Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
File: XOpIaZvRUBgukZEQh8QIxKuhzTA.mft (raw, json)
Hash identifier: m0l7tTl4vvR1JDHUHDIdexv3uuewfVOUi90MQ7SQKw4=
Subject key identifier: F7:CE:B0:FC:4A:92:DE:5D:FD:73:D4:2B:01:9A:A3:99:4C:AA:FA:6C
Authority key identifier: 5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
Certificate issuer: /CN=5cea48699bd150182e91911087c408c4aba1cd30
Certificate serial: 018F9B742330CFB6C6C19E3AB3ACB3471137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
Manifest number: 0EC4
Signing time: Tue 21 May 2024 14:00:30 +0000
Manifest this update: Tue 21 May 2024 14:00:30 +0000
Manifest next update: Wed 22 May 2024 14:00:30 +0000
Files and hashes: 1: XOpIaZvRUBgukZEQh8QIxKuhzTA.crl (hash: cf3vAOyj1DMtFjOwtDJ/rIK0tGvKb3ON+N41ExZ9sR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:74:23:30:cf:b6:c6:c1:9e:3a:b3:ac:b3:47:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cea48699bd150182e91911087c408c4aba1cd30
Validity
Not Before: May 21 14:00:30 2024 GMT
Not After : May 22 14:00:30 2024 GMT
Subject: CN=f7ceb0fc4a92de5dfd73d42b019aa3994caafa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:70:03:be:c2:6b:aa:dc:e6:a5:7a:33:97:
6f:65:77:d7:0d:94:14:2d:5c:05:66:0b:af:4c:b3:
2f:78:39:5a:1d:0c:b0:5e:72:8b:b8:3a:82:00:1e:
95:bf:34:0f:27:cd:81:2f:53:a8:f6:75:cf:9d:24:
84:38:6b:c6:b0:60:fd:98:7f:35:1e:63:c7:84:fb:
0f:ff:1c:16:92:5f:5b:96:79:24:68:ee:98:c1:e6:
73:80:cb:b8:8d:a7:96:57:0f:ee:00:9a:b9:4c:08:
90:33:45:5e:a5:2e:a9:8b:2c:bd:15:8c:5c:f1:c7:
7c:fd:4c:7b:c0:1b:7e:6c:0e:e4:ee:7e:78:37:4a:
32:ee:a5:d7:0c:00:74:c5:da:e9:30:57:5b:96:be:
56:36:b9:6e:58:4a:0d:76:05:b9:c0:3c:22:a7:74:
08:d3:bf:04:71:94:63:ae:2f:58:96:4a:a8:00:b0:
db:54:28:96:27:ed:6e:ca:89:a9:d3:60:63:48:e2:
d9:b3:9c:a4:f6:e8:29:fc:2f:3d:ce:67:10:ec:13:
1e:ef:48:66:e7:2d:f9:76:f0:91:e4:c0:b6:41:88:
e8:cd:8b:89:22:62:1f:a2:60:bd:b3:29:b4:a5:df:
41:6a:ec:2b:ab:c5:a6:fe:83:62:8a:dd:4f:92:c5:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:B0:FC:4A:92:DE:5D:FD:73:D4:2B:01:9A:A3:99:4C:AA:FA:6C
X509v3 Authority Key Identifier:
keyid:5C:EA:48:69:9B:D1:50:18:2E:91:91:10:87:C4:08:C4:AB:A1:CD:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOpIaZvRUBgukZEQh8QIxKuhzTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7a2b0a-82d7-4887-a4e6-b0960eb2f24a/1/XOpIaZvRUBgukZEQh8QIxKuhzTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:a7:09:98:d8:4c:a1:0d:17:59:f9:07:4c:e2:79:d1:ea:
d6:59:76:4b:6f:ff:2d:9b:4d:c3:37:dd:9a:3d:88:36:7a:60:
99:2f:24:e1:e9:e1:6b:d6:e4:8b:54:5e:87:45:88:e3:46:e0:
7a:9b:0a:66:8c:f0:8d:31:dd:77:23:aa:8c:f2:59:8d:8d:ed:
6d:22:e4:94:90:5f:75:6a:bf:24:a2:9d:89:74:48:79:3d:e6:
0c:66:28:26:7d:e6:61:99:c3:82:e0:5c:72:38:09:27:d8:f6:
05:4a:85:57:b0:88:9b:20:77:b2:e2:e7:12:b0:92:86:52:e2:
09:63:88:ad:dc:d7:ea:51:20:d6:f9:88:dc:ed:53:e6:79:18:
87:79:9d:b6:ad:94:61:1b:15:77:c2:b7:14:9d:11:cd:68:21:
8f:24:49:90:f0:51:5b:76:eb:ac:12:51:4e:00:fb:cf:58:0c:
47:1e:3f:ee:a1:99:db:af:7f:15:46:38:7c:c5:62:9d:20:bf:
af:ff:3d:c4:81:80:d9:0d:3a:20:5d:1b:b7:df:c3:2b:36:c3:
3d:81:75:c9:f8:46:8c:1b:7d:da:3c:5d:9e:68:ec:6d:0e:3c:
eb:65:ef:24:70:de:e9:40:a2:81:d4:6e:5f:1f:e3:3c:39:d0:
db:df:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:09:18 2024 by rpki-client on console-fra.rpki-client.org