Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: jeoXWmehKOpHSIhvjd1XkRl0DhYrYyGBmWs32/jboLE=
Subject key identifier: 86:E3:0B:9B:4D:5E:B8:50:BC:0E:F4:24:F8:62:80:9C:11:4E:24:7A
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 018F9503FBE73F9A42E5D78FA8571FFC0BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: A3
Signing time: Mon 20 May 2024 08:00:17 +0000
Manifest this update: Mon 20 May 2024 08:00:17 +0000
Manifest next update: Tue 21 May 2024 08:00:17 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: vD994JvqUh8WUmLkFmOfsFfoIPIIZgFAXhZ249gjicw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:03:fb:e7:3f:9a:42:e5:d7:8f:a8:57:1f:fc:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: May 20 08:00:17 2024 GMT
Not After : May 21 08:00:17 2024 GMT
Subject: CN=86e30b9b4d5eb850bc0ef424f862809c114e247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:b9:5f:4b:89:27:3e:a3:e7:80:b8:48:b2:
77:73:4b:6f:d5:cd:aa:12:f4:02:43:4c:1b:0c:68:
56:1b:14:ba:2e:9e:55:3e:e9:b7:3f:7f:0e:1f:63:
3c:fa:07:76:b8:5f:85:3c:67:76:7c:cf:cc:ea:25:
cf:a3:6b:21:b9:58:21:85:21:2e:99:db:ae:33:1e:
8b:17:91:25:2f:79:92:3e:df:ab:7f:27:f3:36:69:
9e:09:27:f2:83:35:d6:42:ce:2c:4e:63:7e:9a:05:
65:10:b9:70:d1:a9:ae:be:14:0a:d9:d3:89:de:fa:
e3:3b:5c:1b:d8:53:6a:4c:0d:46:ca:d2:b1:98:79:
86:fd:13:bb:34:44:9a:91:fe:be:55:fe:04:54:cc:
43:a3:8d:4f:0e:20:df:31:34:3d:86:c7:21:16:02:
0c:7c:ab:97:c6:0f:e3:40:38:7d:aa:3c:01:59:49:
e5:16:d3:6f:eb:15:33:96:b8:11:cd:4f:4a:8b:dd:
b7:3b:16:0b:61:51:bc:e3:09:0a:78:5c:63:c0:3a:
80:9e:e2:f6:33:18:44:63:e2:89:19:c3:55:cd:10:
9e:94:39:b9:86:2a:a5:35:ca:68:a2:0f:25:08:b1:
7b:59:84:32:61:30:d0:c4:a4:e4:17:2a:57:f8:2f:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:0B:9B:4D:5E:B8:50:BC:0E:F4:24:F8:62:80:9C:11:4E:24:7A
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:87:37:75:de:85:96:ac:90:bc:62:e5:78:c1:40:df:76:48:
0d:86:54:3a:8e:03:df:eb:b9:64:21:b4:2d:9b:bf:c2:03:54:
34:a5:8f:6d:23:4d:52:1a:7d:cc:a2:c7:a0:a5:81:4c:96:cf:
16:c5:e3:ec:bc:01:3d:15:fb:1a:a4:de:57:e6:ee:05:03:db:
91:f5:06:6c:22:7d:db:cf:cc:a6:12:76:ed:b3:fb:3f:ef:d4:
8b:ba:10:56:a5:92:46:c9:c4:f7:b0:f3:63:8d:64:8a:48:09:
07:4d:b3:d5:8c:4f:f8:87:4e:74:cd:bb:5b:9d:0c:5b:db:31:
aa:9f:d3:12:6e:58:67:0a:da:c1:8b:50:f2:fd:3a:26:f6:e7:
55:c6:45:89:ee:57:36:7a:a1:76:9f:94:e5:c1:5d:24:7e:46:
e4:80:44:d0:18:a5:1a:b4:91:ad:9a:bf:56:2b:aa:16:d6:9a:
6c:43:7a:e1:6a:8a:64:8d:69:bb:e5:21:7e:1c:48:9c:41:f5:
61:75:45:ae:25:8e:98:57:d5:c0:3b:3d:db:ba:2a:db:25:e1:
44:96:bc:5b:a8:1a:d6:fd:1c:92:45:93:04:fc:e0:f0:3a:ac:
4a:47:0e:f4:93:13:09:b9:80:d3:cd:a0:1b:6c:fa:15:4f:f4:
d6:67:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:22:00 2024 by rpki-client on console-fra.rpki-client.org