Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: /soS94LeEQ/n4N4v6K4kDfKMO/Lb0gpeu/6N8+mi+k0=
Subject key identifier: F6:83:BE:B8:43:FE:B0:64:5D:0D:72:BF:1F:BF:4B:09:C9:B7:11:A6
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 018F16A18EF9818D417DB85619CED808AA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 047F
Signing time: Thu 25 Apr 2024 19:00:37 +0000
Manifest this update: Thu 25 Apr 2024 19:00:37 +0000
Manifest next update: Fri 26 Apr 2024 19:00:37 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: CMVpb95Pv02sBiZPKRTk1H0diNkLpVbjo6wYuVJUTC0=)
2: 1xws1cXml1eRMaWyT_6HPeP8eGo.roa (hash: 5fnBbjKQWkvOz52hJ7rwnbPQPhL73LjvNwUmNpDWGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:a1:8e:f9:81:8d:41:7d:b8:56:19:ce:d8:08:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Apr 25 19:00:37 2024 GMT
Not After : Apr 26 19:00:37 2024 GMT
Subject: CN=f683beb843feb0645d0d72bf1fbf4b09c9b711a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:f5:58:2d:6e:3f:40:11:c3:a2:14:f5:8e:
18:80:57:43:b4:2f:ac:8e:16:06:c0:50:a2:39:d1:
96:7e:13:30:da:fc:89:a4:bf:8d:e1:c0:13:9c:5b:
7a:87:c0:d3:5f:7c:aa:92:80:11:65:e5:d6:d0:45:
93:00:f3:25:76:e0:7d:75:09:f6:11:94:4f:94:ec:
c8:f0:b7:57:3b:73:81:bc:6a:1d:50:1d:47:9d:56:
40:9a:9e:d0:3c:75:82:d7:52:f5:42:74:36:a1:53:
3c:29:2b:bf:60:5c:2c:cf:d0:87:89:b4:7d:2d:d1:
75:54:a8:f2:8d:aa:3c:24:2b:61:9b:33:ea:44:e3:
99:ac:02:ec:31:f0:6b:a8:df:51:34:51:6e:b1:49:
a5:cc:46:1a:6a:ff:f3:9e:7f:0d:d0:09:56:bf:e7:
86:3a:9d:5f:8d:fd:5e:02:ab:97:f3:31:23:b4:45:
a0:b0:31:15:1c:5e:0e:6c:3a:e8:7f:1e:87:fe:ed:
24:0c:48:60:4b:7a:5e:f5:a0:74:04:44:91:a2:a8:
ce:5c:4a:8f:12:4d:db:33:81:e0:3c:38:7f:ec:7b:
02:3f:51:7d:4c:52:45:e2:38:aa:b0:84:35:65:18:
be:73:22:eb:35:14:8f:2f:19:64:60:88:88:d2:61:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:BE:B8:43:FE:B0:64:5D:0D:72:BF:1F:BF:4B:09:C9:B7:11:A6
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5a:09:67:f1:29:42:80:d8:56:a5:97:bc:c9:bc:fa:cc:85:
f2:f8:1d:75:8b:da:46:7c:3d:2a:1f:3b:47:5a:51:90:b6:13:
4d:67:8b:8d:42:b5:f9:c1:df:b2:cf:80:29:91:7a:68:fd:6c:
f2:f3:b4:08:a7:f8:d2:73:f4:cf:bd:f3:51:d8:21:fc:a1:ec:
6b:d0:bb:d7:c5:a5:0d:6f:38:8a:78:14:70:e7:35:04:a9:e1:
32:08:87:a6:0d:e1:5a:94:57:0a:da:b5:e6:9d:93:2c:1f:3b:
c0:d5:17:54:7a:fd:4a:71:ac:ae:18:28:ba:79:03:e6:3a:9d:
88:7a:6f:90:7e:41:ab:47:a4:fc:cc:d2:cc:e1:c5:ed:fe:10:
02:ac:41:c6:55:a3:2f:46:79:c6:aa:d2:23:96:0b:e0:6f:fb:
a6:31:a3:f5:ef:1a:dd:2c:c8:ce:5f:6b:d0:b8:db:c7:b9:95:
f3:66:18:81:61:5b:21:0b:a5:25:f2:9b:c5:e6:8f:27:f8:8c:
9a:b2:ac:48:eb:86:dc:85:3a:2b:59:1e:84:0b:a7:de:31:c1:
16:d4:ce:69:63:c6:5b:cb:ca:65:d6:2c:5a:5e:11:fa:1c:10:
53:2c:12:76:fd:c2:6f:bc:ed:20:7e:f9:42:7f:be:0a:26:8b:
ed:30:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:16:48 2024 by rpki-client on console-fra.rpki-client.org