Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: J4bu7EyVZnrgwmaitSc9obk1E03OpW+Jn2EO67b47DA=
Subject key identifier: 3A:FF:77:BD:7B:C6:3C:84:C0:F9:09:4E:FD:D4:3C:A9:59:22:40:4C
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 018F234AD28C1E738AFD4ECDF606C7C5A31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1143
Signing time: Sun 28 Apr 2024 06:00:57 +0000
Manifest this update: Sun 28 Apr 2024 06:00:57 +0000
Manifest next update: Mon 29 Apr 2024 06:00:57 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: EZr1Iwc8XLJaIdwf/12Bfwknup0f8pNK/kWooNBJIWU=)
2: LPbQhc19-JdikqMkS5r2to6SmIc.roa (hash: KoCdL0JL3mN74O33lQAh/ZziNnauN604I9YBxcIXbYs=)
3: pZEud7983H-ygYCljtMnGRn1D5U.roa (hash: Bebc8HVBotRWmTA/luBbWSiUrBErWz5S5KPjLyW/80k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:4a:d2:8c:1e:73:8a:fd:4e:cd:f6:06:c7:c5:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Apr 28 06:00:57 2024 GMT
Not After : Apr 29 06:00:57 2024 GMT
Subject: CN=3aff77bd7bc63c84c0f9094efdd43ca95922404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:db:fa:00:12:b4:78:a3:70:07:ad:4d:35:
bf:b7:9c:65:66:c8:29:a0:11:93:db:b2:92:4c:27:
07:88:ca:46:c8:5a:19:73:ce:0d:26:83:a6:1e:51:
34:11:15:4e:00:b0:7b:5e:8a:d4:8d:e0:2a:b0:03:
bf:97:1f:9c:ca:eb:d7:d3:24:34:40:52:f4:1c:dd:
d2:2f:d8:ad:d0:e5:25:75:9b:d2:83:a6:9e:26:fb:
fe:24:23:f0:99:fe:4a:c9:e1:ae:7a:27:bf:ad:e4:
b6:1c:6c:86:36:8d:36:60:fc:eb:37:67:d9:2b:ac:
b7:9b:3c:60:46:f4:97:e9:66:4a:87:74:a1:d6:1d:
ac:c2:d2:16:23:17:64:95:77:16:67:0d:bc:17:a7:
2e:f2:24:70:a0:9f:26:25:67:fc:52:89:9d:30:44:
c6:cd:42:c3:72:d1:5f:39:97:6b:90:53:16:51:0e:
a7:9d:18:a9:af:ed:de:6d:43:94:73:9c:e2:6d:e2:
d6:88:e0:10:dd:58:0a:f2:33:54:93:5f:14:d9:b2:
61:0f:ca:f0:53:63:b1:c1:c7:70:08:13:3d:96:f1:
97:4b:c5:36:06:28:ed:5d:ee:ac:03:ef:95:c3:e1:
80:97:2d:2e:ed:bb:ed:57:fc:0b:f8:40:70:f2:71:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:77:BD:7B:C6:3C:84:C0:F9:09:4E:FD:D4:3C:A9:59:22:40:4C
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:46:7c:45:ab:c8:91:e9:8e:4e:63:f6:e4:b1:c1:6a:3d:9c:
a8:13:13:6b:85:8a:55:91:16:8b:7d:bd:cb:8e:f9:4c:e6:c1:
ee:35:06:16:0f:d0:72:c0:25:b5:62:c0:f0:0c:53:96:39:31:
73:42:63:9d:96:d7:18:1e:01:e9:ad:73:49:37:70:30:63:7d:
60:27:b1:fb:86:55:fd:80:6b:a9:be:34:29:79:74:61:9f:6a:
a9:45:4a:d2:cf:15:e1:36:90:71:f7:c7:f9:d8:5f:d0:e6:4c:
64:92:1d:02:ba:fb:aa:99:53:bd:e6:ae:95:86:5a:64:d2:53:
93:39:50:38:6b:0b:38:ce:06:07:45:b9:0c:81:5a:b9:b5:5a:
69:4c:62:4f:9b:84:fa:65:33:4f:2e:3d:12:8f:2c:03:1f:c5:
f3:09:39:0b:28:10:a9:75:bf:bd:41:bf:0e:32:77:e2:09:76:
00:bc:cd:b8:20:26:65:fd:f5:e6:b3:bb:cc:29:42:bf:87:6b:
e0:77:56:47:f8:7a:8e:e5:7a:9f:f4:cb:a1:d9:82:cd:08:9a:
35:0c:1b:c4:a3:6e:62:56:fe:5f:4c:7c:65:79:94:d0:a7:b6:
70:ef:1b:d3:2d:31:23:26:da:e1:7c:74:35:b0:17:89:25:5c:
81:11:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:19:49 2024 by rpki-client on console-ams.rpki-client.org