Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: DeW5NcdviFfeLz49TxW1S8TJ3MJinUKK8sXMTccZXfM=
Subject key identifier: AD:0F:FC:F0:37:D5:5B:99:E5:6F:AF:82:75:B3:A0:2B:18:0A:45:97
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 018F223829A0A567ED961DC20C459BCE9559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 1146
Signing time: Sun 28 Apr 2024 01:00:57 +0000
Manifest this update: Sun 28 Apr 2024 01:00:57 +0000
Manifest next update: Mon 29 Apr 2024 01:00:57 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: YzzN2yWcS0oDFyak8myu5zIsYWc1JySDnbcg28aox1s=)
2: 1eAGu-ABlEPU4KJiTuXsMZAbFvU.roa (hash: i21aTnx+e9HS61Jw+liOBppQXdu89MRUq8Vn/TP1eAA=)
3: 8Qu62nIJ6nAm6s-a2LmqX1L2lZQ.roa (hash: j5kkv1pJCYTRAbSuy9COE6ZdMN7LSnwUi5WlLG8hhpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:38:29:a0:a5:67:ed:96:1d:c2:0c:45:9b:ce:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Apr 28 01:00:57 2024 GMT
Not After : Apr 29 01:00:57 2024 GMT
Subject: CN=ad0ffcf037d55b99e56faf8275b3a02b180a4597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:76:5a:2b:4a:52:66:73:34:34:dd:c6:1d:
a9:f5:06:b9:f5:05:0b:cf:15:da:ee:a4:f1:c3:ae:
05:4b:65:1f:56:73:7e:ee:65:55:55:d7:1c:22:7c:
0a:a6:f5:de:45:a3:2a:46:df:7d:9b:a8:92:45:25:
1f:41:66:ce:30:85:69:92:19:83:55:6d:57:bd:7b:
f6:9e:c4:be:e2:65:13:79:38:da:8c:d2:e2:be:5a:
a7:6e:02:d5:ca:1b:89:a9:53:e8:b9:e5:c0:fc:ae:
96:1f:47:42:c6:3b:43:53:65:64:e5:96:8a:99:54:
dc:a1:07:a5:7c:99:fc:80:53:1f:8f:2f:90:fc:42:
fd:a6:dd:6f:32:db:19:ee:f0:21:60:34:49:71:9e:
25:5e:75:2f:13:63:07:b2:15:b9:3d:34:70:1c:8e:
c2:3b:ea:13:be:43:9f:ad:c5:c1:09:2a:41:65:b8:
df:29:9d:e5:e8:eb:16:93:ea:da:0e:ff:9e:48:7a:
b1:9c:99:ec:17:be:b3:71:8c:14:d8:98:8a:ea:ec:
4a:37:97:ae:79:72:2c:d1:91:ce:8c:36:37:84:c6:
c5:5a:24:dd:95:3a:1e:ec:da:ae:15:70:f2:81:49:
a4:fc:83:f6:e6:bc:31:ad:87:a9:66:d6:26:ef:0d:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:FC:F0:37:D5:5B:99:E5:6F:AF:82:75:B3:A0:2B:18:0A:45:97
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7c:95:64:b8:fd:05:1c:6a:64:eb:4f:8f:56:6c:35:f7:3e:
b9:c3:99:95:1c:18:1a:02:13:59:85:48:00:ca:95:8a:93:c4:
e2:29:6b:b6:75:00:db:63:e5:98:05:cc:2f:81:b2:b5:6a:bb:
6e:fd:01:f9:f0:93:f3:8a:db:8c:17:05:1c:ed:fd:a2:85:cf:
a4:0d:ad:6e:f4:56:5e:4b:6e:1b:2e:9d:92:e8:ea:a6:71:4d:
4e:5b:e6:9a:62:43:a1:94:2a:32:4f:1c:bd:d9:b9:5c:bc:c7:
13:50:fe:5e:b5:63:a8:49:e0:2b:2c:90:19:7d:03:a4:41:3f:
95:1d:5b:62:54:ae:9b:00:d7:10:d4:9c:1a:4f:1f:0e:26:15:
18:15:7b:61:80:6e:7c:f9:13:e7:a8:20:91:76:87:2b:3a:f8:
78:3f:4d:ec:73:6c:4c:47:a1:78:0b:10:50:a5:5e:54:e7:f3:
44:a7:fd:5e:85:13:95:77:b3:cb:15:1a:02:f5:53:7f:38:fe:
89:f0:d0:37:07:6a:a7:13:19:82:ba:d0:ef:bf:00:cd:60:34:
a0:5c:89:fb:3a:43:a2:a0:f8:19:cd:6d:9f:6a:e8:ea:fd:96:
41:4b:f6:09:92:c1:24:f1:40:a5:46:81:5e:51:98:cf:2d:f6:
17:f5:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:18:03 2024 by rpki-client on console-ams.rpki-client.org