Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: Xd0Ysj8sNyU6MIxvafOMoimTew9fxJdyqeOKLHIC0gE=
Subject key identifier: E8:FE:CE:C5:98:90:20:2B:CA:8F:AA:EC:B5:02:C4:68:93:41:E6:B5
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 018F310620E98BF3CAB6CF75EC1D0F38CC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0683
Signing time: Tue 30 Apr 2024 22:00:35 +0000
Manifest this update: Tue 30 Apr 2024 22:00:35 +0000
Manifest next update: Wed 01 May 2024 22:00:35 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: ofg5GlkZR63n7ziHg1L6eqNCE7f9mJTtT7DACYFiw4M=)
2: N55sy6v_9W2s9TQP9WPCjO9slbo.roa (hash: UpskQoINGA88EjJGIVkrMvpMtXX4M3J0WJoIXz5Ixwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:06:20:e9:8b:f3:ca:b6:cf:75:ec:1d:0f:38:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Apr 30 22:00:35 2024 GMT
Not After : May 1 22:00:35 2024 GMT
Subject: CN=e8fecec59890202bca8faaecb502c4689341e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:6d:16:d4:e4:d5:05:3f:91:8f:e7:d5:14:
2d:54:d9:5e:14:e8:c4:23:e3:a5:7b:96:1a:56:fd:
16:14:b6:7e:57:3e:05:c7:eb:86:82:6c:bb:fc:09:
ed:2a:f4:47:33:db:05:2e:3a:74:d7:45:7d:83:7b:
36:d0:d3:6e:8d:3d:cd:dc:5c:fe:97:e1:38:21:fc:
fe:70:1d:2c:b1:e1:e8:fa:7b:a0:cd:15:65:0f:52:
1f:46:f0:29:61:7b:39:e7:82:ee:37:67:53:fd:39:
7b:17:ae:36:40:d4:14:72:d8:c8:8c:55:07:12:2a:
72:f3:34:f5:b8:14:8a:5f:e1:a7:39:8e:e4:9e:88:
85:3f:fc:32:66:22:da:24:91:f1:43:3c:1c:51:0c:
a6:d9:01:2c:d8:f7:e1:19:41:a7:03:20:1e:04:1a:
d9:42:39:46:c8:7b:86:c1:09:90:98:a6:ce:73:07:
b1:3a:8c:66:0b:fa:bb:f9:43:b9:32:71:d3:6f:fc:
2f:75:f5:69:43:4f:28:f1:50:c3:8a:de:df:e1:7e:
14:f1:a3:03:a3:a2:c3:15:7c:77:81:3e:d7:8b:80:
d1:ea:8c:70:f1:83:89:6f:44:3f:7a:0e:47:48:7f:
5d:3b:4a:5e:96:b8:e0:17:0f:88:08:b0:06:cb:f6:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:CE:C5:98:90:20:2B:CA:8F:AA:EC:B5:02:C4:68:93:41:E6:B5
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bd:28:8f:1a:dc:36:06:8e:13:24:e2:4e:c4:57:8d:c4:f4:
8e:73:73:a5:39:cf:6c:33:cf:5c:33:b1:23:24:7e:2c:ba:25:
40:d5:52:42:d9:bd:a9:e9:a9:55:c5:9d:c1:f0:74:cb:73:d4:
77:ba:f4:e7:ee:47:3b:6f:00:f6:22:4e:0b:8f:e1:f5:c7:aa:
9a:ba:b7:9b:ae:9d:4d:6e:01:35:39:76:74:8e:e9:41:04:fc:
d0:4d:fe:54:59:54:90:10:d6:a2:13:35:df:7e:84:5b:51:13:
11:ee:89:46:78:aa:be:7d:54:de:ee:0a:64:3b:cd:b8:24:02:
af:f1:19:d2:6c:e6:54:cf:ed:9b:e0:85:10:55:a8:40:d5:df:
71:52:18:87:d2:80:b8:80:80:b9:8c:f4:8f:bb:75:40:74:8b:
e0:7d:4f:35:74:81:42:cd:a7:a5:83:4f:06:8c:7c:20:0f:d5:
de:6a:c3:d8:b4:95:2f:f7:4c:67:34:e5:8f:f2:60:d4:c9:77:
23:5b:4e:1d:ce:fc:85:3d:e9:48:c7:53:27:9a:d9:7c:bf:41:
04:7e:86:ba:35:05:b7:9f:67:af:64:a9:4b:f4:4b:26:e3:08:
eb:74:1b:c6:74:d6:ff:eb:e8:64:22:d9:35:35:fb:e9:c7:eb:
61:1b:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 03:48:20 2024 by rpki-client on console-fra.rpki-client.org