Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: JiCT4r1aiJ0M4ANiEE4VlcY1XnT33GfI88sk7syGYiY=
Subject key identifier: 73:C9:13:2C:AD:AC:42:4E:DB:AC:A2:E3:A7:06:87:92:C0:46:D7:99
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 018F362DDE04E7B06A4F3882A90BB3750D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 0FDA
Signing time: Wed 01 May 2024 22:02:06 +0000
Manifest this update: Wed 01 May 2024 22:02:06 +0000
Manifest next update: Thu 02 May 2024 22:02:06 +0000
Files and hashes: 1: 1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa (hash: CSr1+30CH2xayg/63FW5Tw8+XMHhWUxfK6+VRMVXtSw=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: aupLloFSj2hAWVBKrWYSqzD0Kyhs/+yJzwsBm7p6k4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2d:de:04:e7:b0:6a:4f:38:82:a9:0b:b3:75:0d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: May 1 22:02:06 2024 GMT
Not After : May 2 22:02:06 2024 GMT
Subject: CN=73c9132cadac424edbaca2e3a7068792c046d799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:ba:28:f8:c0:41:4d:d7:7a:fd:39:17:25:
11:bc:01:3e:4e:0c:55:6a:a9:55:db:1d:e0:a4:42:
87:74:f8:48:bf:79:3e:45:fe:07:63:fc:49:01:b1:
d7:75:78:08:3f:24:9d:c7:0e:1e:0f:bd:89:74:3a:
4a:82:69:e8:f5:bd:83:49:83:59:4e:77:d4:53:6c:
96:0b:b2:8d:e0:45:2d:fe:23:0d:19:42:d9:ee:ca:
13:02:56:2f:1b:0b:98:e9:3c:cd:7c:4a:6f:5a:b9:
13:2a:bc:ec:84:9b:d4:29:90:d0:f4:ce:ff:86:38:
6e:f4:8d:09:0a:80:13:7d:d2:25:c7:e6:15:6f:1b:
94:d0:8b:e0:1b:e9:51:07:21:e0:2a:f6:fd:c2:12:
81:95:34:b0:4d:32:c2:7b:29:74:17:c8:01:29:1e:
08:37:d3:ff:54:ed:b0:76:3e:bf:40:8e:1b:cd:f9:
09:4f:a3:28:2f:ba:a3:aa:7e:d2:42:91:78:3a:d4:
53:7d:fc:fd:98:43:0e:95:ec:0c:83:1f:d2:1e:98:
30:86:fb:ca:63:ef:7a:84:11:39:b3:64:3f:9a:ab:
41:f2:cc:94:d7:85:59:3f:27:b4:f9:62:df:28:e3:
0c:f7:1f:5d:e8:51:69:f5:4d:8e:db:6d:31:83:9f:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:13:2C:AD:AC:42:4E:DB:AC:A2:E3:A7:06:87:92:C0:46:D7:99
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:71:f0:2c:42:3f:fa:6b:31:c6:bc:f7:fb:73:86:4b:2e:
91:08:e5:97:39:20:ab:91:4a:81:45:d0:de:b4:72:21:ae:be:
21:1b:20:dc:8b:0d:dc:f4:79:55:af:74:e0:00:33:3a:70:46:
4a:61:5b:b1:91:e0:3b:d1:86:12:07:f7:d7:a6:45:a8:af:5b:
da:a5:d5:44:08:89:fc:71:a4:81:2a:fb:b9:ee:8d:6a:2b:bc:
fd:d0:8b:70:07:ed:46:c6:f8:33:3c:dd:ea:f8:76:b0:6a:d0:
82:63:95:72:39:8c:5c:97:a6:5b:1e:6a:6b:9d:a1:c3:7e:d5:
96:e8:94:1b:29:75:3a:52:93:9c:a9:7c:63:c3:0a:14:01:bd:
86:4c:8d:3f:d9:7b:15:2d:ca:8e:19:f5:f4:39:30:69:35:5d:
3d:4c:d3:13:eb:c1:67:db:3e:91:cd:6e:ea:9b:83:4a:40:be:
95:dd:3f:f9:db:14:a8:c4:a8:3c:ae:2a:8c:54:db:27:92:d5:
08:35:58:c9:78:10:3e:23:97:13:c3:0f:ec:ab:8a:d7:64:bc:
c4:04:8d:e9:83:99:46:f4:c5:ae:3e:1e:70:53:da:e3:10:2a:
9a:63:19:57:c2:b4:88:06:81:0e:ad:db:40:b6:99:6b:04:39:
e4:c8:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:12:31 2024 by rpki-client on console-ams.rpki-client.org