d1:94:f7:54:39:cc:
08:bf:23:5f:e5:dd:0e:3e:41:70:af:b8:a4:54:3e:
ba:d0:71:ae:60:d1:a0:e3:37:f6:b8:e4:47:44:eb:
01:ae:b8:ce:89:db:0f:49:3c:8b:e3:46:b6:aa:34:
98:58:b5:89:0a:14:12:5b:5f:a0:c4:1c:8c:45:9e:
f0:9d:0d:72:0c:a3:ec:f9:ac:59:4f:20:f3:d0:d7:
5c:48:32:93:47:ed:7d:97:f5:9b:74:4f:b5:98:64:
78:4a:82:c9:1e:dc:b7:c9:a2:b1:9b:cb:76:8f:b3:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:96:18:09:1E:BE:20:F0:18:F1:7D:31:27:24:BA:F5:83:C8:92
X509v3 Authority Key Identifier:
keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6f:58:af:49:9f:54:20:3c:e2:91:ff:c2:96:9a:b7:fd:94:
ba:05:2d:1d:6b:cd:ee:57:8e:3b:25:e7:2c:7f:6e:7c:8b:47:
64:6d:b2:7c:45:d3:e2:e0:b9:96:a5:3f:29:ad:96:9d:2e:fa:
9d:16:f8:e1:68:06:7d:f6:1e:01:fb:a8:10:22:2e:4b:30:ae:
b2:5b:f3:ca:b0:04:a8:10:c5:3d:23:aa:72:6a:60:84:f1:64:
c7:9e:98:cb:9e:36:c4:71:78:f6:93:22:0d:59:7c:c5:22:bd:
10:39:e7:12:41:d1:b7:cd:ef:5c:ee:a1:fe:80:fe:b4:3c:41:
7b:e6:b4:6c:6c:5b:d2:ee:6c:0c:f8:89:e9:3b:0f:ea:c2:95:
00:70:72:0e:09:1a:60:f8:4d:07:28:af:25:2d:9e:45:17:09:
ad:52:b2:39:6d:f8:fc:f7:e4:21:8a:bc:33:ed:43:b6:52:36:
03:12:2d:7c:7e:89:aa:58:15:6d:d4:b5:2c:7f:37:5e:b5:20:
0b:5b:e1:99:da:4c:4b:03:87:cf:81:44:16:22:07:ea:0c:ce:
95:49:1f:d1:7b:32:0b:95:f6:8f:df:5e:8c:05:2e:17:27:99:
11:31:e7:cb:a1:f5:2b:b4:4f:5f:3d:4a:85:45:bd:4e:4f:0d:
d4:24:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:40:03 2024 by rpki-client on console-fra.rpki-client.org