Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: h3XO2sRAachnTz2h6pI65hHU9cQ5feDDx8qmYfQ0HpQ=
Subject key identifier: B8:7B:8F:37:8E:0E:E2:4A:57:58:C5:F4:EA:FF:2C:2F:3F:71:D5:A2
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 018F2237DC7A9B4B7E2F6AF63A371A9BE4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 10AA
Signing time: Sun 28 Apr 2024 01:00:37 +0000
Manifest this update: Sun 28 Apr 2024 01:00:37 +0000
Manifest next update: Mon 29 Apr 2024 01:00:37 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: KMhoqKjzs1uOyUZNB9qyllWqeqwxYleodDTiOr5FO0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:37:dc:7a:9b:4b:7e:2f:6a:f6:3a:37:1a:9b:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Apr 28 01:00:37 2024 GMT
Not After : Apr 29 01:00:37 2024 GMT
Subject: CN=b87b8f378e0ee24a5758c5f4eaff2c2f3f71d5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:80:0f:b9:cf:65:bf:ca:b0:d2:fa:22:29:
9b:70:8b:c6:9c:21:4c:00:49:ae:25:9d:d9:ba:ee:
ad:cc:39:5c:62:7b:02:76:d1:a0:ba:02:ac:44:81:
a1:0d:0c:c9:d6:e4:60:ba:a0:12:13:5b:90:83:ac:
a0:a8:af:4f:d4:8e:05:1f:58:13:81:41:60:7b:b2:
67:f9:b1:75:a7:cc:61:aa:49:6f:c3:66:78:85:56:
57:3d:98:c7:79:d1:4d:e2:94:16:42:42:62:87:73:
e2:ad:81:82:a9:95:6f:23:23:35:d8:0c:98:e3:e1:
cc:9e:81:5b:fc:e8:7d:69:69:dc:d1:f4:a8:3e:47:
b4:f0:08:f3:ed:20:75:ac:d4:0a:50:a1:c8:09:41:
d9:f1:2c:36:6e:22:8e:fa:15:7c:f4:05:40:0c:58:
7e:d6:2d:bb:36:a6:f0:c8:e1:8c:1f:e3:95:da:ba:
dc:71:af:44:bc:21:43:c0:48:be:08:b6:d9:5e:5e:
53:94:3f:10:a4:cd:d5:74:6a:62:23:09:2f:22:fb:
bc:4b:cd:0b:16:41:f9:ff:85:b1:52:75:07:e1:fc:
01:2d:93:ee:28:81:c4:62:ef:97:46:d4:07:b7:9d:
7e:eb:d6:f4:65:97:5a:5b:48:01:c3:35:f7:f1:67:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:8F:37:8E:0E:E2:4A:57:58:C5:F4:EA:FF:2C:2F:3F:71:D5:A2
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:a3:2f:a6:10:5b:1a:69:3d:96:c3:da:d2:02:10:72:d4:
43:f1:cf:c9:2c:49:65:5e:d3:ae:c6:30:63:55:46:3d:4d:0c:
93:67:1e:ae:ed:1e:f7:0a:40:0e:f3:cf:46:ec:40:26:f9:cc:
56:3a:0d:6f:ca:83:86:1c:b2:3e:0a:41:9b:d6:73:6a:ce:3e:
89:ae:27:6b:a4:8b:88:1f:f5:0c:d1:43:dc:a0:a3:ba:c0:17:
63:87:79:4a:98:80:f0:e7:cf:34:f4:af:02:60:79:32:ba:b2:
df:77:ff:7e:64:f7:d1:b2:2c:84:ce:0c:be:62:3d:2e:46:ff:
fd:f8:f2:8f:f6:37:08:b9:b3:b8:55:1b:1d:c9:90:76:33:87:
e9:f9:4f:a2:69:87:9a:2a:03:0d:3e:5c:26:8f:de:3d:c0:e1:
21:e3:e4:29:4f:21:16:e5:86:7d:48:50:80:99:d5:fb:0f:b8:
7c:06:87:52:ea:f7:90:d5:57:3a:79:64:e4:93:c7:25:c9:af:
49:6e:72:1c:45:c3:4a:cd:b5:92:f0:75:31:68:2e:cd:97:4b:
57:7e:a9:22:84:34:5a:32:f1:2b:f5:10:e5:db:bf:d6:ad:b5:
50:a8:cb:55:9d:d3:6e:61:af:77:93:6e:a5:29:2a:9c:1e:8b:
87:d9:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:21:17 2024 by rpki-client on console-ams.rpki-client.org