Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
File: IPtKDEbqkecGD7KUJqEyM4UmhJU.mft (raw, json)
Hash identifier: vMRmDHs72qox8gO8vG+iclBRxE58bhyuwQEtiEs/tBM=
Subject key identifier: 3F:2D:12:D9:72:C1:E1:D2:A1:2C:EC:19:5A:03:FE:78:D7:AF:9F:BE
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 018F8748C6A51BA3CC4007B1FA81D3E011A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
Manifest number: D3
Signing time: Fri 17 May 2024 16:00:44 +0000
Manifest this update: Fri 17 May 2024 16:00:44 +0000
Manifest next update: Sat 18 May 2024 16:00:44 +0000
Files and hashes: 1: IPtKDEbqkecGD7KUJqEyM4UmhJU.crl (hash: JGVcfr7sqzDgycNVAADp6FqTOo08OGWedMUp3D4TaV0=)
2: IfE7YqoZ3aXG6HHPde77PAXfFdc.roa (hash: jDa7kiIrvdKJJUG/sMd/wwafrxC9ylDMaDe5+w7+h9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:c6:a5:1b:a3:cc:40:07:b1:fa:81:d3:e0:11:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: May 17 16:00:44 2024 GMT
Not After : May 18 16:00:44 2024 GMT
Subject: CN=3f2d12d972c1e1d2a12cec195a03fe78d7af9fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:cc:65:c1:96:55:1a:c5:e9:23:ee:9f:a3:
f0:47:ee:e5:7d:e9:25:68:f0:7a:7d:7d:fc:02:a9:
0d:96:58:59:8e:68:69:f2:83:d0:ff:56:2e:14:cf:
b6:f8:90:77:f9:3e:6c:85:b6:27:ec:59:40:00:e8:
aa:94:af:eb:2b:3e:24:f7:3b:23:cb:5f:26:d5:52:
22:a9:11:3e:c3:72:c0:2a:35:9d:47:f6:ab:bc:46:
4b:ce:27:ce:af:a7:ea:67:65:6b:e3:c8:de:11:3e:
04:9b:2b:8f:35:98:0b:dd:2f:6f:c2:5a:02:c1:2b:
b6:cb:0f:9f:30:13:0a:7c:ef:4e:1e:2d:d2:8b:e9:
25:cc:d6:c0:47:ae:f7:c7:2f:15:0f:42:6d:15:11:
8c:65:b0:6e:ff:30:f5:5d:61:bd:60:8d:d3:0c:eb:
64:4a:de:63:ee:e4:98:46:83:fc:4e:52:01:bf:83:
69:2c:0a:da:2f:58:6b:4d:6b:e7:55:e0:ce:88:0c:
39:1e:15:05:2e:58:7c:c8:59:0f:10:a5:dd:05:14:
bd:2a:a6:98:52:3d:08:03:a1:0b:18:0b:e4:7b:e4:
49:8e:62:32:05:72:4b:08:5c:08:2a:d1:44:fa:b6:
02:01:0d:71:9c:c7:8e:c6:d2:3a:20:89:f6:58:3f:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:12:D9:72:C1:E1:D2:A1:2C:EC:19:5A:03:FE:78:D7:AF:9F:BE
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:bf:72:5c:8d:36:80:ba:92:6a:d0:41:f8:e2:dd:e6:c8:
57:f1:62:41:eb:70:81:15:7c:51:0d:9c:10:17:72:03:55:d8:
00:fc:28:be:31:0a:86:dc:36:33:ca:cb:e8:ac:90:eb:81:a7:
a5:cf:a9:e5:4e:0a:cf:3f:bb:02:8b:26:18:7c:50:78:6a:c5:
6d:a2:03:d9:1f:ec:2b:1c:22:71:01:4e:fe:fb:0d:60:28:b1:
6f:a2:42:8d:e2:5e:2d:55:72:1f:82:b1:0a:34:1b:15:36:64:
0a:2a:b5:8a:bf:b0:28:ee:77:c5:47:a2:d5:2e:40:a6:ce:bc:
9e:4b:11:0a:47:e4:fc:fa:70:0c:7b:79:52:3d:6f:75:64:a3:
31:ac:18:b3:17:8c:4b:85:df:3d:e8:71:19:3c:4a:bf:f0:fc:
bd:16:c5:f0:02:97:6d:42:36:f0:77:c6:03:45:75:87:0a:bb:
68:3d:58:f8:f0:2f:d4:7d:54:6f:a1:a2:79:4d:15:0e:9e:9d:
0c:7a:01:9a:8b:21:34:de:bc:05:63:6d:8f:e1:0d:81:15:c3:
99:59:cd:c6:6f:5a:6e:cb:27:3b:68:c9:f2:05:b1:86:50:5f:
ba:30:1a:98:28:3d:28:ce:3f:85:46:c6:17:5b:2c:14:ba:0b:
4b:1a:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:13 2024 by rpki-client on console-fra.rpki-client.org