Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: T+6umAqjHpRLsKPbXzYPtmQSQdiP6MPoHsdZ4Uw0FKw=
Subject key identifier: E3:97:F4:5D:D0:EE:0E:0D:5A:59:5B:09:9F:B6:9A:59:7E:CB:2D:A9
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 018F95A904140AFB33C8F961D9A6A9449BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 03E5
Signing time: Mon 20 May 2024 11:00:32 +0000
Manifest this update: Mon 20 May 2024 11:00:32 +0000
Manifest next update: Tue 21 May 2024 11:00:32 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: phA1cK4S1mHXkhNzEx/51hNqIDZjOFqRgQXU1/OdYcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:a9:04:14:0a:fb:33:c8:f9:61:d9:a6:a9:44:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: May 20 11:00:32 2024 GMT
Not After : May 21 11:00:32 2024 GMT
Subject: CN=e397f45dd0ee0e0d5a595b099fb69a597ecb2da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:cb:b6:9b:03:73:c3:b0:2a:b7:6d:16:64:
e1:bd:75:a2:17:9d:48:d9:76:84:00:c2:53:a8:3f:
ec:8e:f0:51:94:4d:b4:7e:8f:75:6d:8d:6b:65:ae:
39:88:e2:1b:3e:0e:e1:c4:a7:62:e3:4a:75:c6:24:
00:6e:e2:07:80:70:ac:70:95:e4:b7:22:87:ac:a8:
a4:60:e4:b7:15:82:63:b3:16:26:3b:6b:13:7a:10:
49:b7:67:73:03:5f:6f:0e:de:27:95:2b:ce:84:9a:
1d:ec:71:28:3f:00:69:17:80:00:7e:c4:c4:26:a9:
ca:2f:c8:b0:f5:98:8e:03:b3:32:3a:29:90:7f:0c:
0e:6c:e4:cd:55:77:9a:1e:6a:52:84:38:42:02:99:
fd:3f:f0:35:fc:02:15:27:70:45:9d:47:e9:c7:8b:
57:19:55:cb:da:15:bd:dd:fb:1f:89:07:63:94:70:
f6:47:62:9f:28:47:da:6e:03:d7:c9:a8:95:52:85:
23:73:47:d8:72:9e:06:0b:48:ae:14:5b:9a:86:ac:
ff:a7:5e:ed:9c:a4:31:79:b4:68:de:b4:fa:0f:2f:
17:a7:45:8e:e0:b3:4e:9b:22:24:b0:d3:06:82:bc:
2b:07:85:d0:ae:e7:31:a6:ae:48:fd:0a:f8:88:7a:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:F4:5D:D0:EE:0E:0D:5A:59:5B:09:9F:B6:9A:59:7E:CB:2D:A9
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:d2:8f:ee:65:80:8d:b0:50:5c:31:65:b1:3a:05:1b:ae:
06:7c:b1:09:de:62:58:4b:d2:2d:64:c3:70:b1:78:5b:a6:ac:
43:80:c1:4a:1e:2b:23:77:ff:de:55:af:88:72:37:94:47:62:
70:a7:61:0d:02:b2:b8:92:d5:c4:58:ae:b0:c8:c8:b1:d2:98:
ab:e4:6d:90:39:8e:dd:5c:f1:41:f5:6f:82:c4:47:d9:5a:23:
df:ab:9d:d4:6e:ae:86:f5:80:9a:24:0c:75:ea:1f:88:64:f5:
6f:7b:90:01:89:33:8a:b0:dc:06:5b:31:a6:6b:50:72:ee:2b:
8d:64:d3:20:1b:b5:b2:8a:ff:be:ee:c8:37:14:3a:43:61:5e:
c2:d3:d0:f5:aa:18:ae:8e:26:3e:eb:a6:67:d2:fa:bc:4a:2f:
4e:a5:f0:07:d9:c0:dd:70:cc:db:cc:86:90:ee:09:e6:99:a9:
ef:de:8b:29:d6:4e:14:5a:68:62:66:6e:d6:e0:0d:01:a8:26:
cb:bd:7a:cd:b3:45:35:f3:31:bc:e5:61:8a:49:73:82:4c:bb:
d2:01:b7:85:86:0c:d1:34:13:3f:18:e2:1e:2c:67:1a:85:54:
78:fd:f4:7a:ca:cb:8d:ba:84:be:db:db:30:8b:3e:12:35:96:
e6:37:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:07:01 2024 by rpki-client on console-ams.rpki-client.org