Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: Qd53mG6dVClBg3caQYRPX+FVNkenBH4uP8rmH/CROz8=
Subject key identifier: E4:00:70:F2:10:AD:BA:29:32:DA:70:97:81:D6:EB:49:00:34:B7:0B
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 018F855C875C759420F910D93F47964709C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0274
Signing time: Fri 17 May 2024 07:03:04 +0000
Manifest this update: Fri 17 May 2024 07:03:04 +0000
Manifest next update: Sat 18 May 2024 07:03:04 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: Oa5a5Enq/scAFgelkaFqEAj2zHAzKroWzoIMOKxVW20=)
2: Del0sElACeEmPxbCFxo-qrxcC6g.roa (hash: A/gI63ERSc+w9xVvJnjbE11mjwKkCVbRYSH99lAhUVY=)
3: OjoHo3Tazu3i72LRtxL23vbOIK8.roa (hash: bvroMcNS5h7zfQ7n0r10HWvfJC5kA2pxkVdW2W9XrIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:5c:87:5c:75:94:20:f9:10:d9:3f:47:96:47:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: May 17 07:03:04 2024 GMT
Not After : May 18 07:03:04 2024 GMT
Subject: CN=e40070f210adba2932da709781d6eb490034b70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:21:c8:11:a7:0f:d2:a2:7c:a2:5a:5b:dd:
2e:0a:3f:02:32:dc:82:53:2a:e2:eb:50:e6:3a:9e:
03:9d:c6:f4:b7:61:88:d0:6d:eb:93:3d:b7:2b:2c:
a2:10:86:d4:0d:2d:98:05:dc:25:61:42:6a:62:c1:
91:13:82:39:c8:97:4f:d0:09:59:0d:20:2b:c6:dd:
10:f7:c2:9d:8d:77:5c:b1:3c:e1:ed:76:cc:f4:b5:
fd:ee:11:df:33:33:56:27:a0:9c:38:fc:d5:da:9f:
33:68:7f:9e:9c:11:3e:2e:30:44:c2:43:02:4c:21:
ac:d1:c2:f5:5a:fa:1f:fd:60:70:5a:4f:96:3d:ae:
d0:5f:7e:96:98:2f:66:7b:da:33:f7:ee:6b:40:2c:
32:f2:1d:f8:f1:29:2b:b9:3e:86:87:29:b1:02:44:
de:c4:42:f2:63:01:77:c2:00:63:8e:2f:2a:e8:a6:
1b:d5:19:b0:46:1d:30:a2:cb:a9:09:45:0d:d1:db:
2f:2a:06:32:2c:ed:cf:35:67:93:e4:59:c4:7a:6b:
d2:b4:43:5d:f9:fd:48:fa:a1:4b:51:8d:1e:93:fe:
75:41:90:92:08:f3:4a:d3:0a:58:53:37:ea:98:45:
35:de:43:f2:44:b9:4d:70:6d:bc:6d:d4:08:f3:6c:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:70:F2:10:AD:BA:29:32:DA:70:97:81:D6:EB:49:00:34:B7:0B
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:1f:03:99:4c:99:e0:1f:15:0a:9c:5e:32:10:59:e4:3b:
19:ba:1a:04:fa:e3:64:ad:5c:d3:83:9a:a2:f6:02:07:82:3a:
60:8b:97:5a:11:3f:ae:fb:75:cb:73:1b:27:71:b6:10:b7:59:
98:50:3c:fc:8c:09:fc:a1:a1:44:12:0a:29:46:b0:9d:a7:8e:
e7:d0:5b:98:e5:b1:88:6e:5f:01:ae:ae:10:bb:d6:4b:6b:07:
8e:ab:a4:9d:71:8d:21:35:7b:f9:de:39:a1:6a:d5:89:a7:df:
e8:c4:40:51:bd:22:44:49:6b:9d:c1:b7:41:8e:cb:6e:b7:ea:
f4:34:9c:8c:22:a8:d9:3f:41:c2:ca:b4:87:69:59:09:68:b4:
83:9f:6c:b3:f0:cf:e4:50:dd:63:1c:dd:22:24:12:9a:b7:db:
90:53:f6:2f:89:5e:68:cf:8c:26:0e:b7:cf:1c:b5:30:a4:9a:
28:3a:ec:7a:7e:3a:a2:bc:32:04:db:32:a4:1a:17:f0:61:05:
0d:31:73:78:44:0b:8a:4b:7d:ff:e4:50:ea:f7:ef:94:ae:75:
57:a5:a5:f1:02:bf:0a:5a:c2:c1:25:e6:fe:a0:fd:06:e3:be:
e6:fe:59:d0:c6:1f:d4:d4:e9:52:c3:fa:a4:8f:5b:90:d8:dc:
c6:29:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:23:45 2024 by rpki-client on console-ams.rpki-client.org