Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: qX3vnh+XKpkSEt0bFYFlbJvsXGyMSiu8b8QsIbpO0oc=
Subject key identifier: 4A:AE:8D:C3:E2:27:C9:64:AF:16:CE:E6:67:87:E7:94:21:13:9D:4F
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 018F1F0256218BED341BB74093E13A313DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0A73
Signing time: Sat 27 Apr 2024 10:03:17 +0000
Manifest this update: Sat 27 Apr 2024 10:03:17 +0000
Manifest next update: Sun 28 Apr 2024 10:03:17 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: lHPONQAgOZT7VMCIqfJp01U6T+g0mwYXnI6Tqa23LqA=)
2: BXw08Q3WNM6k04J2Hr2z4s1u7o8.roa (hash: w7FsLrAo9ndyR3kArk1dsPj5Z4GEO8PCCfO7adiBkH4=)
3: Wevpv1P6gEfQRXzo6vY3FJ4462A.roa (hash: NmiW6UjFVi+7gN4KNO0Hc9HTnBZ90w0v0xQjygDDLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:02:56:21:8b:ed:34:1b:b7:40:93:e1:3a:31:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Apr 27 10:03:17 2024 GMT
Not After : Apr 28 10:03:17 2024 GMT
Subject: CN=4aae8dc3e227c964af16cee66787e79421139d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:58:1a:7d:c3:ba:59:34:82:91:6c:30:87:
6f:eb:75:c9:12:17:43:1e:dc:f5:63:f1:19:64:cc:
f3:95:ba:72:6c:1d:be:d2:39:e8:54:5c:23:3c:fe:
ba:09:23:dc:78:75:0a:54:cf:28:9f:8f:be:43:ee:
2c:fd:de:4a:93:a9:50:c1:46:f6:f6:b1:0b:77:ad:
59:ef:ab:1a:9c:6f:62:33:89:36:56:3a:4b:90:89:
55:c4:7e:67:69:74:90:94:11:bd:c7:42:ac:14:ce:
08:8b:34:e8:86:9a:f0:ff:f4:97:26:a7:21:43:fc:
52:c7:7b:95:62:a4:83:03:2a:91:cb:20:c6:a5:6e:
9b:24:8c:b0:d5:07:d2:34:ec:fb:c5:f3:46:fb:9c:
d7:91:0f:ec:cd:98:0f:1a:13:ba:7c:53:28:12:ab:
a3:9c:a4:e0:3f:3b:9d:5a:6c:29:9e:cf:04:e5:19:
6b:ea:18:6f:c0:e1:8d:95:29:36:1f:ba:be:f9:07:
9d:5d:05:f7:29:c4:a5:01:59:c7:96:79:1d:22:9d:
4f:d8:46:72:c3:79:57:fa:d5:40:26:d4:72:22:6b:
95:47:4f:f3:61:4a:3f:3a:95:48:92:85:10:52:80:
f6:4c:d1:6c:e6:80:74:74:21:08:a8:87:0c:80:ce:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:8D:C3:E2:27:C9:64:AF:16:CE:E6:67:87:E7:94:21:13:9D:4F
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:a9:ac:4b:7e:e2:0e:fd:7a:75:79:60:c0:66:6d:0d:f7:
ef:2f:cc:ec:40:de:cd:da:87:09:97:b6:6a:09:64:cf:ee:21:
2f:7c:c4:d8:28:c4:b2:a2:22:41:81:02:ac:5f:75:66:1b:9c:
83:8a:95:93:bc:db:5c:d4:04:83:55:69:04:aa:2c:23:25:fe:
d7:5e:a3:98:2e:21:ad:d3:92:c3:5a:f4:9c:ce:21:e1:50:00:
87:bf:f8:5c:fa:7c:57:05:10:4b:d7:68:0b:8a:b6:58:69:51:
be:db:bb:54:7a:82:62:0a:2c:e8:a2:d7:87:5b:e3:75:84:51:
d3:70:86:26:72:0e:ed:0c:9e:7d:3b:3a:ee:0f:9c:3c:1f:3c:
3d:5d:ef:5a:08:6c:13:0b:89:e8:ab:cd:a6:83:6b:94:64:77:
30:37:a6:1a:b2:1f:b1:4a:58:a5:e8:d8:5e:af:a6:57:26:26:
af:33:95:e2:e3:de:4d:f4:3e:f1:8f:d3:f9:98:74:47:50:65:
fc:85:d8:05:27:2d:5f:7a:3d:55:cc:2c:31:30:d7:98:55:5f:
94:7b:91:c1:44:26:59:43:a9:a0:a7:e7:f1:7e:6e:30:65:85:
be:64:e6:e1:58:b0:fa:d5:51:4b:09:8b:36:d3:4e:84:39:96:
9d:29:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:50:52 2024 by rpki-client on console-ams.rpki-client.org