Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: wZRLVw9KLp0kejwmVxW77thapUxmp15/Bu8yeVggDEM=
Subject key identifier: 0D:80:1D:6A:43:FF:48:A3:4A:6F:D5:07:66:F6:67:60:CD:64:A1:88
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 018F22385D13C991BA3FCA5D2FDAF0F53AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 080F
Signing time: Sun 28 Apr 2024 01:01:09 +0000
Manifest this update: Sun 28 Apr 2024 01:01:09 +0000
Manifest next update: Mon 29 Apr 2024 01:01:09 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: xLdns6At3lVvwTJxc+3CRiaKoqrMnUMqcZ+MI6nucxU=)
2: ANpQ1Omro56EO2uKdMmEfREStF4.roa (hash: bHeVP0U3ciLYtu9q1BsNC/Ih45s0waOT7TV3lEXyjEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:38:5d:13:c9:91:ba:3f:ca:5d:2f:da:f0:f5:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Apr 28 01:01:09 2024 GMT
Not After : Apr 29 01:01:09 2024 GMT
Subject: CN=0d801d6a43ff48a34a6fd50766f66760cd64a188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:70:40:84:96:1f:0a:5a:bc:16:ce:1e:c3:
c4:77:bf:79:b4:5f:95:47:69:89:aa:dc:18:98:0d:
f9:f7:10:db:b6:a7:98:23:8f:55:15:74:e8:85:8f:
23:4d:fa:ad:ac:fd:c8:56:19:cd:89:f4:cc:27:4f:
95:6b:eb:23:54:d7:1c:8a:92:3b:7e:ef:94:ea:3a:
f3:db:33:45:8d:2f:00:81:3b:d5:a9:08:05:02:ca:
32:f1:4e:64:64:1a:38:cf:bc:81:38:06:2f:8f:5c:
04:49:c4:ad:58:6e:e6:9d:7b:bd:8c:da:70:5a:a7:
ee:da:22:5c:3c:1b:73:0e:ad:31:e8:41:30:74:6d:
08:d6:bd:ef:3f:c4:e0:c3:93:05:d7:3c:0b:e8:57:
6d:d0:67:97:a6:8f:47:04:01:46:2e:ca:7e:59:c5:
89:06:ee:bb:8e:74:e3:b0:38:4c:ab:3f:e7:70:e2:
1b:27:dd:0e:f4:90:c0:5d:f3:da:37:7a:b1:21:f5:
19:f3:f3:7d:9f:40:90:85:89:b3:be:a2:42:6e:d6:
a5:2d:b1:e3:94:8d:9e:64:42:ac:69:8e:1d:7b:05:
24:73:a5:bc:c4:53:22:b8:47:db:d6:b3:18:c0:be:
6f:5f:a3:eb:43:96:b8:89:42:21:f5:0c:73:43:80:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:1D:6A:43:FF:48:A3:4A:6F:D5:07:66:F6:67:60:CD:64:A1:88
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c1:a4:85:07:53:28:8a:80:2a:b3:c0:6d:25:04:b5:f9:e9:
c3:e0:06:f2:c8:f7:3a:ad:df:72:c9:38:c9:87:8d:eb:9b:d3:
b5:ac:d6:5c:30:30:2c:57:7a:3a:93:9c:5e:dd:06:d6:2b:ef:
d7:ad:1b:7b:5f:84:e2:b4:d0:54:f8:69:49:98:87:c6:28:cb:
9b:d4:54:94:9e:3f:d6:60:26:78:fe:2b:cb:8b:f9:b6:af:11:
9a:ce:02:aa:3e:2e:7c:60:6b:ad:f4:7f:0b:bb:ae:8b:61:70:
8b:1b:ba:c1:3d:85:fa:24:07:5c:f1:2e:b7:db:47:db:29:0c:
41:2d:46:ff:88:a3:e3:5d:cc:f5:19:bf:cb:53:19:95:43:96:
55:9b:fc:3e:da:2f:10:64:25:08:4a:2e:5a:bc:18:e5:f4:99:
f4:75:d0:24:a3:ab:54:43:98:b6:ff:69:43:19:df:ff:fa:06:
09:5a:94:60:a8:bd:f6:f7:91:41:78:d9:a9:c9:93:a5:20:05:
e4:e8:ea:f0:9b:9b:f4:64:7f:ea:1d:e1:4d:d1:da:cb:1e:4f:
4c:08:ff:42:38:9f:38:03:e1:ef:d0:3f:74:5f:c9:60:8f:e0:
3f:db:9f:5b:2e:09:3f:f8:31:77:00:b2:5e:9f:61:40:56:7e:
4f:85:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:25:55 2024 by rpki-client on console-ams.rpki-client.org