Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
File: U1zc9HjqgOsXXEwwd-efy3DF0jA.mft (raw, json)
Hash identifier: 6vUH1sFHBjWK5oK8YC23Qz2zGmhwq5DjRPq94ckEmVo=
Subject key identifier: 59:2F:F4:03:82:A6:F9:C1:EB:C9:4D:75:32:23:A3:1E:F4:50:67:DE
Authority key identifier: 53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
Certificate issuer: /CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Certificate serial: 018F874AFDB01AE61EF92181FD69C1847623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
Manifest number: 05CF
Signing time: Fri 17 May 2024 16:03:09 +0000
Manifest this update: Fri 17 May 2024 16:03:09 +0000
Manifest next update: Sat 18 May 2024 16:03:09 +0000
Files and hashes: 1: U1zc9HjqgOsXXEwwd-efy3DF0jA.crl (hash: +E2ExD6/Ghe0R+IVnCdeHZ2cxlc+lE3ILYVXhUEM1gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:fd:b0:1a:e6:1e:f9:21:81:fd:69:c1:84:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535cdcf478ea80eb175c4c3077e79fcb70c5d230
Validity
Not Before: May 17 16:03:09 2024 GMT
Not After : May 18 16:03:09 2024 GMT
Subject: CN=592ff40382a6f9c1ebc94d753223a31ef45067de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:28:8f:4e:9e:83:fa:05:bb:62:f2:a0:69:
be:0a:50:59:0d:db:c4:56:00:42:8a:32:a6:53:32:
93:43:4b:72:4d:d9:75:31:1e:58:63:6f:39:3b:17:
4d:78:a2:2b:d2:56:df:9f:0a:97:46:03:f1:c1:06:
0b:5f:01:39:0e:20:14:0d:9d:cb:85:d1:fd:9f:ec:
1a:07:73:f9:4b:57:db:e9:b7:8b:26:58:3c:15:67:
48:6b:2d:4d:e7:41:39:cf:73:bc:b2:db:fc:a8:1f:
19:cd:74:b4:c6:6f:6b:06:bf:2a:ce:cc:33:3d:83:
22:78:43:6e:6e:b6:64:82:03:e3:e6:c9:53:40:b1:
9f:c6:9a:10:0e:33:17:cc:5a:25:4c:49:94:0f:1c:
42:7d:53:b5:08:57:67:12:b0:9a:e2:d2:8a:7d:4b:
d3:b5:ac:52:ca:fa:7d:1d:3a:13:ff:1c:e3:c8:43:
16:fa:97:7e:a7:76:ac:2d:f4:da:40:46:66:8d:f8:
42:80:d6:f9:19:34:68:2e:f6:21:2d:ea:da:e7:36:
0d:a5:84:55:87:7f:35:a8:aa:fb:90:5b:52:ec:87:
fd:7a:7a:dd:92:ef:f1:d4:8b:34:cf:af:ee:61:1e:
0f:96:fe:03:d1:e8:57:6c:17:d0:cb:56:a6:d0:a3:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2F:F4:03:82:A6:F9:C1:EB:C9:4D:75:32:23:A3:1E:F4:50:67:DE
X509v3 Authority Key Identifier:
keyid:53:5C:DC:F4:78:EA:80:EB:17:5C:4C:30:77:E7:9F:CB:70:C5:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1zc9HjqgOsXXEwwd-efy3DF0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a23c77-f4ad-40ba-b850-989f53b2cae0/1/U1zc9HjqgOsXXEwwd-efy3DF0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8a:a4:42:56:32:bf:8a:21:17:96:ca:0d:9c:b8:d5:1b:72:
fc:6e:bb:1d:ca:ca:7d:30:41:06:cb:75:3d:86:45:fd:86:3d:
14:1f:f8:42:cb:e4:44:16:73:30:5e:84:96:b7:cc:b0:6f:7d:
b5:c8:14:d0:2e:f2:fe:36:96:12:65:e7:d1:4f:3a:cc:2e:fc:
00:38:a5:7f:de:56:bc:69:a6:13:e9:fb:aa:8b:45:74:6e:70:
a2:d8:96:e6:8d:4d:3a:4a:91:09:a7:4c:86:94:d3:c1:87:ca:
96:21:73:b3:24:15:1c:4a:08:a2:53:cd:65:05:89:d2:35:43:
ec:a0:24:af:51:e7:c6:11:3b:0c:83:01:44:bd:89:cc:8f:13:
8b:1f:e9:46:f4:dc:32:30:e7:c7:55:32:1b:a3:23:61:5a:9e:
31:cf:4f:9a:7b:88:9d:12:51:35:5c:aa:7c:95:3e:dd:2f:9b:
65:da:9b:a2:d6:91:cb:e2:f1:7a:44:24:c5:41:5d:8a:8b:d6:
43:b3:bf:9f:5a:76:83:56:0f:7a:76:3e:71:de:9a:94:7b:52:
8b:1c:17:b0:17:4b:9c:34:e2:d4:b9:50:a6:44:7c:a9:83:4a:
e9:87:31:d3:81:25:69:e2:14:e3:d7:da:ed:df:e6:2a:b5:92:
74:e8:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:45 2024 by rpki-client on console-ams.rpki-client.org