Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.mft
File: 1--IzhnTB9g0vHoU5Fb7BCQg92eE.mft (raw, json)
Hash identifier: zoGLKbMlMdDqTZ/sxMAXdBEgDS0omQaTDeKjEnh6/yo=
Subject key identifier: A8:22:5A:1E:AF:54:4C:40:2F:DB:4F:B7:5D:CE:F5:D9:AB:C7:4F:02
Authority key identifier: FB:E2:33:86:74:C1:F6:0D:2F:1E:85:39:15:BE:C1:09:08:3D:D9:E1
Certificate issuer: /CN=fbe2338674c1f60d2f1e853915bec109083dd9e1
Certificate serial: 018F441F9AFAA1286E8FB81990A49810A81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--IzhnTB9g0vHoU5Fb7BCQg92eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.mft
Manifest number: 0D53
Signing time: Sat 04 May 2024 15:01:12 +0000
Manifest this update: Sat 04 May 2024 15:01:12 +0000
Manifest next update: Sun 05 May 2024 15:01:12 +0000
Files and hashes: 1: 1--IzhnTB9g0vHoU5Fb7BCQg92eE.crl (hash: IWw/LSKWHo9pruYqAOwbtJMOVy8o3jeIDRpNtVXuTYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--IzhnTB9g0vHoU5Fb7BCQg92eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:1f:9a:fa:a1:28:6e:8f:b8:19:90:a4:98:10:a8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbe2338674c1f60d2f1e853915bec109083dd9e1
Validity
Not Before: May 4 15:01:12 2024 GMT
Not After : May 5 15:01:12 2024 GMT
Subject: CN=a8225a1eaf544c402fdb4fb75dcef5d9abc74f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:d1:1a:ed:03:4b:5e:ca:f8:4c:63:02:b0:
1d:60:9c:b5:36:c1:13:60:c4:3d:e9:be:11:f0:10:
59:6e:0e:76:50:b1:bc:fc:03:43:24:f3:ea:0e:d0:
84:7d:03:13:c7:cc:8e:37:21:4c:79:bb:92:52:0b:
83:4a:e1:f0:18:b2:6a:7c:04:fd:a7:14:6a:43:af:
3a:bc:3a:09:26:aa:b7:54:e8:3e:b6:9a:57:b9:d1:
d4:6a:cb:b3:43:35:9a:af:18:ca:15:7a:0e:f9:eb:
15:a2:0e:fa:12:c3:29:a7:db:1c:ba:a8:58:cb:49:
5c:2a:ff:21:a2:3a:f9:d8:e5:c3:00:15:23:33:57:
04:7f:e8:62:41:fa:ef:f7:51:b7:7e:94:ed:c7:fe:
91:9a:66:e4:1a:3d:e5:c5:0d:c1:aa:c9:63:62:e0:
a2:1d:1f:88:bb:48:88:e7:30:0d:0f:70:06:9a:1c:
f8:bf:10:dd:3f:25:82:ee:64:00:e2:cf:88:8a:a7:
6c:60:a0:04:5a:80:57:0e:8e:da:b6:c5:28:e8:cf:
b2:09:80:ab:a0:15:76:2f:37:36:05:a2:ba:36:15:
91:54:3c:8e:c5:ff:00:39:5e:5a:5e:33:d1:88:80:
d1:b2:59:9b:27:cc:49:5f:17:47:02:10:e1:93:b8:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:5A:1E:AF:54:4C:40:2F:DB:4F:B7:5D:CE:F5:D9:AB:C7:4F:02
X509v3 Authority Key Identifier:
keyid:FB:E2:33:86:74:C1:F6:0D:2F:1E:85:39:15:BE:C1:09:08:3D:D9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--IzhnTB9g0vHoU5Fb7BCQg92eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d03ad4-d275-464e-81a3-f33dd959e278/1/1--IzhnTB9g0vHoU5Fb7BCQg92eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:38:72:da:37:83:ec:f2:a0:9e:37:7b:b6:4f:ce:f1:14:
21:9b:bb:7c:3c:39:da:ca:a6:07:e6:c4:23:56:16:70:9f:4b:
1c:1d:e3:86:a7:3c:be:05:5e:37:42:fe:d8:a6:ca:4c:c4:8e:
22:49:6f:a2:88:9e:e4:01:9e:92:3d:59:1d:18:75:0e:98:d4:
22:42:b8:5b:35:9f:9b:8c:e4:0a:49:21:c2:c9:9d:12:5b:e5:
a7:99:c7:ab:bd:41:7c:31:1f:80:f8:92:a8:5c:0e:1c:51:9d:
a3:0c:d5:b9:f3:8d:50:96:2e:24:8a:df:7e:ee:67:75:e1:7d:
3a:21:4c:87:f9:8e:62:b5:f8:6f:e8:db:96:6b:f8:7e:38:67:
ea:06:92:2a:0a:9a:c6:4e:e1:a7:59:16:e4:f5:db:a5:d4:62:
ca:48:46:fc:fb:8b:ea:f7:45:9b:8c:a2:b6:56:e6:7b:ef:1c:
29:f3:b2:7b:f0:3d:c9:b0:09:53:92:29:65:49:c7:9e:28:9b:
e8:21:36:a8:ee:49:72:d1:20:15:7b:83:2f:6d:38:44:a3:05:
4a:a1:1b:fe:64:e4:de:cd:f1:1b:a8:10:90:35:28:49:86:2c:
4f:c1:54:ea:de:b9:94:e7:e8:c3:56:22:05:02:76:6f:6b:e0:
6d:03:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:41:41 2024 by rpki-client on console-ams.rpki-client.org