Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: ft/2NESiTOmsTg1OySP0yeTcRCDHndGh2zybgLYuY+I=
Subject key identifier: FD:D4:58:FE:BD:6A:7D:5A:96:69:39:02:2F:67:A8:91:F0:DE:07:FD
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 018F8749B92C46B7E1495C94E011566641D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:01:46 +0000
Manifest this update: Fri 17 May 2024 16:01:46 +0000
Manifest next update: Sat 18 May 2024 16:01:46 +0000
Files and hashes: 1: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: 90fZAYhEP/ziC25Uo1p4whyQWiH4pjcOsjfbcv9RbVI=)
2: aWbKAnd6AZ1uYSU2Eu4kbliBSCw.roa (hash: 1ZSjz+UFxfWR6f+x77OLUkWu+kJXn7/Ve1NAYLRdamw=)
3: bgnMZHrZllWd0wsR6AKNZnO65Is.roa (hash: rUxBvEScnXB57bDO1i1KocsQQ3b4nTzuL96BeokSjmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:b9:2c:46:b7:e1:49:5c:94:e0:11:56:66:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: May 17 16:01:46 2024 GMT
Not After : May 18 16:01:46 2024 GMT
Subject: CN=fdd458febd6a7d5a966939022f67a891f0de07fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:4d:e0:ae:d6:b1:84:9e:a6:e6:19:82:81:
94:76:83:9a:2b:ef:2b:37:98:43:56:f4:db:95:97:
ae:f9:c5:0d:8f:9d:fe:19:23:d5:07:99:8f:73:47:
5c:f9:a2:fe:85:21:54:12:2e:19:f3:f6:28:59:e2:
9a:20:05:39:aa:7d:03:28:fb:99:40:55:30:83:92:
ad:14:1e:86:da:11:51:c8:1f:5b:ae:a3:14:22:53:
dd:b6:4a:36:8f:9d:21:63:f0:dd:06:2d:4d:38:65:
9c:55:eb:81:2d:60:b5:72:24:93:7b:22:45:86:45:
0e:ab:aa:83:ab:aa:2a:32:83:99:9c:a6:2e:e8:e0:
42:0f:95:ce:4e:4a:6e:b3:60:80:67:c1:d6:ac:c6:
e9:c6:9c:6f:17:ca:3c:90:9f:58:5c:6b:cc:7e:9a:
7c:25:00:37:5b:8e:e4:8c:c6:1c:98:3b:0a:45:11:
c8:48:8d:c2:8c:74:a7:e1:74:57:74:b1:29:66:4a:
59:37:a2:01:62:a4:a3:44:fc:36:30:e2:41:59:bd:
47:48:a5:6e:47:40:60:84:5e:cd:06:b6:d5:47:8e:
14:7a:9e:73:9d:a7:37:3f:90:a8:e5:db:8d:b4:8b:
11:e3:79:c3:54:c6:3b:e7:30:9b:9f:c4:ed:8d:97:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:58:FE:BD:6A:7D:5A:96:69:39:02:2F:67:A8:91:F0:DE:07:FD
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:05:d0:f7:57:ef:ac:eb:25:b6:b8:0c:56:0e:14:95:65:
47:b2:6f:79:84:87:f5:29:7c:b1:90:ba:02:1f:eb:46:56:c3:
b8:ba:ff:4f:1f:59:b6:ad:0a:3e:47:6a:7c:56:75:43:c1:89:
20:32:41:6a:72:8b:2f:1c:de:4a:6d:6a:03:c9:6c:d0:2a:f7:
05:71:46:38:e9:63:22:09:b3:20:a8:89:88:e9:f7:cd:35:7c:
9c:a0:2e:90:4e:d1:0c:3e:41:fc:54:02:bc:be:e1:29:4f:09:
5f:c6:28:ef:6d:c4:ef:b2:e6:37:de:1f:d9:14:0b:f9:66:35:
d2:d8:e5:bd:8b:3a:3a:6f:cd:99:ff:e0:b2:21:57:a7:0f:ac:
fa:7e:a3:33:f0:48:eb:91:e9:49:38:b2:cf:c0:d9:bc:0f:fb:
07:6d:bb:1e:e3:4d:1d:7a:58:a9:2d:b1:2b:f3:66:48:cd:0c:
44:d8:cd:0f:4f:66:b4:e6:e0:aa:b3:43:82:2a:5f:24:a3:ff:
b0:69:7c:9f:b0:12:e0:d1:c6:fd:e2:41:73:ca:6e:65:46:82:
a8:62:70:78:0a:15:0c:61:61:cf:0b:bd:f5:5e:2a:8a:df:cc:
f5:cc:09:ac:f0:42:14:75:a9:3a:c2:3c:10:3a:a4:b9:27:2a:
78:2a:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:48 2024 by rpki-client on console-fra.rpki-client.org