Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File: 8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier: NdXkNaLNmxTZkAQwyrjlygnPAqnTVXjJEa2lF/MQ13w=
Subject key identifier: D0:BA:1B:CA:F5:1D:7F:90:BD:28:F6:78:8C:A0:7C:8E:B8:E0:BC:4A
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer: /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial: 018F4D59A0FAB1590D931F10A22C847C0E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number: 09CF
Signing time: Mon 06 May 2024 10:01:10 +0000
Manifest this update: Mon 06 May 2024 10:01:10 +0000
Manifest next update: Tue 07 May 2024 10:01:10 +0000
Files and hashes: 1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: yvhxbnkmVuN35GUsa6Z9Zv0KKkavczsr6DkM6L3whzc=)
2: ZJ7dWZjPpT9SbhU2HdjkS1DrSU0.roa (hash: CgsasTNulsV6LHihN00K2vuadMBotT2wThp7PEKF4j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:59:a0:fa:b1:59:0d:93:1f:10:a2:2c:84:7c:0e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Validity
Not Before: May 6 10:01:10 2024 GMT
Not After : May 7 10:01:10 2024 GMT
Subject: CN=d0ba1bcaf51d7f90bd28f6788ca07c8eb8e0bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:b8:22:78:21:14:da:a4:7d:2a:10:44:e0:
66:2b:29:3b:da:fb:4f:8e:0b:13:08:86:c0:9c:18:
e8:c5:34:e1:7b:56:2a:25:f0:34:66:90:ef:0f:bc:
56:bb:de:41:cf:d4:98:7b:34:fa:b9:63:34:b3:66:
d6:04:db:bf:a6:86:88:3d:b1:57:cc:5e:e8:f5:55:
bf:d0:b4:8d:7f:dd:24:92:de:e2:53:41:0a:61:8d:
d9:3c:ea:dc:46:5e:5d:6f:1d:f0:68:95:f5:3e:63:
76:8b:59:9d:29:85:5f:6a:81:ab:26:4a:b2:f6:c1:
87:88:94:86:65:dd:25:09:87:41:e1:dc:51:80:9d:
e0:c6:7b:4e:3c:20:77:14:ae:af:35:92:83:b7:a0:
42:35:52:d3:e3:3e:1a:7e:ae:3a:e7:a4:c8:4d:7b:
76:c7:a4:38:92:21:08:a6:6e:3f:eb:f6:ea:35:71:
32:09:60:c2:df:52:94:4f:b4:9f:81:49:86:29:6a:
36:86:bf:44:83:1c:47:0e:91:c5:d0:5e:69:19:05:
1f:06:81:b3:82:60:f4:61:0d:4b:84:05:7d:8d:45:
4d:51:22:49:f7:a3:52:72:fe:9c:14:7f:29:27:b9:
e8:f0:c4:06:62:e1:2b:12:cf:3d:34:46:96:75:7e:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:1B:CA:F5:1D:7F:90:BD:28:F6:78:8C:A0:7C:8E:B8:E0:BC:4A
X509v3 Authority Key Identifier:
keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:6d:f8:d9:df:2f:a2:86:f9:58:54:6a:6a:03:4f:22:3b:
fd:a5:fd:d9:45:d0:6e:cf:a3:bf:5f:b9:7d:97:d7:f3:29:94:
82:97:4c:07:f5:62:58:13:c4:93:14:17:a6:62:f6:a1:35:73:
c9:30:96:04:d9:34:f6:7e:89:7e:30:e1:5f:e2:a7:4b:09:ae:
1a:0e:34:fc:3e:ee:9b:0e:99:79:f9:5c:be:ff:a2:56:3e:28:
e5:7d:60:45:b7:85:d1:78:fd:74:4c:78:85:0d:fb:33:f3:c6:
07:57:43:b5:6f:ef:5a:61:8a:f5:cd:27:b2:16:4b:94:2b:81:
9a:e0:93:27:00:58:a1:9b:36:de:55:cd:1c:06:59:4a:dc:1e:
04:79:05:22:3c:3a:16:9b:d8:27:84:ae:e2:17:d0:98:e7:cd:
ab:d8:94:e9:3d:3b:21:51:c8:b0:4f:49:c8:b8:28:c8:d7:f0:
e8:98:fd:22:94:be:e9:2a:3f:79:0c:23:6b:d4:40:05:62:9e:
d0:c3:98:08:bf:96:ad:8c:33:39:7a:40:a2:7b:da:83:05:27:
2a:ba:68:fa:ba:46:36:b8:cd:e8:b1:fa:d9:91:99:8d:59:91:
a2:7e:97:ba:4e:85:dc:5d:a2:91:34:a1:42:59:f2:53:8d:15:
87:d7:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:46:00 2024 by rpki-client on console-ams.rpki-client.org