Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.mft (raw, json)
Hash identifier: RGWfAHvQRAzmie1OCYUVIYrBjQHXx+zFCTBsG/5hpaA=
Subject key identifier: ED:1F:B1:11:AB:75:61:67:29:CE:14:53:CA:F0:02:0E:77:B1:99:BB
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 018F3CD441C0F70D43C1DF9380193DB18B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
Manifest number: 114F
Signing time: Fri 03 May 2024 05:01:34 +0000
Manifest this update: Fri 03 May 2024 05:01:34 +0000
Manifest next update: Sat 04 May 2024 05:01:34 +0000
Files and hashes: 1: AZAWI7Jm47jMnUaUcaPRfCagUas.roa (hash: geacct04dXn/RmslkR2/z9rdBGicSaFYFRLYjMo34CM=)
2: IZUnwiTwCiiy9MtOExLXSNXKUWk.crl (hash: fUMiEyIz2Zcg81aWJrYLOta7lTDYGgv/e3pBqlNE1dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:d4:41:c0:f7:0d:43:c1:df:93:80:19:3d:b1:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: May 3 05:01:34 2024 GMT
Not After : May 4 05:01:34 2024 GMT
Subject: CN=ed1fb111ab75616729ce1453caf0020e77b199bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:dc:b3:36:09:8a:18:6c:d9:e1:c2:6a:bc:
35:e1:fe:c9:37:39:52:09:70:bf:bb:e8:22:69:25:
3f:39:00:ea:70:32:75:36:ba:48:b8:fc:62:3b:12:
b8:8c:e5:50:13:73:f5:3f:61:a7:11:84:aa:3e:48:
42:3d:56:a3:cc:26:db:a1:30:cf:63:6d:23:bb:d3:
e1:7b:c8:88:e3:cb:c9:85:3b:6f:23:5e:f8:d0:db:
13:6c:8b:cd:b8:69:fb:09:85:62:11:cd:d8:86:1c:
58:dd:f8:50:3b:36:13:59:a1:dd:72:17:b6:53:15:
73:75:c3:c2:a8:38:c7:a6:94:82:7b:a5:37:a5:69:
d6:68:48:a6:8c:b2:2b:a3:e8:22:7a:a1:99:07:12:
8f:05:7f:b5:e4:d9:2e:eb:36:91:ee:df:6a:06:8f:
67:7e:f5:49:b4:92:18:3f:d6:4a:dd:1a:05:56:b6:
cc:68:58:4e:97:79:4c:39:0f:ee:97:d8:8d:60:81:
fe:08:66:3a:ea:4d:03:a2:f5:40:5d:0f:e6:5c:bd:
77:d5:a4:7f:8f:11:43:c2:1d:ec:37:56:bc:a8:eb:
67:25:5e:6f:5a:c2:23:15:f9:b5:21:d6:41:f1:3e:
38:b6:ac:53:ad:04:0c:f6:50:71:30:2d:06:2b:b1:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:B1:11:AB:75:61:67:29:CE:14:53:CA:F0:02:0E:77:B1:99:BB
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:7d:b9:9b:6c:da:fb:9e:b3:af:7a:dc:1c:f1:ca:56:c0:
6c:d2:15:74:9f:bb:4c:30:e3:92:5a:a7:14:b9:bb:cd:41:55:
58:b0:a3:df:dd:d2:e4:8a:84:21:9f:33:25:4f:8a:02:75:4d:
c3:59:f1:d8:e1:2a:7f:c3:d1:fe:82:c4:c7:c0:bd:d9:f8:25:
ca:eb:3e:74:cd:8f:30:64:b0:be:86:a8:50:e0:b9:03:a4:7b:
3a:b0:b8:08:81:96:92:15:19:c7:e6:3a:05:60:0a:2d:5a:03:
d6:50:7a:f1:16:f7:e7:54:1b:ae:da:5b:25:63:8f:69:bc:a2:
f5:73:11:24:85:7e:c4:ad:2b:74:70:dc:a1:6e:58:12:fe:62:
87:06:e0:82:f7:60:c3:b3:3c:f6:e3:90:a5:c8:67:9f:54:28:
23:d2:c8:45:e6:7f:93:08:43:ba:14:c8:4c:35:62:34:5d:bf:
f8:a4:48:bd:36:ec:23:1d:70:cf:cc:c5:94:3d:d1:f7:0d:2c:
07:8b:73:15:da:f1:c4:f6:eb:78:29:a3:5e:df:cd:d2:80:73:
bd:10:8f:07:be:aa:e5:96:db:bd:ee:d1:dc:d5:3a:f4:bc:4f:
3a:95:b7:6c:06:73:a0:8b:04:76:d9:e4:4d:48:80:ab:c7:65:
c6:42:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:49:24 2024 by rpki-client on console-ams.rpki-client.org