Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: uUbyht0l3InCYr+lhdHUAartQ7A68+6+8ZRsYDmszNE=
Subject key identifier: C3:7C:26:39:A4:B4:95:CA:19:FA:B2:A0:92:B7:4B:1F:34:AA:3B:A3
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 018F3A0BAD6D2F4E8CF6EAF753323327D614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 04D4
Signing time: Thu 02 May 2024 16:03:14 +0000
Manifest this update: Thu 02 May 2024 16:03:14 +0000
Manifest next update: Fri 03 May 2024 16:03:14 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: XytqyxzuaZwD5NZMMluHkLnhXdl0RVavPUQJYjuOAe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:0b:ad:6d:2f:4e:8c:f6:ea:f7:53:32:33:27:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: May 2 16:03:14 2024 GMT
Not After : May 3 16:03:14 2024 GMT
Subject: CN=c37c2639a4b495ca19fab2a092b74b1f34aa3ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:9a:4f:6b:3b:f7:b5:c4:4b:2b:7e:04:eb:
90:5d:2f:20:f1:7a:19:d3:50:fc:76:fd:c9:cc:08:
79:86:0b:f8:60:dd:58:df:f5:3f:8f:44:76:5d:25:
3c:47:9f:12:1a:64:dd:ce:29:6c:3e:ae:bf:ed:e2:
ef:95:7a:ff:86:fe:22:0b:6d:cc:44:89:0e:ab:87:
a7:57:30:f1:02:c4:ed:66:52:96:27:f1:8b:ab:95:
2c:1a:34:93:ed:5c:b7:b7:e6:c2:c3:da:da:5f:da:
ba:dd:43:43:de:f3:96:0c:18:8c:1e:95:5b:51:d7:
b4:16:25:1c:68:11:16:ce:e8:1c:d5:b3:7e:97:2a:
fc:08:3d:ec:0f:5e:10:6a:22:44:c6:97:cc:2c:95:
6c:86:9f:cd:d9:d5:aa:19:cc:61:b9:ee:d4:be:13:
0d:c3:26:fd:d7:34:fc:9b:4b:47:85:d1:26:f9:e1:
32:0f:b9:61:0d:15:6d:da:7c:09:56:7c:fe:43:d0:
18:a4:46:9a:3c:ab:13:3c:88:79:41:1f:90:0d:28:
b0:fd:18:e0:4d:63:88:62:88:38:f0:9b:bc:8c:0f:
91:4a:6b:65:b2:79:ab:56:6e:9b:0c:04:60:79:c6:
7e:c1:5c:4a:f1:a1:9b:54:e8:7c:51:da:a6:fd:b4:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:26:39:A4:B4:95:CA:19:FA:B2:A0:92:B7:4B:1F:34:AA:3B:A3
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7b:99:4d:14:c1:93:2c:14:80:d9:77:4f:a3:1a:c6:53:31:
cd:1b:9b:16:4d:7c:42:29:14:ee:86:86:bf:b9:dd:3e:d1:b1:
be:2c:ba:12:dd:fb:8c:fc:ad:f3:fc:90:f7:7a:19:c9:d7:92:
71:5f:fb:a4:f2:4e:b5:a4:bc:83:3a:da:8a:c3:5f:f0:a5:28:
dd:fe:a4:d0:ed:47:3d:7e:e0:bb:22:1d:ee:50:a1:06:9a:61:
98:84:e0:8e:5b:34:c5:a3:d8:30:ad:c5:df:ae:6d:3d:70:ed:
89:49:32:25:3c:bd:5a:10:58:b4:c7:1d:c6:df:a3:60:2e:d5:
2a:e7:5e:7d:ee:83:da:3d:d4:79:02:38:4f:82:50:b2:0e:ce:
07:e9:9b:40:00:ed:2e:d6:d9:1d:5b:f6:19:3d:40:db:93:6e:
0a:aa:78:d4:76:9d:7b:c4:b7:de:08:87:cf:4f:02:dd:e0:d0:
df:40:0c:ed:06:99:96:ec:85:4f:c9:87:10:ec:c6:66:2a:6e:
a6:d7:44:bc:db:7a:66:d6:76:b0:55:1a:0a:e6:5f:39:a5:e8:
f3:78:fc:53:bd:1c:2f:97:58:48:50:68:27:53:ec:d3:77:e9:
e1:ca:c9:6d:a8:d6:59:11:59:e9:e9:21:a3:16:bb:ee:a5:a0:
40:72:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:26:23 2024 by rpki-client on console-ams.rpki-client.org