Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json)
Hash identifier: 4pgU+XBKOzJPNsx/XER4LlN0Z3sZ8aWO1avIVI+5ZWk=
Subject key identifier: 16:F7:75:1C:6D:89:00:E3:B8:E5:E1:7E:74:00:2D:8F:04:49:3C:3A
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial: 018F392E0C28596305ABF52C159178A9E1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
Manifest number: 0449
Signing time: Thu 02 May 2024 12:01:10 +0000
Manifest this update: Thu 02 May 2024 12:01:10 +0000
Manifest next update: Fri 03 May 2024 12:01:10 +0000
Files and hashes: 1: Gd9zrMKhWcrrz8uM38OUcznUALI.roa (hash: sWSRqP2WCQOulXf5uyZidLaM7OpO68MBX/DuoB7mvVw=)
2: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: 9m45enYecdQqbmdl0MeqeWDD7ORn5a379lYl/0PMqCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:2e:0c:28:59:63:05:ab:f5:2c:15:91:78:a9:e1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Validity
Not Before: May 2 12:01:10 2024 GMT
Not After : May 3 12:01:10 2024 GMT
Subject: CN=16f7751c6d8900e3b8e5e17e74002d8f04493c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:d8:22:fc:d3:c4:6f:fd:88:b4:6e:46:49:
96:35:08:20:0a:6b:2b:fd:ff:18:6a:8c:c9:a3:ed:
e1:ea:f8:1f:f6:4b:a7:39:6a:32:ab:5e:66:c8:14:
24:0b:fa:ac:af:d4:99:81:01:b5:9a:c7:f1:57:07:
52:cf:63:30:7a:69:84:c1:76:17:42:08:32:77:cc:
17:9f:93:e6:92:8b:ec:24:fa:68:a7:6c:f1:48:40:
26:ad:9d:69:19:03:39:7d:ef:a7:b4:b0:7e:44:11:
7c:6b:85:74:56:eb:04:05:84:f3:0d:8f:5e:41:2f:
93:04:d6:66:df:af:e4:7b:d4:6f:97:60:88:e9:aa:
bc:ac:12:f5:83:25:db:c3:55:e4:8e:6e:4e:a9:a4:
4f:11:d5:0a:e7:cf:28:a0:1a:81:e0:47:08:6b:c6:
71:c8:94:44:01:c3:6c:12:7d:46:e9:d5:5d:d4:4b:
09:0f:04:88:b7:ed:c4:4c:9a:7e:91:84:9b:fd:b7:
59:12:f1:e6:33:f9:fc:06:1c:2e:34:4d:a7:c3:e2:
7e:4c:f4:86:dc:a9:72:65:8d:7a:ba:fe:87:cf:1d:
d7:4c:5e:d0:3a:8c:a2:fd:4c:14:94:50:94:5a:c7:
91:ed:9a:db:6f:e1:5a:54:63:e6:c4:17:a3:28:7b:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:75:1C:6D:89:00:E3:B8:E5:E1:7E:74:00:2D:8F:04:49:3C:3A
X509v3 Authority Key Identifier:
keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:4b:25:b3:e0:eb:80:af:67:54:43:cb:75:21:e3:7a:d3:
fb:cf:2b:29:fb:c0:c4:29:95:b8:6a:14:ac:d4:f9:53:a5:82:
78:e3:4b:e6:e5:a5:fc:eb:bc:17:f4:41:15:c5:6d:60:84:9b:
1b:0c:a7:5f:c8:a2:d7:e7:92:6f:40:42:60:f1:ed:26:7e:3b:
72:bd:d8:ce:4a:2e:c1:64:5b:f4:cf:e2:9f:fe:2b:51:75:2d:
30:12:47:ba:d1:eb:b7:1a:50:34:81:d6:6a:f4:d9:48:8c:13:
85:cb:5d:61:bd:79:df:1c:4a:00:a5:6b:f7:ee:5e:bd:71:9d:
9d:b1:b6:aa:25:9b:42:64:80:00:06:b4:9b:e9:5a:2c:ee:a3:
4d:44:e8:ec:37:c1:78:95:2e:0a:4f:ee:ff:53:a3:b7:b8:3a:
a4:79:fa:54:da:b0:42:6b:68:08:89:fe:49:7b:e8:a2:b5:1c:
68:c8:b6:b2:c7:e9:ac:c9:8b:ec:7a:8f:0b:aa:50:68:50:65:
6b:f4:4e:b6:88:8c:e9:80:57:c5:f1:38:df:de:57:1c:4a:20:
93:a2:d9:b2:60:04:b5:7b:de:4f:90:94:6b:a9:46:d3:09:57:
65:d6:67:97:c8:1a:99:1f:19:8a:3e:55:60:be:f2:65:f6:7d:
39:37:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:25:32 2024 by rpki-client on console-fra.rpki-client.org