Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: lNGOKTXBPZ8nMFnL4fc5Ji0bK0GI2ya9cVYNTp05e3s=
Subject key identifier: DF:1E:F0:7C:F8:C9:10:6E:8C:A0:D6:0C:56:29:8A:AF:BC:CA:71:94
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 018F3BF9AAB1B6AD1BA2CF194E42D73EFF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 114E
Signing time: Fri 03 May 2024 01:02:48 +0000
Manifest this update: Fri 03 May 2024 01:02:48 +0000
Manifest next update: Sat 04 May 2024 01:02:48 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: sK7W6TyYS7DKde0XAm3Sd0zP+XOpcZirAol0USQAoWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:f9:aa:b1:b6:ad:1b:a2:cf:19:4e:42:d7:3e:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: May 3 01:02:48 2024 GMT
Not After : May 4 01:02:48 2024 GMT
Subject: CN=df1ef07cf8c9106e8ca0d60c56298aafbcca7194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:1c:ce:cb:70:3f:a6:3e:98:47:36:a6:7d:
20:53:47:f5:49:5e:88:18:f8:c1:2f:be:c6:03:37:
3f:7c:6e:a6:f7:9a:97:41:7c:d4:a6:03:35:16:78:
12:95:3b:80:e8:12:73:a8:da:92:c1:28:c4:98:7b:
d6:eb:7f:5d:64:3c:a8:7c:4d:13:82:c4:c3:31:16:
50:a5:92:33:f6:71:dc:e4:da:42:2f:1f:38:1a:be:
34:a7:f7:a1:1e:68:93:40:4b:39:b7:4f:90:f0:e8:
a4:fe:91:05:72:a4:8a:2b:5e:04:fd:6e:ac:61:42:
31:4c:ca:19:10:46:27:09:b4:06:01:06:3b:1b:83:
4e:7f:14:b9:ea:a4:6b:93:03:90:cd:5d:60:4a:ef:
23:ad:12:0c:3f:e7:f5:07:f9:0a:f0:a1:74:1a:7a:
c9:e4:68:8e:1e:cf:93:ed:7d:97:46:ca:41:bc:59:
f7:0e:eb:8e:27:b1:a6:ed:33:3f:64:0d:89:d0:09:
d5:1e:ef:7f:e1:9f:59:c0:cd:6d:8c:f5:af:64:da:
bb:28:9d:d4:d6:7e:c5:13:fb:52:5b:b2:02:ab:1c:
e6:03:5b:b9:4f:ac:22:22:15:a0:d9:a6:f1:0a:14:
db:dd:35:90:d6:ba:00:d0:e5:2c:33:25:0c:6e:29:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:F0:7C:F8:C9:10:6E:8C:A0:D6:0C:56:29:8A:AF:BC:CA:71:94
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:e0:df:ed:8e:09:a7:18:5a:f3:6a:16:a2:2a:b0:1a:7a:
82:88:f5:20:f8:c3:ab:4c:35:ba:49:e8:87:14:8c:da:9b:3e:
00:4e:0d:31:74:e8:ac:6b:68:d7:33:64:3a:3d:60:c1:74:12:
73:d7:c2:d0:4b:05:e8:6e:c4:54:8a:8d:10:60:e8:64:df:ac:
be:d5:d5:8d:64:b9:0f:c0:00:9c:19:13:12:7a:dc:e5:e5:ee:
b6:81:cf:f6:32:01:8f:c3:43:e3:dd:ba:bf:de:d3:47:48:e0:
5e:12:4e:3d:29:a4:12:fb:17:81:f6:d4:4e:48:ba:19:e5:5e:
f0:48:b9:54:bc:b8:f8:ea:a2:53:86:05:0c:6e:4f:ad:14:40:
97:ba:8f:83:ff:31:b7:2d:60:a3:33:fb:7d:87:55:89:59:4d:
89:71:61:f9:66:24:09:52:7c:da:b1:0e:1e:7a:d1:f1:f1:23:
a1:2d:79:32:18:13:f7:16:7e:b0:39:48:f2:0d:ea:23:b9:26:
cc:be:55:e3:f5:c9:ee:13:1a:5f:b0:d1:aa:30:72:e5:04:4e:
61:2f:04:ee:db:39:ac:1e:1a:f9:86:80:47:50:47:07:70:8e:
e4:aa:43:d6:13:15:02:7f:66:c0:5b:b4:76:44:4a:7f:30:72:
5c:fe:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:09:25 2024 by rpki-client on console-ams.rpki-client.org