Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: FsWHDKgl8QuI9UVDA4fv/lH5iH+2XlHyRpefDvws2RE=
Subject key identifier: 97:4F:0D:3E:09:81:4F:F0:31:B3:60:FE:D7:AD:46:86:98:DE:9E:0A
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 018F3BFA72FD84AEFABD2FE658F346998522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 07B6
Signing time: Fri 03 May 2024 01:03:40 +0000
Manifest this update: Fri 03 May 2024 01:03:40 +0000
Manifest next update: Sat 04 May 2024 01:03:40 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: OIEKmjMw4D+/L50ycwU4INgFGJRrS6X9WGAsC/gUFYQ=)
2: uNhK4cwW5g4-tu3ZVib4dOmUzxs.roa (hash: oJI6IDck05XrOxOzEpC2ucaBXh3W49nsQvyDBgijjpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:fa:72:fd:84:ae:fa:bd:2f:e6:58:f3:46:99:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: May 3 01:03:40 2024 GMT
Not After : May 4 01:03:40 2024 GMT
Subject: CN=974f0d3e09814ff031b360fed7ad468698de9e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:e6:b0:7f:93:69:e5:e2:78:3b:3e:64:7f:
12:ac:5e:57:dd:0e:84:bf:04:de:f3:75:e4:12:c9:
9d:87:04:45:e9:d8:bb:7a:c5:b5:14:ea:ea:c6:e8:
7c:87:e7:1b:32:d1:24:78:40:17:2f:cf:e7:d4:7b:
ef:bf:51:06:cb:bd:8c:c1:bf:d0:1b:1a:4c:5e:c5:
aa:36:7d:dd:74:d9:3f:89:6c:7b:72:4e:e7:b1:f7:
fb:71:da:69:ab:6d:21:a5:33:6f:b5:58:6b:d1:56:
62:9b:7e:80:fb:e6:f2:29:04:51:0f:9a:17:37:3b:
50:04:b7:42:c2:d8:b8:d1:a1:37:97:43:f0:1a:d6:
59:96:1e:55:30:14:1b:b3:5e:77:bf:fa:ee:7d:1a:
b8:25:b1:f8:a6:27:e1:a9:4d:0d:25:fc:b5:06:c1:
07:db:63:89:ff:86:f7:f0:41:09:e9:57:7e:db:17:
38:dc:72:8b:9c:97:38:70:af:ec:7f:a0:83:9c:e8:
7d:b3:d0:81:aa:b6:b3:92:e9:20:f0:5c:6c:75:17:
c9:fa:13:12:0e:fa:8c:51:ac:ed:dc:00:42:3f:80:
9b:46:32:e9:0b:23:0f:e7:6d:f8:82:f5:98:80:16:
a2:5d:f6:8e:97:34:e3:b6:d8:ec:2f:03:87:24:2b:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4F:0D:3E:09:81:4F:F0:31:B3:60:FE:D7:AD:46:86:98:DE:9E:0A
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0d:93:0a:bd:0c:82:78:86:54:7c:ab:5a:ee:77:1c:c7:0f:
cc:79:6b:a5:cb:26:bd:b2:c3:1f:b1:b2:c7:69:9c:1f:4d:a8:
96:d8:63:fa:94:e0:85:98:90:d4:76:41:8c:e9:65:56:31:a3:
9d:26:5f:a8:92:a3:20:52:88:6c:8a:0c:ef:d1:a8:1b:8c:b1:
2c:06:79:46:d1:c9:1f:77:32:99:ee:03:4a:d1:e7:14:25:b4:
95:a6:58:da:e0:80:c9:c8:1e:d1:03:1c:5e:13:87:17:fe:38:
13:ce:d9:b3:81:7a:f5:d3:0a:c4:8f:ef:22:95:83:ce:fb:1c:
37:5f:b2:ea:96:f4:aa:47:97:6d:0b:43:c5:d1:44:f0:ef:ef:
55:82:e3:bb:14:72:5b:01:cd:c7:7f:49:ab:99:6f:be:76:cb:
92:a9:e1:07:8a:e0:72:45:b0:06:4a:db:97:7e:31:93:a1:29:
31:29:ef:2c:9e:7d:a4:44:d7:20:64:bb:52:44:82:44:28:b4:
39:ec:25:db:33:1e:4f:c6:da:b3:e0:4c:ec:46:15:a1:fa:45:
39:fa:e2:29:2b:9e:1d:10:7d:12:e7:ef:d5:6f:f2:95:04:1b:
1f:ae:be:49:d4:07:26:d4:16:68:87:83:d0:0a:fa:be:7d:37:
59:13:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:33:26 2024 by rpki-client on console-fra.rpki-client.org