Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
File: IPDErRxLDFNu0YcjyKlaNI0ov2U.mft (raw, json)
Hash identifier: PPFQoXyjRyh8ix/9lJLcUh0E6RTG6+3nnrjpQDh50hE=
Subject key identifier: 90:F0:B7:43:F3:20:42:34:FD:81:3C:5E:52:81:0B:87:62:33:AC:44
Authority key identifier: 20:F0:C4:AD:1C:4B:0C:53:6E:D1:87:23:C8:A9:5A:34:8D:28:BF:65
Certificate issuer: /CN=20f0c4ad1c4b0c536ed18723c8a95a348d28bf65
Certificate serial: 018F467BA16D2E384D275AC9286B19D1EDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPDErRxLDFNu0YcjyKlaNI0ov2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
Manifest number: 1159
Signing time: Sun 05 May 2024 02:00:58 +0000
Manifest this update: Sun 05 May 2024 02:00:58 +0000
Manifest next update: Mon 06 May 2024 02:00:58 +0000
Files and hashes: 1: IPDErRxLDFNu0YcjyKlaNI0ov2U.crl (hash: D9A4qcJU6NM+WudvW7bp6N9f+eF1baplnyJ9AwEHxEU=)
2: YkDO4VY326alPeMc144EFpzEF_g.roa (hash: VrhrRQcNNswVX3V3TCkzS+Bf6K+WCyRfnmqzCenS0tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPDErRxLDFNu0YcjyKlaNI0ov2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:7b:a1:6d:2e:38:4d:27:5a:c9:28:6b:19:d1:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f0c4ad1c4b0c536ed18723c8a95a348d28bf65
Validity
Not Before: May 5 02:00:58 2024 GMT
Not After : May 6 02:00:58 2024 GMT
Subject: CN=90f0b743f3204234fd813c5e52810b876233ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:17:7d:30:45:78:33:06:99:fc:60:1d:d7:
cb:6d:a3:18:92:cc:d5:1d:d5:45:ae:76:6f:16:fa:
a3:92:d2:d8:b8:df:34:80:23:20:c9:10:28:32:54:
c3:95:ad:dc:8c:e6:c9:af:53:4f:ce:d6:57:93:e6:
cb:c4:05:fb:24:87:af:72:96:dd:1e:fc:fa:66:01:
85:cb:8f:ff:2f:e4:e1:39:b0:e9:f9:98:7f:9a:1f:
0f:d4:d6:0a:76:c6:58:5d:49:50:58:46:7d:f3:7c:
f6:9a:b3:37:20:ad:cc:f0:c7:0d:dc:4b:2e:9d:9e:
fc:07:af:8b:ba:38:fc:18:10:e3:28:cd:f1:f6:e9:
12:5d:a3:d4:8a:40:ab:f1:80:c3:ba:d8:44:f8:ca:
aa:b8:1c:dd:aa:0e:8c:54:6b:a7:4e:83:02:5a:00:
17:e6:5f:e3:e7:a1:0d:0b:32:2a:cb:15:2f:1e:e2:
f6:00:bf:cb:44:d6:77:7d:7e:d1:57:fa:fa:3f:29:
74:4b:b0:d6:ef:0c:79:26:23:5e:48:eb:30:2a:a2:
d5:f0:93:01:0f:8d:af:2f:9c:60:c6:3c:5f:cc:c4:
ae:30:e0:66:ca:9d:2e:ff:45:61:98:01:82:2f:55:
fc:29:50:5a:f4:04:76:39:5a:3b:af:0b:8d:cf:11:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:B7:43:F3:20:42:34:FD:81:3C:5E:52:81:0B:87:62:33:AC:44
X509v3 Authority Key Identifier:
keyid:20:F0:C4:AD:1C:4B:0C:53:6E:D1:87:23:C8:A9:5A:34:8D:28:BF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPDErRxLDFNu0YcjyKlaNI0ov2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/5caab7-0eb0-429f-a7b0-e7d4551c19ab/1/IPDErRxLDFNu0YcjyKlaNI0ov2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:38:24:2e:53:d7:27:18:2e:99:f6:bb:51:7e:5f:83:8e:
8c:b0:de:99:33:6a:15:0e:a3:83:5b:f3:aa:04:de:11:de:bf:
3f:92:ea:35:cb:50:84:60:22:45:da:43:75:c9:94:69:1c:9d:
87:aa:d9:d7:66:6e:d6:8d:38:b5:e8:63:da:44:b4:c6:5f:f4:
9e:39:a8:00:ce:9b:48:e4:ed:e7:24:a2:79:02:3c:dd:03:15:
8f:ca:9d:aa:a8:32:99:de:bf:10:f5:35:83:b9:56:ba:33:e3:
5e:10:74:5e:33:f5:3b:db:bf:f1:7f:2f:10:8c:12:57:9e:e4:
cf:9d:e5:00:26:5c:c4:9f:e7:e4:10:f6:1a:11:dc:ab:be:7c:
95:9c:fb:22:1a:5c:43:7d:e8:32:ec:6e:99:f1:3e:66:64:06:
86:2b:bf:87:96:82:39:bf:a6:2c:b8:3e:99:9a:f7:80:b4:31:
5e:6f:a1:3c:85:8b:a4:cd:09:5e:fd:3c:d3:9a:3e:37:70:35:
b2:74:02:45:d7:c8:e6:bc:cc:aa:55:e2:30:64:8a:14:d5:74:
71:6b:74:3a:8b:0e:5c:38:b0:02:9c:f5:13:42:74:f9:be:f6:
4c:e3:0e:10:36:62:14:f6:98:19:f7:de:a8:d1:68:62:ed:f0:
86:89:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:13:39 2024 by rpki-client on console-ams.rpki-client.org