Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: 1KqlXx14To3Hz+sSbGXeLkqK44sG/jeuiOs05jUrBHM=
Subject key identifier: A2:1F:B0:00:0B:E5:D9:B6:47:CD:EF:96:8D:0F:3A:34:00:91:09:DC
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 018F87B64D6AF4E3807963ECD656694868A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1173
Signing time: Fri 17 May 2024 18:00:22 +0000
Manifest this update: Fri 17 May 2024 18:00:22 +0000
Manifest next update: Sat 18 May 2024 18:00:22 +0000
Files and hashes: 1: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: 8EswtISxpP6XBWh0gpZDl5zZsqNapVWNYPMdUCLX+3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:4d:6a:f4:e3:80:79:63:ec:d6:56:69:48:68:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: May 17 18:00:22 2024 GMT
Not After : May 18 18:00:22 2024 GMT
Subject: CN=a21fb0000be5d9b647cdef968d0f3a34009109dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:ff:7d:a9:63:28:ce:10:32:9d:53:c9:a7:
91:ca:44:7f:85:8a:f4:81:7b:cf:81:92:72:41:2c:
43:41:69:0c:ac:24:c9:80:c5:85:93:02:d8:0a:2f:
b3:96:02:09:56:54:9f:ff:92:06:4a:d6:0f:3c:f5:
67:1b:b5:d8:af:86:e5:76:8a:fb:9e:84:2b:fc:d3:
9c:56:f9:4e:39:31:f8:9d:f1:1f:67:2c:17:1b:dc:
24:40:af:d2:1e:03:1e:90:87:c9:f2:d1:91:21:48:
de:eb:04:09:ce:12:5e:33:d0:9a:18:68:7b:bd:b8:
8b:07:d2:2a:4f:20:47:17:c6:40:e2:7c:69:a1:11:
df:6a:f5:3c:09:7c:f7:61:9a:43:64:ac:45:0e:64:
62:75:75:43:72:8f:fa:8c:86:36:c1:89:37:2e:b0:
38:1d:c7:9b:15:1c:01:77:c9:f7:ce:93:41:d6:f7:
59:71:3a:6c:a4:9f:5c:9f:80:af:6d:99:2e:c3:ff:
b4:e5:b2:41:fd:fb:7e:77:bf:f9:a3:9c:8d:ce:1e:
93:69:fd:ea:df:29:9a:a0:c3:3f:37:83:27:2e:a1:
15:b1:41:a1:7d:01:7e:09:27:98:87:b0:a2:47:56:
d0:94:33:a9:ff:da:b9:d2:f7:c1:0f:b2:08:1f:97:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:B0:00:0B:E5:D9:B6:47:CD:EF:96:8D:0F:3A:34:00:91:09:DC
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:7f:0f:f7:85:0d:60:ba:c9:b1:19:42:0b:83:f9:da:53:
de:9c:ce:6a:b4:a1:3a:b4:29:8b:fd:77:39:6f:10:05:09:86:
c1:ef:a4:c2:0a:2f:49:44:14:64:27:15:16:32:d6:7f:33:b4:
5e:b9:d1:7e:6c:58:aa:80:a0:59:ce:95:d2:b2:f5:f0:dc:5a:
7a:24:da:bd:55:2b:f6:44:90:0f:5c:63:0d:c6:7d:da:d7:75:
16:5b:60:34:14:ee:a6:92:7b:a7:a6:5f:5b:76:a0:ea:9f:b3:
6e:50:4d:be:77:8e:48:23:60:83:2f:72:37:44:1c:3d:2c:7f:
77:b0:62:40:90:22:98:5a:e2:fe:75:80:87:22:4e:3a:17:56:
e3:ce:a1:88:9c:a5:1c:38:09:d3:92:5b:10:6b:e2:78:5c:51:
10:9f:76:00:0f:ef:27:61:52:dd:bc:27:1c:ac:ff:a5:39:85:
f9:6c:96:97:a1:57:ae:ac:65:d3:24:5c:12:2d:5e:7e:70:16:
87:58:5f:78:27:36:1d:ff:f9:47:14:6f:17:8b:3f:aa:04:88:
f9:74:98:cf:b8:ae:cd:65:68:8b:75:2e:48:fe:40:e8:a1:53:
b3:83:62:ee:b7:4b:fc:83:6a:24:f0:2f:3a:7b:a5:37:ce:b1:
42:96:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:06 2024 by rpki-client on console-fra.rpki-client.org