Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: 1EJ20fcAxK2BiDWbJ8xGnIkST5gBNhlklYnkzzWEIow=
Subject key identifier: 8E:76:07:81:CF:C0:F6:E8:A7:70:8A:8B:38:4A:6A:1D:A3:C7:9D:D2
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 018F20F0B687C4EC69796FC344F1472B4864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 05BD
Signing time: Sat 27 Apr 2024 19:03:17 +0000
Manifest this update: Sat 27 Apr 2024 19:03:17 +0000
Manifest next update: Sun 28 Apr 2024 19:03:17 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: V751UQO0G5M/BQHbEWwU7pO+GwRCjdJX+UMvMcb0JVs=)
2: SSxz9SEN53e3bjwMAXNfyBBlQzg.roa (hash: XywDaRUvHGTmBKjdWYw8syMgm6fj1DC54+QKqotQuJc=)
3: _H1VHJMW8LjxUD8_c8r7yHlQQ9o.roa (hash: oVEyCpzw0JEUkSRbBRsXqDnuA/04Sy9kT17G6tXEug8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 19:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:f0:b6:87:c4:ec:69:79:6f:c3:44:f1:47:2b:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 27 19:03:17 2024 GMT
Not After : Apr 28 19:03:17 2024 GMT
Subject: CN=8e760781cfc0f6e8a7708a8b384a6a1da3c79dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:85:1e:b0:ec:ac:22:e3:83:cc:1d:64:2f:
4e:5a:0c:4b:1a:66:b7:79:64:80:a8:2d:39:45:69:
5d:6d:0d:b4:e4:86:9b:e3:31:52:39:de:4b:c2:fd:
da:a7:44:8f:58:ac:f1:08:7d:71:00:2f:cb:e6:19:
7f:df:91:79:83:53:e1:18:9d:4c:09:37:4f:13:5b:
ed:77:2c:dc:03:25:d8:86:e4:48:4a:1f:3c:53:f6:
07:e1:c8:8c:d7:53:bc:7d:16:a3:8f:e8:36:10:76:
33:85:43:e7:7e:84:e4:da:50:3e:4c:d8:9b:8c:3e:
69:7c:1f:a2:19:a4:dc:14:2a:d0:1e:57:96:a0:17:
64:3b:31:a9:32:a3:29:29:6e:bd:89:74:ef:28:ac:
85:a8:ef:1f:00:f6:07:cd:fa:f6:43:42:c9:36:67:
94:91:ea:0f:1a:20:12:b2:3f:d0:73:e2:7c:1d:25:
5a:af:b9:b5:f6:3a:be:62:69:e6:da:34:03:e3:77:
7f:39:ed:48:5c:33:42:b4:25:a7:3d:d0:37:7c:a4:
4d:3b:fa:7e:b2:e8:11:6f:11:a7:29:93:ae:d9:75:
57:7a:27:22:bf:56:87:48:b0:6c:ac:35:4c:f2:5d:
71:aa:14:6a:fa:28:17:6e:07:52:bf:95:29:de:69:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:07:81:CF:C0:F6:E8:A7:70:8A:8B:38:4A:6A:1D:A3:C7:9D:D2
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ab:23:75:42:0f:c8:20:8a:41:9c:25:79:02:91:28:08:80:
bb:db:64:9b:2f:16:c0:56:54:e8:f3:cd:d3:4f:e7:5d:09:87:
6f:c1:ac:03:1e:6f:23:52:9c:c9:f2:ca:1f:f5:1b:70:d1:6f:
b9:ef:fd:20:96:d1:65:2b:64:5e:de:38:a9:e5:f3:f9:1d:17:
14:e4:d4:84:26:05:e3:44:72:ee:d5:34:08:c8:94:f1:79:be:
15:df:5a:38:d6:92:b8:18:ca:f6:f4:c4:92:75:2c:7e:b1:fc:
ba:47:c4:b0:7a:1e:f6:3c:68:d7:13:b4:fc:50:45:1b:cd:50:
ef:64:52:a1:3a:ea:b4:5a:5c:40:a2:72:4a:3a:a2:81:b9:3e:
82:0c:05:54:c9:71:e2:b3:19:b0:49:92:5e:a6:5d:33:0a:ab:
31:92:55:74:46:97:ff:90:4c:66:52:76:0e:42:c2:8c:7f:c6:
75:ae:9f:d2:77:e3:1e:dd:d8:a0:2b:c2:50:0a:c0:90:73:6f:
e0:b4:1c:57:50:84:23:75:2f:21:cc:2a:10:31:a2:c4:32:68:
80:76:ac:70:e3:3f:9e:a0:c0:fc:87:20:27:a2:0e:ab:60:7a:
5f:83:c8:1c:ec:0e:be:7e:4e:3b:68:81:8d:ef:2e:82:30:2b:
9b:91:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:05:41 2024 by rpki-client on console-ams.rpki-client.org