Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: M8z2mJgQhiXjb9LpXYxXmO4RXSitXGNOd9JEk639Vys=
Subject key identifier: F4:91:99:92:FD:5A:93:A0:4D:63:A8:C4:E2:A5:D2:BA:09:CA:6F:06
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 018F863659E478D27521AD248380592B300A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 0E8D
Signing time: Fri 17 May 2024 11:00:59 +0000
Manifest this update: Fri 17 May 2024 11:00:59 +0000
Manifest next update: Sat 18 May 2024 11:00:59 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: 9vLgAoEjOgNRlXMDxAXO1rsl6FnNDuuSTSWTWwp6Dso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:36:59:e4:78:d2:75:21:ad:24:83:80:59:2b:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: May 17 11:00:59 2024 GMT
Not After : May 18 11:00:59 2024 GMT
Subject: CN=f4919992fd5a93a04d63a8c4e2a5d2ba09ca6f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:c8:d1:8e:4f:6f:c6:e2:40:4b:15:7d:39:
bc:a9:0e:92:aa:48:7e:b3:71:86:54:fd:7e:ca:96:
79:e4:03:c6:13:73:79:29:20:c9:01:6b:bd:e2:10:
8d:29:c8:7a:3a:ea:50:c0:6d:ee:65:6f:b6:ca:e6:
e9:fa:60:50:e1:c1:5f:2f:6e:b3:f1:de:af:ef:45:
20:26:4e:3a:64:65:46:e6:70:92:60:00:18:ad:fb:
0f:16:75:2e:7e:54:9c:92:46:ea:b8:95:11:05:b3:
71:f6:35:1a:55:4e:72:7c:59:f7:52:af:d7:e3:9b:
9e:9d:69:5c:ba:75:3c:0d:7e:2b:ab:cf:59:3a:9d:
32:67:4a:af:0d:ef:b4:9a:26:8f:bc:e8:8f:62:fb:
b6:6f:c0:92:df:07:3d:1b:41:38:e4:75:ac:51:0c:
f2:85:32:38:28:e1:15:d5:70:3d:74:b6:5b:c2:7d:
55:9d:48:cf:61:08:2c:b9:54:66:f3:f5:5d:1b:6c:
99:4d:2b:b0:25:19:d1:c1:f4:e7:e6:fc:e0:66:05:
97:f8:9e:5b:19:34:b5:22:23:f7:f3:a5:12:cc:74:
b3:c6:d3:a9:07:1b:1e:3f:66:a1:e5:d0:48:80:1d:
f0:f2:d6:0d:05:8a:4e:03:4c:87:d8:9a:2f:81:aa:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:99:92:FD:5A:93:A0:4D:63:A8:C4:E2:A5:D2:BA:09:CA:6F:06
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:f7:58:32:d0:87:09:e7:13:e1:0b:5e:4c:08:d7:6b:1d:
5d:00:38:56:86:b1:5d:c1:6b:81:e4:c3:59:d6:16:3c:4c:dc:
e8:8f:17:aa:57:d1:cd:1f:b3:88:8f:d1:55:dd:93:14:ce:7e:
78:77:fe:2c:a7:41:74:c4:0a:c8:26:17:6f:c4:94:ad:ce:e9:
e4:ca:10:6a:0b:b0:44:cf:b0:5b:1e:63:f3:8e:af:9f:b9:94:
f3:73:1a:53:69:a1:2c:e5:9d:cf:b6:01:10:5a:6c:77:1d:e0:
f5:18:39:4a:93:7d:4f:29:66:32:f0:62:3e:40:71:03:a5:9f:
f8:bb:20:bc:2a:65:19:dd:20:b9:ec:f3:f5:1b:01:3f:11:3f:
27:39:02:d7:11:5f:b9:23:c3:7e:d4:7c:1e:33:4e:ba:ec:59:
9f:11:bc:22:0e:fc:0b:28:6c:5c:6d:c2:1e:49:6b:72:9a:ff:
d2:ab:a2:54:e5:38:7b:c8:7f:67:bc:69:aa:f8:61:75:d8:16:
12:e7:9e:f4:08:f5:9a:49:7a:01:d9:4e:ed:8e:a6:7c:9e:3b:
29:34:fc:2b:32:15:b2:11:6f:2a:fe:af:f5:62:7d:9a:c7:ac:
6a:a2:f2:02:62:c6:ea:8d:76:b1:cc:fc:14:c7:26:fe:15:dd:
31:44:77:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:06 2024 by rpki-client on console-ams.rpki-client.org