Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: EGyGX/9qE6ICPxq9U4zfWFb5cKdCOGKXXW33PXCcY0w=
Subject key identifier: 53:03:A4:B8:B9:57:00:65:9C:34:2E:5D:38:24:4C:9E:BF:04:09:F6
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 018F51387A7EC9433A02A51BCD4EEA81C130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 06DD
Signing time: Tue 07 May 2024 04:03:26 +0000
Manifest this update: Tue 07 May 2024 04:03:26 +0000
Manifest next update: Wed 08 May 2024 04:03:26 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: 4laKKGfPlPXwc9VFQHGm6Zyi6cR8CqaOUA6Vd+aOobc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:38:7a:7e:c9:43:3a:02:a5:1b:cd:4e:ea:81:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: May 7 04:03:26 2024 GMT
Not After : May 8 04:03:26 2024 GMT
Subject: CN=5303a4b8b95700659c342e5d38244c9ebf0409f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:5f:4d:43:e2:99:d8:e2:bf:39:8a:20:97:
8d:dd:db:a4:e4:95:17:dc:7f:79:81:5f:1d:3d:68:
76:35:4b:52:df:df:e8:d5:a5:02:be:d1:e6:c4:e2:
89:ff:7c:fa:e2:2a:2a:cc:30:bf:ac:16:6e:03:32:
4b:39:5e:32:b1:c8:73:e9:78:4f:56:a1:79:12:69:
40:05:75:0b:f4:57:42:13:40:a7:4c:36:9a:26:47:
6f:c2:59:56:da:08:eb:b6:91:2b:25:31:1b:78:08:
c0:cb:47:c7:15:aa:ab:ed:82:91:d9:bb:37:2e:1b:
79:d6:b8:2e:20:69:74:82:05:7c:64:95:88:36:b5:
6d:2d:fb:47:2b:5b:d6:92:63:46:74:37:b9:91:c7:
b3:e2:7b:39:07:c9:cc:64:8c:b2:f1:8b:fb:e4:85:
e4:68:c7:e2:13:b4:c4:5e:db:9c:12:67:9b:a3:0d:
5a:04:ab:9e:c5:1b:50:fc:21:7b:5e:7a:f5:5f:2b:
ae:37:69:d4:8f:12:a4:c7:b9:2b:38:aa:15:a7:af:
51:bb:1a:09:a8:f9:27:0a:4e:28:28:1b:af:7d:64:
03:58:cb:40:3a:e4:f8:40:74:17:41:ec:29:80:95:
94:81:b9:b8:2e:d9:a3:51:56:6f:c5:bf:31:fe:01:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:A4:B8:B9:57:00:65:9C:34:2E:5D:38:24:4C:9E:BF:04:09:F6
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:49:82:e0:dd:d8:db:1a:5c:a5:2e:15:b5:c7:3f:cc:22:e3:
08:8a:3a:e3:c6:f4:9d:cc:2a:e1:3c:10:11:8a:51:11:21:a0:
0c:86:eb:e4:eb:0b:5d:3b:1e:a4:c4:97:a6:08:74:c8:68:df:
85:2e:11:cc:08:92:ec:43:48:12:2f:5a:64:86:ba:a2:fa:0b:
97:4d:3f:43:af:5d:70:89:e2:8c:fb:7f:a6:f9:c7:40:12:f2:
ec:9f:68:c8:ab:88:36:41:76:17:73:5c:33:aa:2b:c8:ab:c7:
e5:83:b0:ac:81:24:3a:a8:09:b3:cc:16:11:e5:e7:56:f7:a9:
42:e2:63:4a:98:3a:40:25:cc:c9:83:88:04:db:e5:a0:9d:ba:
55:62:bb:ee:c4:b2:e2:e1:33:43:60:a9:6b:0c:48:88:51:3d:
b3:32:48:f1:9c:02:3a:7c:90:6c:95:d3:ab:84:2c:33:bd:95:
c4:84:7d:a2:52:4e:7f:4e:eb:f7:6a:1f:c6:b1:69:86:6f:46:
84:58:67:10:68:b9:92:96:d4:d4:d8:f4:98:3c:3f:1b:4c:c4:
0e:3f:1d:2a:49:4f:5d:7f:67:b9:c8:cd:94:3d:a1:00:4b:1b:
21:51:c1:68:e2:fd:06:7b:82:aa:d2:34:4d:a4:24:0b:22:57:
d8:b8:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:56:22 2024 by rpki-client on console-fra.rpki-client.org