Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
File: 2dybKOREONnQi9VZl59J47v6Yiw.mft (raw, json)
Hash identifier: TfaTHpL5NhJSiHqr87EqdsHgohZ4N2QDJwcLZANVSwM=
Subject key identifier: EE:82:1B:41:90:65:1B:A5:F2:EE:D2:F9:4C:66:5D:D1:51:6E:8D:A4
Authority key identifier: D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
Certificate issuer: /CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Certificate serial: 018F893828E5CACC469A931290AAA29C9BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
Manifest number: 01B7
Signing time: Sat 18 May 2024 01:01:50 +0000
Manifest this update: Sat 18 May 2024 01:01:50 +0000
Manifest next update: Sun 19 May 2024 01:01:50 +0000
Files and hashes: 1: 2dybKOREONnQi9VZl59J47v6Yiw.crl (hash: aTOjEmwZmpr+MwMIpl7EqWOj66BAiu1/APtcLCvbSRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:38:28:e5:ca:cc:46:9a:93:12:90:aa:a2:9c:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9dc9b28e44438d9d08bd559979f49e3bbfa622c
Validity
Not Before: May 18 01:01:50 2024 GMT
Not After : May 19 01:01:50 2024 GMT
Subject: CN=ee821b4190651ba5f2eed2f94c665dd1516e8da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:70:29:2f:01:6e:d2:e9:09:4b:e2:b3:41:
26:0d:6c:57:07:bc:08:20:c6:75:ba:5b:95:06:c0:
c9:9c:be:b9:91:7d:a6:93:fc:7f:d5:07:70:ba:21:
50:f1:26:0a:90:18:14:40:17:8a:74:9e:bc:41:dc:
32:72:c4:f2:cd:6f:b3:d5:fb:f5:d6:16:ae:f4:cd:
31:37:72:c7:cb:c2:e4:ad:42:13:69:0f:ce:95:9f:
31:e1:9c:9f:41:17:ba:0d:d9:89:0c:3c:2f:95:63:
fc:74:8c:e6:fb:6b:38:8e:1d:18:e1:1b:e9:a2:b5:
18:97:ed:e8:49:58:cc:e9:f2:43:4c:4e:c9:5d:eb:
3a:15:c4:b7:b9:67:17:7e:d9:5d:ff:69:00:db:c8:
f4:5f:8b:fd:33:b3:31:a7:c3:c0:72:e3:f3:90:2a:
17:d4:a3:4a:87:06:e9:3e:70:53:54:b9:60:79:95:
ab:9c:1d:a8:79:d4:1f:ef:47:1d:8a:df:68:d2:a0:
6c:1a:a5:78:be:17:66:6e:6b:87:a9:10:c3:b3:55:
89:f3:aa:a9:9e:73:5b:08:19:f7:b8:a2:7f:52:9f:
51:07:df:94:fd:be:77:f4:e0:46:cd:4e:de:de:d7:
c7:29:ac:54:af:26:d8:68:3f:b0:92:8a:f6:24:cf:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:1B:41:90:65:1B:A5:F2:EE:D2:F9:4C:66:5D:D1:51:6E:8D:A4
X509v3 Authority Key Identifier:
keyid:D9:DC:9B:28:E4:44:38:D9:D0:8B:D5:59:97:9F:49:E3:BB:FA:62:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dybKOREONnQi9VZl59J47v6Yiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0495e3-a6cd-41ee-9d72-912edee71870/1/2dybKOREONnQi9VZl59J47v6Yiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6f:63:ec:03:65:fb:ba:53:c4:fe:b4:57:6a:3f:0a:9d:af:
56:da:0e:99:51:93:a1:a6:c5:b2:98:b6:70:46:c9:41:8a:d7:
90:2e:1d:c3:36:40:f1:6c:2c:34:e5:df:f4:45:71:0d:76:26:
c9:ef:66:af:74:9e:8a:60:e9:0b:a1:17:20:0d:db:51:ea:33:
04:49:4d:96:0f:05:8a:08:3a:ce:0a:32:33:64:57:67:27:75:
f1:74:65:8c:ba:47:19:f7:f2:e5:4e:26:1d:f3:48:4b:b0:3d:
f3:fd:2c:ae:f4:f1:c4:36:27:02:f7:8d:a1:33:c7:46:b6:a7:
07:51:9d:12:f2:f4:83:ac:4a:c1:50:e2:fd:29:94:b7:e9:cd:
c6:67:39:c3:76:cd:66:b6:3e:cd:c4:58:41:54:d5:1b:97:0d:
e2:5e:80:7b:5a:d6:b8:d4:8c:b7:64:0c:20:65:6e:da:13:d4:
0c:c2:4f:91:46:0c:63:c1:c9:c9:81:c5:b0:2b:45:6b:a4:92:
ce:c7:31:4b:ba:bc:1c:3b:62:a8:3b:f5:b9:e2:6f:2c:ed:fa:
6f:8d:c2:a4:05:1f:05:86:2a:c9:a9:8a:80:34:e8:b5:b4:4b:
ad:83:d1:d4:ed:c3:f8:55:8d:2c:5c:e0:9f:e5:2f:a1:5c:7e:
2a:08:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:43 2024 by rpki-client on console-fra.rpki-client.org