Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: weGlEWeeGlj0vR52ds0MoRVOfVHq6YyQtUEwVE+DwLQ=
Subject key identifier: 5C:7D:4D:19:35:82:D8:66:CD:B7:10:5E:B5:E4:DD:5B:84:34:EF:30
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 018F40B1727D17E0AF3EF72B0B3FE1B587CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1153
Signing time: Fri 03 May 2024 23:02:01 +0000
Manifest this update: Fri 03 May 2024 23:02:01 +0000
Manifest next update: Sat 04 May 2024 23:02:01 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: zAzBoNSJxqqryyYnbvb4UTcxKU5zJT3weKU/oZop1p0=)
2: FvHP6rtAD12w-L83Q2gMki0tEXM.roa (hash: JykBa+r/vSizmNSKS7d0RdftWcMwMVkze8s2JSr9vrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:b1:72:7d:17:e0:af:3e:f7:2b:0b:3f:e1:b5:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: May 3 23:02:01 2024 GMT
Not After : May 4 23:02:01 2024 GMT
Subject: CN=5c7d4d193582d866cdb7105eb5e4dd5b8434ef30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:20:e8:ef:9c:a7:21:03:ce:d2:88:61:84:
20:34:f3:e7:44:ed:75:59:02:ee:09:c3:af:bc:a5:
20:93:5c:0a:58:c4:ac:da:6f:36:b2:8e:9a:a6:c9:
cc:e7:56:6f:85:47:3f:b1:0c:be:50:69:bf:17:2d:
49:a1:3f:25:73:d6:f6:6e:f8:aa:d9:15:45:65:ed:
28:3a:80:74:5c:46:03:f0:a5:12:6f:70:88:32:7d:
40:e3:fd:b3:d0:71:02:2d:21:02:07:a5:14:9b:e2:
e1:24:56:e3:e9:7a:f2:57:c0:fc:6b:43:23:90:fd:
c8:10:32:61:4c:36:de:0a:56:6e:61:ca:90:c5:6c:
0f:c1:3f:db:74:14:a2:e7:61:3e:01:d1:ff:fd:6e:
aa:0a:47:35:27:33:61:44:69:5a:6b:34:32:7b:4a:
c3:b2:57:c0:11:0d:97:49:da:ce:f7:0c:f9:0a:35:
e9:04:52:06:cd:d2:2a:11:b0:24:98:ec:6b:7c:f9:
d2:ca:93:36:a3:50:3c:ec:ec:87:dc:e8:ae:9d:93:
d8:74:68:b9:29:41:32:fa:b1:04:34:9c:df:32:27:
4a:63:c3:b6:43:57:95:2f:cd:e8:78:14:03:b2:bc:
95:d4:86:23:93:61:3a:12:ee:5d:28:97:d4:03:5a:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:4D:19:35:82:D8:66:CD:B7:10:5E:B5:E4:DD:5B:84:34:EF:30
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:e2:53:76:26:d4:b2:ae:f8:75:65:79:6e:63:24:e5:e1:
09:8a:ac:17:e0:43:b2:52:a7:97:9c:03:97:1b:f9:e1:cd:df:
5e:69:0e:0f:62:ad:47:78:b3:9c:37:40:86:57:5c:00:5d:4e:
72:68:ab:00:93:13:5c:bd:77:8d:a3:79:19:92:a5:65:86:7e:
ca:1b:51:7b:99:49:a2:b2:d0:ae:2c:1f:d7:d6:3c:92:bf:1c:
2e:15:30:92:bc:ae:f6:08:d2:6d:20:61:82:e5:59:8c:18:28:
6d:f8:f4:dc:a3:54:b7:0f:61:b2:10:39:59:9e:08:4c:cf:d6:
b1:f6:04:cc:f5:13:d0:f0:0c:25:ad:47:38:2d:3c:cb:dd:1b:
21:58:d2:52:0a:1c:c0:7a:c1:14:86:75:ed:3e:fc:82:b3:6a:
4e:08:fb:b1:21:8f:c2:a6:04:ad:0a:63:e8:3d:dd:b3:e2:d8:
24:18:7c:04:4e:1b:4b:e3:08:e0:7f:e9:af:d4:d3:76:ba:69:
b8:b1:94:1d:30:5c:14:90:6b:27:d5:af:7d:6d:8a:8b:f1:31:
0a:d5:29:08:8a:31:db:95:c2:da:84:02:47:43:d5:4e:cb:99:
8f:1a:a4:96:83:95:2b:0b:0e:8e:6f:2f:26:5e:55:03:69:96:
2c:6a:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:51:16 2024 by rpki-client on console-ams.rpki-client.org