Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: G4x91cIOOCyHHcZQJsbOsVaZmyt8WJIQG06Or+pot00=
Subject key identifier: BB:7A:A5:62:9A:8D:97:B0:B0:77:3D:4B:FE:9A:6C:7B:0D:85:02:56
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 018F4CB4BCD163B477C38A219BFBA8797308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 1159
Signing time: Mon 06 May 2024 07:01:04 +0000
Manifest this update: Mon 06 May 2024 07:01:04 +0000
Manifest next update: Tue 07 May 2024 07:01:04 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: Of2TlEgl1aWo28cXpl64Kww82u3iAZVJdLycV5oYBu4=)
2: Slq-L6wi2S1qs4s8EaXULfAVCIk.roa (hash: n9b0iQPmyKGYYri8CjzcAH0h9c6C0/9Sl8rhtkxgnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:b4:bc:d1:63:b4:77:c3:8a:21:9b:fb:a8:79:73:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: May 6 07:01:04 2024 GMT
Not After : May 7 07:01:04 2024 GMT
Subject: CN=bb7aa5629a8d97b0b0773d4bfe9a6c7b0d850256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:d2:a4:c1:09:2a:cf:02:b6:be:fe:9d:ff:
c7:5f:60:b7:7e:d5:b8:32:ab:d6:96:ab:33:00:0a:
45:9b:bc:85:e2:c9:23:96:db:78:b6:79:12:d3:51:
e2:e2:8c:22:17:9e:c4:41:de:b2:bb:32:93:a9:91:
eb:8c:9f:44:0b:d3:48:d7:d1:e1:85:2c:e3:1e:a9:
e8:ab:3d:c3:17:2a:c7:b4:c8:0f:ff:6f:17:e9:40:
47:6f:3d:d7:b0:bd:16:6c:09:88:99:cf:cd:1f:ad:
a3:06:5b:55:8d:9c:45:ee:43:c4:1e:e8:f8:af:a3:
13:f7:e3:3c:c6:57:d1:8e:a9:23:21:78:c1:52:15:
d2:fe:80:c4:d7:2e:8c:8c:b1:79:1a:b3:f1:78:3c:
b8:b5:06:7a:a4:86:0e:a9:7c:0c:2f:e6:40:73:a4:
ec:76:1f:d1:f3:a2:8f:c4:3c:64:0d:c7:45:80:d1:
ca:51:1b:37:25:62:e0:9c:74:58:b5:77:1d:d5:43:
7c:b8:0a:00:61:ea:23:0e:d1:e9:fb:ee:a6:cf:8d:
45:67:c8:b2:24:a9:d0:19:ba:c5:c7:c1:33:c7:bf:
f8:e8:49:88:72:4a:6c:72:94:bd:30:0b:57:ad:7a:
72:33:cb:0e:ac:b1:5e:9f:84:e0:2c:39:b0:66:3c:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:A5:62:9A:8D:97:B0:B0:77:3D:4B:FE:9A:6C:7B:0D:85:02:56
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:26:88:d2:a4:02:72:59:53:be:1b:1a:34:74:1b:f5:99:27:
b1:aa:95:79:b3:95:3a:5a:1b:57:3e:9b:f3:27:29:41:59:e3:
d9:66:ba:a7:16:6c:a4:c4:ef:df:cf:bd:65:7a:0b:a8:00:c7:
17:1e:7b:8b:f0:9a:c4:69:18:6c:c5:b0:8a:ac:66:71:d5:45:
1a:fe:cf:15:ef:c5:d1:d0:0a:32:25:2e:7d:3a:99:7a:fd:f9:
0e:13:8b:ac:88:c5:6e:ea:89:be:a5:6c:26:69:2f:a0:3e:ae:
26:d1:00:2c:99:74:fd:cd:29:e2:cd:98:ef:47:6b:d1:eb:af:
d4:cf:7d:1e:04:26:fa:d9:7c:e8:13:f1:bb:78:d1:77:46:16:
06:ab:75:00:64:66:71:a5:2c:40:fd:e0:e7:ff:0e:0a:32:85:
a3:cc:e8:1f:c6:af:35:35:c3:2d:9c:d9:d3:34:dc:62:1b:f1:
88:fc:10:6a:fa:39:ae:45:19:d9:8a:e1:db:5f:14:b8:f8:1a:
10:bf:28:77:50:1f:2c:ef:f2:d5:83:11:f4:51:cc:15:1d:61:
00:79:62:03:ae:aa:2b:b0:0e:35:9c:5b:1a:87:e0:ba:e1:20:
ee:21:96:28:eb:46:bc:c2:fa:bc:12:b4:0b:dc:52:ed:4e:ec:
f8:cd:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:42:49 2024 by rpki-client on console-ams.rpki-client.org