Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier: 06m5QuP2cr0HGoSidXKn/P4UvGxVDqaBAcsAovEwK4g=
Subject key identifier: 31:46:32:6E:AD:EF:69:9B:37:A4:1F:23:EC:15:BB:E7:35:9D:ED:4A
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial: 018F4AC6AB99DFC598A9B73A7F0054F86253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number: 10E9
Signing time: Sun 05 May 2024 22:01:24 +0000
Manifest this update: Sun 05 May 2024 22:01:24 +0000
Manifest next update: Mon 06 May 2024 22:01:24 +0000
Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: wNfgz6D+wYVUUqww7WA9LnWCqDstAw8gjIO7wgfQra0=)
2: u1-raolHHCjtIUqRSc2VcggjnJ0.roa (hash: E4tR0nG73BYwz/k/CK25OOfNI4ldlja6QnoT6z4AHfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:c6:ab:99:df:c5:98:a9:b7:3a:7f:00:54:f8:62:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Validity
Not Before: May 5 22:01:24 2024 GMT
Not After : May 6 22:01:24 2024 GMT
Subject: CN=3146326eadef699b37a41f23ec15bbe7359ded4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:0d:ec:fc:77:d0:1f:97:8f:ba:54:ee:59:
aa:16:14:d8:1a:3d:b2:39:70:56:f5:05:2a:95:b0:
1c:d2:e5:54:bd:0a:5a:42:42:70:52:97:38:5c:9d:
6b:fb:d9:17:b9:da:55:e8:ba:13:c4:24:4b:e9:a6:
52:90:06:4d:07:ee:92:65:b7:09:81:1a:df:20:93:
5d:5d:30:28:6c:23:d6:41:62:f5:54:88:0c:66:20:
12:4a:f1:ed:ce:9a:2b:76:ff:c2:d0:6e:2c:0b:0f:
71:c6:fe:d8:09:01:84:ea:b4:86:81:95:19:73:bc:
a1:9f:b3:f3:d2:ff:f2:c3:ea:a0:c5:0c:c0:29:e1:
68:f1:61:3a:05:92:1c:19:0b:7e:a1:e2:98:ca:0a:
22:0d:5a:3e:7d:bf:7a:2f:d5:75:70:7e:7c:64:10:
d1:eb:ee:99:e3:85:e3:77:8f:b0:02:09:ec:4e:84:
29:be:28:ac:f7:72:83:13:a7:de:76:26:9a:6b:e3:
a6:15:a0:9b:d6:bd:5a:2f:62:31:50:7b:ba:bd:30:
1d:3e:65:8f:2f:65:71:d8:58:7f:6c:6a:f4:8a:0c:
91:b7:81:6b:55:1b:e4:da:4b:97:69:58:f5:40:54:
6e:be:98:2d:17:ed:4a:84:5d:a0:ec:4e:87:42:ae:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:32:6E:AD:EF:69:9B:37:A4:1F:23:EC:15:BB:E7:35:9D:ED:4A
X509v3 Authority Key Identifier:
keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:1c:53:32:a0:17:0c:15:9e:da:d6:6a:45:41:02:ea:94:
c0:8d:e8:1b:9b:e2:15:28:ec:5f:c9:c1:91:1c:17:03:d3:cd:
c9:de:28:0d:4c:16:ff:53:99:bd:e3:ba:24:6d:64:64:96:c2:
0b:9c:77:d8:1e:9d:14:d3:05:2d:7f:b8:34:84:d8:ca:4c:14:
ce:be:a4:b4:69:a9:48:fc:07:b6:89:72:a7:1b:4b:43:de:0a:
2b:f6:d5:4c:fa:2f:aa:f8:05:23:cb:5f:20:5d:fc:77:24:a0:
32:2d:d9:93:6f:f8:95:73:fd:2e:5b:4b:a4:ac:a2:29:78:03:
a1:27:64:4d:a2:3f:64:c5:8c:dc:d5:04:8b:f1:60:95:07:92:
e6:f6:b7:72:e0:78:d1:40:82:b5:18:b0:7d:5a:e7:12:45:b9:
37:d5:29:51:fa:16:e5:ac:c0:59:51:e6:99:70:ed:75:b3:d1:
eb:76:92:e4:37:62:91:27:e4:2a:aa:b9:fb:a2:02:b6:23:97:
3f:a7:73:bd:b4:95:b9:e7:88:5f:ab:50:fd:05:1a:9a:2b:f3:
14:c9:31:2c:d6:0e:0c:8e:8d:74:fc:3a:72:a9:80:41:00:66:
1d:ed:9a:9e:98:cf:b4:52:d0:62:ba:ba:c8:0e:e9:35:a0:a3:
67:f5:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:44:26 2024 by rpki-client on console-ams.rpki-client.org