Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
File: 0IhbQcqB-T9YPB7KcitQVYKAxZo.mft (raw, json)
Hash identifier: CUEGxSH0ySo1UxcNK5I5IGY0XOd6rh7HnS7NgG5sKCg=
Subject key identifier: 45:1F:AC:A2:53:58:7F:C2:F8:26:44:E6:92:38:77:13:94:65:F4:E2
Authority key identifier: D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
Certificate issuer: /CN=d0885b41ca81f93f583c1eca722b50558280c59a
Certificate serial: 018F306148BACDD13E89CD11E9A38DA0E770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
Manifest number: 114A
Signing time: Tue 30 Apr 2024 19:00:32 +0000
Manifest this update: Tue 30 Apr 2024 19:00:32 +0000
Manifest next update: Wed 01 May 2024 19:00:32 +0000
Files and hashes: 1: 0IhbQcqB-T9YPB7KcitQVYKAxZo.crl (hash: SpicAKcbu9vigWzv7DHryXyM7TIdcF5NReRSxQ5ra+A=)
2: PbD_YpB2I8RPNvIGY_jfvbC9Jp0.roa (hash: wnz+SWvI03910vTJkLnMypz5Xf7O6dK+S9jgdcRzu5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:61:48:ba:cd:d1:3e:89:cd:11:e9:a3:8d:a0:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0885b41ca81f93f583c1eca722b50558280c59a
Validity
Not Before: Apr 30 19:00:32 2024 GMT
Not After : May 1 19:00:32 2024 GMT
Subject: CN=451faca253587fc2f82644e6923877139465f4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:2a:35:46:51:80:9c:3d:84:ab:a1:f2:2b:
30:80:88:13:e7:cf:9b:24:8b:2d:ca:b0:e7:8c:46:
5f:9e:95:c5:3e:ce:20:b2:7b:be:ae:35:2b:58:0d:
37:65:0e:59:96:35:ec:24:fc:8f:98:ad:71:69:c8:
5e:be:96:59:7f:81:bf:b4:c5:45:e4:e7:1a:3f:f5:
33:ee:88:3e:49:af:38:cc:25:d8:bc:40:5b:61:f2:
96:83:70:21:23:0b:54:05:07:dc:e4:29:c5:a6:d9:
53:cd:1f:a2:6d:a6:fb:74:1b:c0:d4:6e:3e:62:9a:
a9:db:4c:cb:cc:4e:36:c9:3f:6b:ad:0a:96:3a:23:
f1:4b:71:be:5b:44:fc:de:93:e0:dd:fd:a3:ec:4f:
97:1c:60:be:cd:d8:71:f0:49:c8:cc:71:3b:24:fa:
dd:48:91:c3:8b:74:a8:32:dc:d8:d7:96:7b:0b:2a:
f3:47:34:8b:30:34:9d:d9:70:ae:23:33:23:24:d2:
7f:99:ae:bd:38:91:b7:af:05:14:09:e9:08:c3:33:
9b:5f:95:e1:ab:06:98:7e:44:2f:c1:7e:58:a9:d0:
88:3d:d5:b6:66:2c:2d:a6:40:98:97:e6:f9:11:41:
84:b7:16:24:a2:98:4c:42:0b:c3:66:65:37:84:22:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:AC:A2:53:58:7F:C2:F8:26:44:E6:92:38:77:13:94:65:F4:E2
X509v3 Authority Key Identifier:
keyid:D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:30:10:d0:23:c4:37:b0:70:2b:9a:41:26:7b:a7:6d:48:32:
fc:fd:31:e2:87:e0:89:54:cc:e3:5a:bc:7a:7f:59:c9:c9:48:
c2:c3:02:4c:bf:64:3c:1a:50:73:92:dd:09:0c:5f:96:28:cb:
7a:c0:39:fb:e7:3a:72:20:45:cb:1f:c9:0f:b3:4d:d9:2e:ed:
40:8f:b7:64:30:48:b2:da:20:56:27:6e:b8:e0:28:ee:db:3c:
ef:95:23:f7:6e:05:a8:35:a7:c9:97:26:43:ed:e1:4e:2a:20:
c8:c6:5b:34:e8:f8:29:a9:b0:3b:79:29:82:70:3e:f4:b1:b6:
c0:02:56:97:15:dc:f2:72:31:b5:4b:22:6b:e7:d4:1e:3b:ef:
9a:ce:24:c4:7b:fa:17:39:d3:c4:31:3d:c4:0d:db:07:c0:4b:
71:1b:eb:77:7b:3b:7c:2f:6e:08:75:1e:14:6f:0d:9e:a4:e3:
89:b6:1b:49:0d:49:62:d4:bf:ce:f7:7d:eb:b0:b4:1d:9d:34:
35:c1:59:09:a4:46:e0:78:f7:12:e2:a0:96:87:0b:26:2f:39:
bf:b0:ca:df:e0:79:a3:47:b9:e2:e6:b4:42:19:0c:1f:72:78:
4b:01:6c:8d:73:e0:8b:cb:a6:f5:1b:8c:c0:bf:c8:f3:63:70:
2c:0a:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:22:54 2024 by rpki-client on console-ams.rpki-client.org