Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
File: ifXOD-etOrIG4QB6C2UwALhXfn0.mft (raw, json)
Hash identifier: FW2fFdU/onBacUCjQEa0AfqUDx+e99NP2aHLI7lMWMY=
Subject key identifier: 4A:45:96:40:3F:EB:C3:C2:AC:ED:7A:58:36:37:0B:74:1E:3A:39:0F
Authority key identifier: 89:F5:CE:0F:E7:AD:3A:B2:06:E1:00:7A:0B:65:30:00:B8:57:7E:7D
Certificate issuer: /CN=89f5ce0fe7ad3ab206e1007a0b653000b8577e7d
Certificate serial: 018F87499E71BCA68D2BF51740C86960149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifXOD-etOrIG4QB6C2UwALhXfn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
Manifest number: 020D
Signing time: Fri 17 May 2024 16:01:39 +0000
Manifest this update: Fri 17 May 2024 16:01:39 +0000
Manifest next update: Sat 18 May 2024 16:01:39 +0000
Files and hashes: 1: ifXOD-etOrIG4QB6C2UwALhXfn0.crl (hash: EnGnVN/rfKcdIhjlNkbqDxLpipoNguLcTjpBowA2mEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifXOD-etOrIG4QB6C2UwALhXfn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:9e:71:bc:a6:8d:2b:f5:17:40:c8:69:60:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f5ce0fe7ad3ab206e1007a0b653000b8577e7d
Validity
Not Before: May 17 16:01:39 2024 GMT
Not After : May 18 16:01:39 2024 GMT
Subject: CN=4a4596403febc3c2aced7a5836370b741e3a390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:4e:9d:5a:d2:56:4b:ed:ef:6f:f8:9c:cd:
22:d3:25:16:de:1f:bf:2e:1a:a4:e8:08:79:36:5f:
cd:cb:9f:7d:d0:49:84:52:27:ca:ec:05:49:ed:91:
12:24:f3:21:d5:c0:4d:dc:50:e1:7b:d9:cc:6e:5c:
23:5a:6c:af:2e:fc:0f:b0:d4:7b:90:bf:09:85:dc:
22:ab:44:9b:08:c5:90:45:b0:b8:63:bc:25:26:66:
67:df:7f:2e:e4:d1:08:2b:04:b5:28:a7:a2:07:0a:
4b:36:30:22:ae:7a:87:f5:87:ea:37:50:3a:e1:ec:
6b:d0:1f:53:ee:ef:ce:4e:54:c3:6f:67:16:0a:9d:
4e:2e:d5:94:68:b8:4c:58:6c:73:91:31:89:74:fe:
1b:9a:a4:f8:3b:66:6a:4b:53:52:e2:78:e4:71:24:
2c:c6:ee:76:38:bf:3f:b1:82:f5:00:5a:ac:10:55:
b7:6d:fd:a7:cf:21:2b:d9:0f:86:54:da:fc:c2:0f:
c7:a2:74:b4:a4:29:14:d3:0b:bf:21:c8:43:ad:14:
df:17:e9:bd:ed:bc:53:62:8b:05:26:20:7d:f1:9c:
20:6c:b6:fa:1b:d5:8c:4f:82:79:45:7b:f8:26:94:
2c:01:70:bd:bc:33:53:a9:48:eb:0f:39:fe:f8:81:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:45:96:40:3F:EB:C3:C2:AC:ED:7A:58:36:37:0B:74:1E:3A:39:0F
X509v3 Authority Key Identifier:
keyid:89:F5:CE:0F:E7:AD:3A:B2:06:E1:00:7A:0B:65:30:00:B8:57:7E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifXOD-etOrIG4QB6C2UwALhXfn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:3f:56:ad:90:5f:4e:f8:5f:ff:85:0a:4b:5e:39:c5:10:
b3:d9:14:95:c5:cd:0b:35:61:6a:90:ab:f2:25:f5:6d:88:7d:
18:c7:62:e5:34:23:7a:26:30:8b:6c:07:c3:c2:b8:a9:5e:d9:
5a:74:27:c1:7c:cb:ec:0b:cf:15:4b:1f:9a:40:22:ad:fa:6b:
d6:d3:ae:a0:38:f7:d0:b0:8d:9b:ec:45:43:0d:bb:1f:7f:81:
e1:da:b8:24:8d:7b:4e:6b:a7:85:e0:c6:f7:3e:49:f7:05:04:
bf:d2:6a:8e:89:9a:c4:b8:4c:d8:83:04:b1:57:a5:71:e0:4f:
17:99:8f:04:b9:5e:27:15:fd:ee:d4:1d:e1:86:6a:90:27:ad:
ac:da:8b:b6:2c:1c:0d:f1:d2:af:86:aa:a3:0f:91:61:49:4f:
7c:8d:11:03:ce:95:fa:02:8f:82:27:63:22:b6:41:95:37:8e:
4b:34:49:7b:17:39:39:95:6e:52:36:d5:db:d7:d8:ad:d9:76:
84:e4:6d:fd:ae:d0:de:26:26:da:5d:1f:9b:18:74:74:0b:2d:
a9:f1:8e:af:08:dd:d2:1d:d6:7c:2e:e0:e5:71:dd:9e:7c:54:
2a:66:ba:a5:94:72:60:62:cf:fd:9d:07:b2:e8:d3:a0:f1:d5:
86:9f:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:42:34 2024 by rpki-client on console-ams.rpki-client.org