Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
File: IBesiOMgcueKq9vmrSWiYLHZOU0.mft (raw, json)
Hash identifier: FNmBPAJLQSqM4EuEVqZqkCafZNk5jvV6IpX0Qa9OMqg=
Subject key identifier: F0:E3:F4:94:1B:DB:39:78:71:1C:5C:6A:51:0E:36:6B:2F:64:AF:C6
Authority key identifier: 20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
Certificate issuer: /CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
Certificate serial: 018F87B6870C952B9BAFEB4662542951B79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
Manifest number: 02EE
Signing time: Fri 17 May 2024 18:00:37 +0000
Manifest this update: Fri 17 May 2024 18:00:37 +0000
Manifest next update: Sat 18 May 2024 18:00:37 +0000
Files and hashes: 1: IBesiOMgcueKq9vmrSWiYLHZOU0.crl (hash: CJ8lzhMlUM9XnzxTSqrdvqdg03LPAgXYX7aHwkwHDbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:87:0c:95:2b:9b:af:eb:46:62:54:29:51:b7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
Validity
Not Before: May 17 18:00:37 2024 GMT
Not After : May 18 18:00:37 2024 GMT
Subject: CN=f0e3f4941bdb3978711c5c6a510e366b2f64afc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:67:80:71:11:8b:f4:bd:d8:b7:59:32:1c:
cb:92:9d:c9:10:1e:8a:1d:dd:2d:1d:c3:fa:b8:74:
02:5b:38:66:b7:e2:d2:4c:4c:92:d2:b4:32:05:0c:
57:6d:a8:12:48:e6:06:a7:88:38:05:8c:94:6b:1f:
e5:6d:75:aa:6e:35:8c:f1:a6:a6:42:13:ce:d2:07:
38:b4:d9:57:2e:4b:08:23:4c:d5:87:16:80:ba:80:
0f:83:ef:8c:37:2b:64:38:11:22:05:e3:56:cb:5b:
bc:30:5a:46:48:d5:f8:2c:18:df:7f:67:fb:b6:f5:
71:fb:c6:a5:e9:cd:7d:dd:af:21:25:d3:f7:4f:47:
ae:07:59:cc:f0:0b:76:8c:be:07:f8:c2:a5:10:17:
5d:72:57:5e:b9:cd:fa:66:4d:d7:ae:9f:5f:a6:26:
6e:7d:89:c2:66:1f:88:fc:18:4f:e4:ad:b5:70:9e:
2c:d8:d4:a6:44:e3:32:7e:9d:1b:b6:23:32:3f:26:
4d:da:82:9a:41:a1:eb:59:40:3f:7f:a2:ef:f0:ba:
b8:97:a9:4f:c3:7a:3f:71:07:c0:7b:67:c7:ea:1d:
65:9d:ea:ca:bc:9e:fe:42:9b:e9:a2:1f:9c:e5:78:
89:e0:83:da:49:cf:cb:0d:48:b8:87:13:43:de:4e:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:F4:94:1B:DB:39:78:71:1C:5C:6A:51:0E:36:6B:2F:64:AF:C6
X509v3 Authority Key Identifier:
keyid:20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:67:ac:94:87:95:82:2c:f8:46:cd:bb:15:b3:a7:b9:df:42:
99:e4:dc:12:ee:01:06:e4:af:48:1e:66:aa:9f:66:20:f8:1f:
38:20:79:9d:b8:95:39:86:03:63:8b:98:b2:5b:eb:22:92:9a:
3e:05:3e:83:09:af:e5:71:83:65:19:32:c0:ce:5e:c4:33:fd:
06:03:c8:1a:8a:12:70:12:a9:2b:13:be:f8:6a:f5:a1:00:47:
6a:67:5a:d1:47:bc:cf:3b:71:c2:5f:5e:00:8b:43:3d:72:83:
d1:2f:28:16:5f:57:59:24:2b:bd:ef:f1:83:d5:dc:27:52:7f:
ef:15:98:f9:a5:2d:86:62:26:8f:a4:af:54:8b:2f:d9:88:0d:
bc:44:c2:e9:6a:63:67:d0:c4:50:48:39:b5:aa:09:5a:10:05:
80:e9:92:6f:b6:6b:96:cc:48:3f:36:63:03:69:f5:42:32:96:
d2:ee:fb:92:bd:a9:a8:a8:57:77:11:9e:d4:d9:c0:a3:34:1f:
89:5b:94:27:82:41:af:bd:df:cc:7d:64:38:3d:30:c0:9a:3d:
2d:18:10:8a:28:cd:3c:d3:21:6e:7c:f6:ee:eb:25:cf:43:06:
70:21:ca:b1:82:ad:33:ae:ba:20:ee:2f:8d:a1:f5:1c:1a:87:
bc:41:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:56 2024 by rpki-client on console-fra.rpki-client.org