Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: mYeR928kzHFgWmSKCafAZnRTTYWMRUnbYpkfvLRc2Ms=
Subject key identifier: BA:FD:6C:35:CB:02:FD:AD:97:76:8C:AF:AD:1D:CA:DE:CE:72:53:1B
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 018F4D5B79C6189151A9866A2818CAFE7B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 115A
Signing time: Mon 06 May 2024 10:03:11 +0000
Manifest this update: Mon 06 May 2024 10:03:11 +0000
Manifest next update: Tue 07 May 2024 10:03:11 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: W93oJhaUg5paRcArLsXAszKlDs8kuJfHM+acMuztZjQ=)
2: PGlVdZ5eHY25saQVvHwfh71h_NA.roa (hash: 5xnObb+st1EQWkXj8cKAqbXhnQYhWh79M88C+smxCnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5b:79:c6:18:91:51:a9:86:6a:28:18:ca:fe:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: May 6 10:03:11 2024 GMT
Not After : May 7 10:03:11 2024 GMT
Subject: CN=bafd6c35cb02fdad97768cafad1dcadece72531b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:ef:20:eb:9f:89:1e:e0:e6:cf:05:f0:29:
f8:3e:de:86:f3:81:0c:aa:c8:d8:ba:00:cf:65:1a:
4e:a9:e0:e8:f8:f7:6e:b0:b6:f6:6c:1b:b2:fb:26:
0c:d3:50:56:f1:b0:f8:fd:89:04:dd:7d:81:5b:ab:
29:9e:73:59:6c:01:db:f7:5f:c1:72:eb:6c:85:4a:
d1:8a:1d:87:52:82:72:1a:cf:8e:72:ae:af:5d:75:
7b:4e:a5:22:78:6a:63:c4:11:61:aa:5b:3e:8a:fb:
2b:93:d5:81:20:e3:d6:f1:77:0b:14:9b:fb:ee:7d:
03:95:1c:2a:79:f5:e2:db:f7:a0:f7:c9:84:5c:e1:
c9:ff:be:45:55:a2:25:a3:ef:76:48:43:66:76:8d:
a2:70:cd:bd:66:f9:4b:8e:6d:c8:e8:53:f3:9e:8d:
e4:18:6f:2b:09:d4:11:c9:73:4a:17:5a:9b:b9:4d:
36:a3:41:30:4b:b6:e5:41:a0:6e:ee:c5:37:5d:79:
8e:fe:35:00:b2:f6:44:c6:5d:47:0b:c6:57:5a:a3:
30:75:05:0c:2b:87:cc:e7:46:1d:1b:cc:63:63:7d:
f8:a1:5c:5f:c9:3c:2e:43:1c:34:66:cd:53:ed:9e:
7f:7f:94:6c:8d:c5:28:02:aa:f2:d8:34:1b:99:71:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:6C:35:CB:02:FD:AD:97:76:8C:AF:AD:1D:CA:DE:CE:72:53:1B
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:a0:22:3e:03:1c:d3:42:02:11:aa:89:27:dd:54:6c:f2:
16:75:d6:8f:0d:3d:31:9f:f4:8d:cf:a4:fc:54:80:62:9c:61:
6a:ab:47:7a:06:04:75:bf:fb:44:2a:d6:8b:47:25:a8:c4:5d:
bf:df:af:d8:1a:7a:d7:31:24:8d:e5:48:18:4c:fe:6c:61:17:
cf:16:9b:db:1d:34:bf:c2:92:37:0d:63:45:5d:f5:92:90:86:
86:3b:23:3e:5e:17:a7:f5:59:30:c3:0d:96:d5:e0:6c:c8:4e:
a3:05:e9:9c:cb:e6:fd:88:fd:02:71:f5:21:dc:2e:f9:20:d7:
c5:ab:bf:64:34:37:d0:3b:4e:3f:0d:85:be:7d:56:0e:9b:c3:
d3:9d:8f:92:c8:ae:dd:78:32:63:6d:af:a0:91:2d:d1:76:f6:
d8:07:da:ec:2b:65:56:7a:21:c2:fe:b5:e1:d2:0f:31:ba:89:
34:9f:d5:b1:a0:6e:72:7a:38:83:58:fa:62:e1:76:48:2d:e8:
ac:e9:c4:a9:d0:ee:ba:67:ba:b2:e1:b4:f7:0a:e7:94:df:dd:
e9:16:b9:b3:32:84:d2:9a:b3:e2:bc:ea:6f:78:3f:37:e4:1c:
e3:05:1d:12:a2:f9:60:cf:43:63:81:b6:88:db:e5:0c:9f:0d:
de:a1:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:44:47 2024 by rpki-client on console-ams.rpki-client.org