Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: zckXWoBMPPU88xfPt04xsf9FkB5IJCBkoQ5PNQ/gyAk=
Subject key identifier: 06:27:D2:AF:80:EC:ED:4E:3C:6B:33:CA:CA:BA:9B:5C:E6:3F:9A:63
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 018F2426C77F9CB89BA521764BB10363026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 1144
Signing time: Sun 28 Apr 2024 10:01:12 +0000
Manifest this update: Sun 28 Apr 2024 10:01:12 +0000
Manifest next update: Mon 29 Apr 2024 10:01:12 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: RT38kGANrkDHpnsteVCuu1UshSKEJcU4PZC2lmCd2LU=)
2: E2smTSH7yEnTmZirLUB9RsNUNd8.roa (hash: OjVt4uJMtkil15czyw8SFa8RTHQT8QFqFHGiWoeB6Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:26:c7:7f:9c:b8:9b:a5:21:76:4b:b1:03:63:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Apr 28 10:01:12 2024 GMT
Not After : Apr 29 10:01:12 2024 GMT
Subject: CN=0627d2af80eced4e3c6b33cacaba9b5ce63f9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:84:b0:46:75:bf:9a:24:e2:e4:d5:11:dd:
c2:6d:ed:83:fd:f5:68:ae:4d:ac:18:11:70:dd:4e:
af:df:79:68:c7:3a:69:7d:8e:56:1e:d6:0a:b3:81:
88:8b:76:0e:e9:34:72:78:cf:f5:4d:d4:ba:f0:6d:
39:0c:37:5f:a8:b9:67:83:83:81:a6:01:b7:fa:69:
b9:91:78:29:b4:02:4c:22:7c:5e:8a:e1:a3:f0:05:
78:97:cd:af:7e:c3:b9:32:9f:0d:f0:cb:f3:b9:8c:
d1:be:a8:ac:ad:34:4b:c6:01:dc:6e:91:bb:4b:e2:
26:6e:70:87:49:2c:78:e5:82:06:5a:9c:2d:90:a4:
f3:3d:c4:6f:54:5e:70:54:98:91:61:d3:18:29:3e:
d7:46:12:e2:ea:df:27:d1:ec:59:62:e6:2d:cb:fd:
22:17:48:64:11:c6:65:29:c9:76:43:15:d4:ac:97:
c0:d5:e8:7e:5b:30:f9:a6:fe:0f:3b:25:17:2c:a3:
e2:6c:ef:f3:a2:c0:ac:98:58:9a:32:da:65:79:cf:
15:4f:10:33:71:09:76:df:eb:19:e0:db:47:ec:d3:
c8:61:22:47:63:8d:c5:83:f2:37:6b:d6:f1:59:51:
8e:d6:a7:f2:cd:83:7d:cd:8f:11:73:f4:27:19:3c:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:D2:AF:80:EC:ED:4E:3C:6B:33:CA:CA:BA:9B:5C:E6:3F:9A:63
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:62:48:9b:cc:83:31:4f:0a:e0:b7:db:03:e2:51:c1:53:a9:
95:8c:7e:a9:ce:41:51:47:93:d3:30:9c:bd:d2:d4:6c:c7:62:
8c:9e:88:c7:35:29:bb:7d:9f:2f:c8:b5:6e:ac:9e:0c:b5:95:
f9:8d:a9:70:1b:3c:7f:be:f1:e3:a9:b3:f6:d8:b5:fa:7f:b6:
18:0e:57:56:20:3f:22:b9:0a:7b:cd:2a:dc:7e:9e:17:2a:09:
f2:01:e1:f2:cb:04:a0:eb:89:72:62:83:80:5f:a3:8d:4b:c9:
af:19:6a:69:52:a7:b1:8b:f5:9e:5b:bd:8e:40:fe:95:1b:61:
59:97:d0:86:5e:a8:e6:75:06:35:fa:e1:39:fe:d1:87:9e:65:
f1:3b:01:45:32:a1:44:66:81:0a:0f:e9:8f:c5:22:12:54:20:
1f:36:04:8b:b2:70:2c:b4:f8:c9:97:af:5e:a6:4d:33:fd:fe:
bf:86:a2:88:fe:a2:4d:63:b0:12:c0:f6:e2:24:20:cc:ee:01:
ef:eb:65:48:d2:23:a2:82:42:02:49:a4:04:4c:3c:0f:25:e5:
81:e5:9c:51:e5:79:56:52:8a:09:49:32:f8:df:b4:b9:3e:e2:
43:b9:ac:ac:bb:17:66:9e:4a:6a:30:de:ee:92:90:f9:cc:80:
3a:b9:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 12:27:55 2024 by rpki-client on console-ams.rpki-client.org