Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.mft
File: 9mHYxMnEufaKpsf1PHbmMJ8HeRM.mft (raw, json)
Hash identifier: JHYw7b/UsHetFD39Fd033QKIDcQ3PfNULRntVkxcvyE=
Subject key identifier: 35:9A:8B:F2:D8:6E:1D:3B:EF:BA:44:F1:4F:8E:64:F7:F5:C8:98:FC
Authority key identifier: F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
Certificate issuer: /CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Certificate serial: 0187376E8A131D51657B77870436FA032BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.mft
Manifest Number: 05EA
Signing time: Fri 31 Mar 2023 11:30:03 +0000
Manifest this update: Fri 31 Mar 2023 11:30:03 +0000
Manifest next update: Sat 01 Apr 2023 11:30:03 +0000
Files and hashes: 1: 9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl (hash: Kdkry2N0Qml4buBVVeQKv82+hkd1PLQUoBP5qZsg3Oc=)
2: rqMvB3LlGvM5KZi3PiXWy3RENOY.roa (hash: mL3+Ki1TYKGf3WXIdHyp5gf53OcuoPM7xFeu6W5Ym04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Apr 2023 07:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:6e:8a:13:1d:51:65:7b:77:87:04:36:fa:03:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Validity
Not Before: Mar 31 11:30:03 2023 GMT
Not After : Apr 1 11:30:03 2023 GMT
Subject: CN=359a8bf2d86e1d3befba44f14f8e64f7f5c898fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:a6:c6:d7:b8:e1:3e:c6:f5:eb:71:75:bc:
98:81:e7:10:5a:c1:0f:15:60:8e:37:a8:a4:db:1c:
31:79:3a:e8:90:fd:77:0e:5a:95:77:30:e3:e4:e4:
05:54:8d:8b:bb:1e:9b:b6:c0:23:7f:da:05:72:c6:
1c:ff:58:99:5f:66:98:bc:13:76:4f:39:56:df:40:
35:02:8c:ac:43:85:77:0d:2a:2a:3a:c9:4b:c2:fb:
c1:76:12:51:ab:42:2a:79:4a:2a:cf:13:de:07:c5:
5d:91:b6:5e:b8:d0:93:64:58:38:df:33:40:29:d1:
40:9d:31:dd:e5:d8:40:50:ea:38:4b:8f:3b:d1:3c:
c6:0f:e2:7d:36:cf:a2:8a:5f:07:d1:89:ae:ec:3b:
2b:49:af:3c:78:63:42:bf:68:d9:be:71:e0:3d:8d:
46:d1:6f:19:af:ce:5f:11:86:a9:cc:0f:34:4e:93:
d1:2a:3a:2e:a9:9e:5d:b3:50:da:59:c0:c9:92:ef:
46:8b:e6:bb:5c:39:3b:71:ee:c5:d3:50:f5:93:10:
93:49:bf:4d:4c:8f:5b:8f:4e:ee:d8:2c:13:4e:22:
e3:22:96:43:67:8c:d1:1f:dd:61:be:d6:32:8b:8a:
68:7f:9e:bd:3d:21:38:a3:d2:8a:83:a2:c6:ff:3f:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:8B:F2:D8:6E:1D:3B:EF:BA:44:F1:4F:8E:64:F7:F5:C8:98:FC
X509v3 Authority Key Identifier:
keyid:F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:68:e9:f1:0e:36:e8:4b:98:af:36:5c:00:82:48:94:65:8b:
e8:87:ce:4f:c9:32:f7:bc:cb:b1:31:4f:55:87:81:c7:2b:fa:
7c:19:5b:5e:29:a7:27:bc:dc:a8:bd:e7:a4:8d:2d:61:82:48:
14:f3:7b:eb:99:51:15:c8:8c:ab:1d:e7:1d:33:40:23:36:fa:
04:41:f8:6c:73:7f:07:14:56:ea:4e:6d:b5:d5:01:03:b2:a1:
11:77:0c:cf:d9:e2:69:90:f8:9e:87:e3:e1:37:58:db:25:93:
f4:e2:7d:2f:b8:5f:fd:84:8b:0f:d1:ff:c1:1a:c4:cb:cd:40:
9b:3c:fd:de:4f:0b:be:20:a1:92:e4:9c:71:9f:94:40:0a:42:
31:60:88:e6:21:c8:38:46:e6:cf:ab:da:8b:ed:27:b9:29:0d:
62:8d:a1:62:b7:69:4f:d8:33:66:ea:ae:ca:18:33:f8:a6:c0:
b5:97:1b:ce:7e:2e:5c:9e:ec:68:99:ad:ac:39:53:1d:d8:6a:
af:34:25:90:c9:37:6b:44:c0:c4:89:00:af:ed:d0:50:de:3b:
b0:6b:ea:74:af:50:53:11:ad:13:aa:dc:e3:e0:bd:9c:91:27:
1e:c2:47:04:41:d6:95:af:6a:88:99:c8:80:bc:5c:ca:bc:68:
d8:fb:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 31 12:02:48 2023 by rpki-client on console-fra.rpki-client.org