Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
File: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft (raw, json)
Hash identifier: oN9Ki2lE3Ivo0q9096wpWBfsBey+Wfelz0yeJlDD0OY=
Subject key identifier: 68:D3:D0:72:41:EB:68:E0:6F:B4:75:65:5C:07:AD:BF:25:0B:E8:5C
Authority key identifier: E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
Certificate issuer: /CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Certificate serial: 018F51373D0386B5B37495333A80EE1BDBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
Manifest number: 0D04
Signing time: Tue 07 May 2024 04:02:05 +0000
Manifest this update: Tue 07 May 2024 04:02:05 +0000
Manifest next update: Wed 08 May 2024 04:02:05 +0000
Files and hashes: 1: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl (hash: CfzpSulmTRywE+TPBFoOp7alS2Ew8qQ2UETk2eaBDwg=)
2: wG_toJzQcsLfnCCECsN6GO00t1k.roa (hash: EJ8D7AOAOxEr6g7iVAABRTKQ41iq0rT+KZMrYp1UHyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:37:3d:03:86:b5:b3:74:95:33:3a:80:ee:1b:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Validity
Not Before: May 7 04:02:05 2024 GMT
Not After : May 8 04:02:05 2024 GMT
Subject: CN=68d3d07241eb68e06fb475655c07adbf250be85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:1b:de:aa:f7:06:4e:c9:1c:b0:c8:f3:bd:
69:4f:b1:8c:cb:de:d6:c7:e5:be:0f:1d:0f:60:22:
8f:48:9a:d0:69:42:31:0e:d3:18:1c:1f:03:35:88:
4c:77:ad:3f:e9:07:00:08:92:f7:78:ec:0a:35:30:
22:a1:16:dc:ec:36:cb:95:75:8e:27:44:d7:9b:90:
aa:a2:e6:50:e0:cc:c2:97:7b:f8:a5:f8:62:ea:18:
8d:83:6f:77:c1:ad:de:95:59:a0:0f:9b:07:af:3f:
5f:fd:23:18:48:ba:58:03:56:58:24:49:4d:d4:a7:
b8:35:73:7f:41:e3:8b:0b:23:49:d7:8f:eb:74:52:
67:8c:ba:f5:89:78:23:08:1f:23:18:6d:de:b9:ce:
97:42:4f:02:69:57:0b:f9:61:47:93:56:4a:c6:05:
19:1d:2e:71:4a:e3:70:fc:ef:88:a3:7a:40:80:8b:
1f:e8:ae:50:6b:c5:14:4c:6d:27:ce:d9:95:c7:24:
1a:25:96:31:34:c5:4d:04:e1:e6:54:9e:91:f3:ef:
29:a1:7b:3a:57:7c:a2:f8:bd:b8:f6:1c:99:f3:ad:
af:00:b7:fa:c3:a1:a1:5b:00:49:42:c3:06:29:cf:
c7:b8:5a:d7:7f:a5:4e:6e:8d:5e:06:81:21:5b:08:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:D0:72:41:EB:68:E0:6F:B4:75:65:5C:07:AD:BF:25:0B:E8:5C
X509v3 Authority Key Identifier:
keyid:E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:81:e5:d9:02:1f:39:3b:b9:b6:21:b8:dd:3c:8a:ac:e3:82:
f1:fe:41:b5:d7:ed:d9:ae:cb:31:de:48:a1:94:26:e3:9e:34:
62:41:6f:f9:20:59:48:44:e7:f7:69:0c:0d:fb:32:8e:3f:4e:
ac:71:42:5b:da:af:2d:ee:15:62:4d:38:86:d2:3b:cf:9f:81:
26:1e:04:cd:4f:6e:06:b3:ee:c7:18:21:40:15:cb:7d:5d:43:
d8:26:d0:85:72:59:86:6f:40:5c:e2:3b:77:36:e4:70:4a:31:
15:68:3e:77:dc:27:84:d2:ed:ed:96:5c:2d:36:f9:f7:72:7f:
94:22:c1:59:34:b2:96:23:1a:2f:a4:2d:89:d4:ea:3f:24:2b:
80:7e:5f:65:27:60:65:22:69:1b:9a:c3:47:ca:ed:ab:87:1b:
ac:dd:bc:03:e8:86:b8:dc:0b:13:b1:66:a5:d7:10:71:7b:71:
17:e5:86:8a:38:67:30:b8:3a:a9:3f:f8:3a:d8:3d:e3:62:a3:
23:24:00:72:64:cc:f4:21:f1:6e:da:8f:64:92:d9:9e:7f:f5:
54:07:21:23:2d:e5:cc:51:df:bb:92:dd:47:2d:99:ec:81:74:
30:d2:d6:ac:2a:61:de:1b:00:2b:f4:9f:29:05:51:e0:b4:0c:
09:1f:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:09:41 2024 by rpki-client on console-fra.rpki-client.org