Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
File: 1ehYR8xEuGECJwu9do5MPOuhyYg.mft (raw, json)
Hash identifier: SkJ+e7qao/80BOB8SYSQ9GPfi8B0cELtymE8+GGvE8c=
Subject key identifier: 75:97:58:48:76:54:94:F2:A8:B8:75:4C:05:FA:DF:88:83:A2:C3:E5
Authority key identifier: D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
Certificate issuer: /CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Certificate serial: 0191FAEC6422C028A3DD489FBD248432FE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
Manifest number: 014E
Signing time: Mon 16 Sep 2024 13:01:21 +0000
Manifest this update: Mon 16 Sep 2024 13:01:21 +0000
Manifest next update: Tue 17 Sep 2024 13:01:21 +0000
Files and hashes: 1: 1ehYR8xEuGECJwu9do5MPOuhyYg.crl (hash: hfE0OtE87uFJhx9ff9c+R1E128BcayD6NDjYGukC6w4=)
2: rJX5SI2GFMrvMMaqhgYSkN0d9iE.roa (hash: R51XUAVbbF/qahaP1NcRlwQWqeWUdzatZgOmBkb1njw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:ec:64:22:c0:28:a3:dd:48:9f:bd:24:84:32:fe:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Validity
Not Before: Sep 16 13:01:21 2024 GMT
Not After : Sep 17 13:01:21 2024 GMT
Subject: CN=75975848765494f2a8b8754c05fadf8883a2c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:46:1a:d6:3f:93:3b:17:9e:f3:db:1e:cd:
48:6a:eb:ae:70:35:74:e7:43:28:27:d6:36:d0:37:
69:6d:ba:ef:b0:88:05:df:3c:1b:eb:26:b4:e1:8a:
75:ad:03:da:e5:67:70:a1:c2:01:23:c2:98:09:6b:
4c:4b:03:ad:77:11:a0:10:6b:5e:15:d5:9a:a4:96:
b1:22:55:c0:0e:df:42:39:f8:28:58:06:80:19:78:
5b:83:c1:7d:89:d9:35:25:66:33:86:32:dd:79:21:
81:3f:8a:10:72:d3:a9:a3:9d:b7:2d:f9:0a:d1:81:
2e:75:93:df:21:ec:ae:ca:cf:b1:ee:38:8d:3d:b1:
4b:f3:38:3f:57:4e:32:4d:8d:87:fe:c7:95:a7:3e:
12:36:96:0a:1e:93:43:97:6e:37:43:96:43:6a:36:
00:c8:f0:eb:26:ee:ff:48:a8:d0:2a:a2:0d:b9:f0:
6a:11:71:17:83:4e:0d:86:d5:e8:bd:67:43:09:58:
1f:09:b6:14:36:e2:4c:0a:6b:69:91:6a:62:93:1e:
8a:8f:de:67:bd:a0:56:9d:e8:a3:5d:d9:a0:09:78:
35:f1:d4:48:84:1f:90:ed:4d:bd:0a:db:18:1a:25:
35:5f:70:e1:f9:a5:61:6a:47:72:1c:5f:59:bf:8b:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:58:48:76:54:94:F2:A8:B8:75:4C:05:FA:DF:88:83:A2:C3:E5
X509v3 Authority Key Identifier:
keyid:D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:96:29:89:f9:67:65:64:54:40:49:1d:80:22:32:cd:eb:
cf:2d:67:c2:be:71:d5:8e:0f:89:e5:d1:cf:7c:d4:76:8c:93:
b7:3d:6f:86:6e:5c:a5:28:9e:5e:37:60:73:e0:77:85:ce:da:
81:1e:8a:6b:ad:73:69:20:42:75:ac:a7:bd:cf:5a:0e:fa:58:
b4:04:6f:45:13:98:f2:1c:58:ee:14:74:05:ee:df:5c:d6:e4:
67:f5:c9:ee:bd:11:7d:e6:56:4d:7b:9a:0b:7c:40:3f:e6:a7:
48:f7:e0:35:77:08:85:f8:1e:59:c8:5e:d9:b8:36:d2:07:b6:
ac:46:e1:c3:4b:71:4e:62:70:29:3c:b6:bc:4e:46:44:4e:c5:
fa:11:3b:0f:1b:24:e3:a5:13:80:bb:17:df:41:a2:e5:0d:34:
7d:28:54:45:d1:a7:36:e0:7f:31:5a:7f:5d:1c:45:c6:a7:b4:
8a:b9:5d:ab:2d:55:da:9a:b7:ac:02:79:ee:b1:16:d5:8f:c3:
58:f5:89:95:fa:af:f3:9e:35:44:3c:65:74:63:33:3a:ab:90:
af:72:3b:8a:16:46:4e:d1:54:fb:5f:4c:dc:79:cb:b7:d6:2e:
d8:bc:47:cb:ec:d5:1c:18:45:0c:ff:68:82:89:0e:af:11:7c:
73:48:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:16:29 2024 by rpki-client on console-fra.rpki-client.org