Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: I9dBjrloqLukl+h5rC0vGUQCWiAytz4UXtnW9oCqgJY=
Subject key identifier: 6E:88:A1:9C:E6:CA:AA:6E:7A:2F:90:46:BF:40:74:46:2F:EF:41:F5
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 018F1D12DE87031EAD44D79211F5838DE02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 1140
Signing time: Sat 27 Apr 2024 01:02:06 +0000
Manifest this update: Sat 27 Apr 2024 01:02:06 +0000
Manifest next update: Sun 28 Apr 2024 01:02:06 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: nvp8yzrPgo2kE2VUE6Bh7KjgxDXHQrvlXd5dqSjN+sk=)
2: xBMFs5_0XPXWQqSLWrztsPWqV30.roa (hash: BSqrmkr+ZbcZ7eP/q9ESAdXMOjepY/0I6e28SPsX1Ew=)
3: yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa (hash: 3kqHSwst7AD+245Ow4MtVEsb0VKgzIt5qwfEI5tqP6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1d:12:de:87:03:1e:ad:44:d7:92:11:f5:83:8d:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Apr 27 01:02:06 2024 GMT
Not After : Apr 28 01:02:06 2024 GMT
Subject: CN=6e88a19ce6caaa6e7a2f9046bf4074462fef41f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:b0:35:88:ff:ce:56:6f:96:c0:e4:e8:65:
3e:21:02:4f:cc:be:08:5e:dd:fe:98:fe:90:f8:c8:
fb:e6:ff:d8:88:7a:05:19:65:5c:87:0f:be:52:6c:
99:26:85:0f:ba:81:8c:c9:ba:11:93:23:56:8d:3a:
17:c0:89:b5:9d:72:7b:03:7e:01:9d:f6:90:13:1c:
f6:01:4e:23:fb:25:8b:8a:53:59:94:7d:20:26:3c:
e1:0f:fa:ae:3e:ed:4b:09:c1:22:bc:f7:42:bc:ab:
74:47:3e:7a:dc:ed:9e:61:f6:56:8a:49:a7:63:17:
e2:a5:2d:f8:20:b4:a8:7e:03:41:08:2b:2c:d1:fc:
99:3c:17:7b:51:f1:55:65:48:8a:fd:0b:13:18:bb:
1e:3b:63:c2:0a:1e:b1:af:39:6c:c4:de:c3:19:62:
43:0d:6f:01:39:16:91:25:0d:a9:4b:7d:ee:b0:d7:
1a:53:a6:20:b0:a7:52:ca:e3:c1:e0:24:30:57:94:
bb:73:02:6e:68:c0:b5:d6:ce:88:91:12:cd:d9:7e:
1c:56:ec:eb:7b:f6:bf:3b:98:8b:bf:ac:8c:84:c5:
94:e0:c1:5c:b6:20:57:17:02:a7:c7:c6:d6:9c:67:
7c:79:c9:4b:31:da:59:fd:6f:85:e4:22:48:f0:69:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:88:A1:9C:E6:CA:AA:6E:7A:2F:90:46:BF:40:74:46:2F:EF:41:F5
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:b3:7b:fd:ba:e9:e6:8a:6a:b7:cd:04:b1:c7:7a:56:fc:
8e:32:c8:e5:c7:30:7c:8c:76:df:95:df:fe:97:4f:05:dd:e6:
dd:29:db:87:01:39:82:dd:44:ee:e1:b4:76:b3:74:59:19:4b:
ec:39:5f:48:2c:cd:86:62:19:a0:c6:b3:0f:b4:1c:bf:ed:aa:
88:37:7a:69:b4:00:44:31:ce:a8:74:7b:c3:fa:c3:ce:c5:c7:
0b:59:39:53:9f:07:b5:ec:c6:8a:6f:4e:e3:7b:17:ca:db:d3:
42:25:db:fc:0b:72:83:f0:28:d5:01:cb:2e:a0:5a:2f:c6:8c:
8a:80:60:41:09:56:21:05:9b:43:d9:c8:ba:af:90:48:88:a9:
cf:e3:89:5c:39:40:f5:2a:98:11:a1:ec:5b:ad:17:21:1c:f7:
db:fb:8f:7f:b4:5a:2e:ab:65:81:47:69:58:7c:e0:35:53:1b:
3f:53:0d:f4:ea:10:9b:5d:e7:4d:41:27:a7:7b:6b:82:99:3d:
93:a9:f5:ab:8b:32:30:14:1d:60:12:34:ae:54:99:bc:89:33:
d8:2f:2d:13:e6:8d:07:60:4b:65:ff:cc:3b:99:38:e2:1a:a5:
94:3d:eb:5a:5b:d0:4d:36:0b:55:44:85:18:48:84:a8:1e:db:
bb:a0:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:09:25 2024 by rpki-client on console-ams.rpki-client.org