Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: buSiwxEWZUKiK6ist2zoOGR3CAlkWrzT4Paornk5vTk=
Subject key identifier: C6:B0:34:A4:ED:0B:CE:A9:B8:47:BF:2E:35:25:03:C5:9C:C3:AB:F4
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 018F1FDBF058684FA408656BE46B5F434D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 0BDA
Signing time: Sat 27 Apr 2024 14:00:58 +0000
Manifest this update: Sat 27 Apr 2024 14:00:58 +0000
Manifest next update: Sun 28 Apr 2024 14:00:58 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: edU9TTNcPn46hJPhaYG2kMPmNerP4cMEJlkSrf2MurU=)
2: xw9xWfbFVe-THlZGUD5uKUVg6pc.roa (hash: nO+vVjgmgGIEvSe01qJIBUbXNJURrP3ZKx0r944Woac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:db:f0:58:68:4f:a4:08:65:6b:e4:6b:5f:43:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Apr 27 14:00:58 2024 GMT
Not After : Apr 28 14:00:58 2024 GMT
Subject: CN=c6b034a4ed0bcea9b847bf2e352503c59cc3abf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:fa:d3:3e:13:ef:50:ca:75:c2:3e:95:16:
23:75:c0:c5:3e:f7:a7:20:24:89:7f:ec:59:ab:20:
3a:78:53:7a:b3:f7:db:95:97:51:48:0d:72:35:71:
32:bb:fa:48:a5:c8:75:63:45:4b:6f:3f:8b:cd:76:
9e:2f:0b:91:ae:60:31:cf:be:42:e2:fa:de:73:ba:
89:36:19:c7:43:db:39:fa:90:30:77:84:22:3c:b8:
f8:13:cc:6d:1e:07:e2:c1:f2:47:e2:b7:c8:88:5d:
18:cb:14:79:72:95:ec:2e:ec:0f:fd:33:e9:73:1e:
d9:d6:ff:38:4d:16:de:55:1e:01:c9:c0:00:f5:ca:
b0:2d:d5:ff:80:46:b0:9b:51:7c:03:86:c2:a0:62:
c0:62:3a:ed:a8:b7:16:a7:4b:d6:97:a8:3f:37:a0:
22:71:8e:6e:98:b1:43:6a:1b:c1:9a:7a:71:5c:cd:
42:0f:62:3a:a3:83:e8:3f:2b:15:2c:de:b0:8c:dd:
39:ab:83:45:ed:49:2c:9f:3d:6b:0a:1d:84:19:1b:
8b:5b:80:90:9b:bd:44:85:c8:02:8e:3b:aa:9a:02:
25:8b:f6:e8:90:42:8f:65:f4:3f:3a:06:c5:d8:20:
e4:84:cb:53:3f:7f:c4:62:fd:db:d5:d6:16:bb:ca:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:34:A4:ED:0B:CE:A9:B8:47:BF:2E:35:25:03:C5:9C:C3:AB:F4
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:26:f1:23:ee:51:bf:25:7a:c4:a0:8b:52:73:70:1f:2c:
52:fa:90:87:18:9a:00:45:3c:c8:0d:2a:8b:fb:d0:d0:f8:75:
2b:a5:58:f4:3f:cb:00:44:8f:b2:45:85:20:93:e7:be:b8:c5:
8d:98:ff:79:d5:ef:0d:71:72:35:d7:ce:21:91:2d:ac:bf:a2:
3f:65:f6:89:8c:59:dc:e1:9e:a2:5d:e7:eb:e0:ac:ea:a8:db:
46:1e:c2:42:26:9a:4a:71:68:4b:b5:e6:62:3d:c5:30:1a:c5:
c4:46:b4:eb:43:b4:55:fc:2e:2e:96:18:ac:dc:9d:8f:27:1a:
d4:bd:3a:a2:04:ba:f6:ea:d0:bb:56:44:0f:df:40:16:31:99:
f9:ac:a0:d2:c6:79:6c:00:4a:c7:1c:f4:27:98:c2:d1:59:1e:
8f:d3:78:99:54:b3:89:11:98:99:71:91:8f:f7:5d:fc:cc:a0:
f9:d8:ae:ec:0f:0d:8e:74:f6:db:e8:0c:a8:75:d7:b5:f5:f4:
ce:4e:ad:9f:d2:48:88:3d:cd:fd:70:67:bc:6c:c6:67:75:af:
5e:50:ca:e9:92:bd:a3:d9:29:c1:d9:02:4c:12:95:b5:f6:e6:
38:d2:eb:cf:e8:f5:a8:01:61:e9:57:b2:24:1d:9e:6f:9f:e6:
c6:87:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:31:52 2024 by rpki-client on console-ams.rpki-client.org