Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: l7SRXImZIj1BmA1DCqqjzMUaiRrEPVL6Dee5VyDtrRM=
Subject key identifier: 08:32:9E:0D:ED:35:21:EB:F1:A7:AC:4F:7E:0B:3A:1C:7B:4D:CD:32
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 018F1F6E5B0AC237D163DB6651C1B2E094AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1141
Signing time: Sat 27 Apr 2024 12:01:16 +0000
Manifest this update: Sat 27 Apr 2024 12:01:16 +0000
Manifest next update: Sun 28 Apr 2024 12:01:16 +0000
Files and hashes: 1: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: E2+bUzKKRq3Fv8w6YV/rfdr+IbjI6DKZD1rECJEXsvA=)
2: I2NPlwydWTmxtRVP34z3UdZgYmA.roa (hash: Z2mCxU62fX1QKZbzZSzPn6/OxyMUCkie38R31rhPB0Y=)
3: fW_ac2HrHs2dR2iMtoAg-dRczd8.roa (hash: GWhuecpUR7ZdSte9BhR7+382/ZsxfmeF3SkAkuYacfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:6e:5b:0a:c2:37:d1:63:db:66:51:c1:b2:e0:94:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 27 12:01:16 2024 GMT
Not After : Apr 28 12:01:16 2024 GMT
Subject: CN=08329e0ded3521ebf1a7ac4f7e0b3a1c7b4dcd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:5a:b1:55:bd:96:84:a3:61:05:0f:df:51:
ac:18:cd:4f:36:d2:af:33:d9:b0:2d:12:99:5f:69:
ca:57:c9:13:94:8f:95:05:a3:2c:2f:09:e5:f6:33:
a2:99:fb:a3:16:4c:ec:0f:72:f1:38:b6:49:2d:eb:
90:63:9c:ad:27:bd:bc:79:44:88:15:43:eb:d1:2c:
d5:d3:4e:d3:c2:3c:36:9a:4e:8d:dc:02:f9:7d:59:
f4:f1:ad:04:94:23:d5:7a:ba:48:c9:c4:fc:12:9b:
07:6e:39:ca:9a:97:ff:df:80:26:26:39:f9:2f:4d:
2c:4e:0c:91:79:70:66:37:f2:bb:ac:23:19:e3:e1:
b5:cf:04:09:3b:44:d3:88:ff:5a:8d:88:55:fb:c6:
63:2d:7a:da:0e:3d:27:23:ff:81:be:44:7e:87:c7:
67:93:51:2b:ed:e4:0f:f3:81:e9:66:35:20:38:e9:
7a:57:e6:84:23:e4:7a:70:14:22:cc:f2:4b:6d:e3:
d4:51:e7:14:d1:b6:13:ae:37:33:89:ff:64:4c:90:
15:66:0f:f7:2c:91:1b:2f:0e:d0:80:17:03:6e:71:
b8:69:8b:8a:5f:db:f6:4c:a8:b9:c0:df:e2:bf:83:
a8:39:e1:ca:52:1d:6d:b1:81:c1:62:b5:9b:c4:6e:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:9E:0D:ED:35:21:EB:F1:A7:AC:4F:7E:0B:3A:1C:7B:4D:CD:32
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:55:97:09:ec:81:29:45:79:9d:b8:70:25:c5:22:f9:a9:b0:
18:b7:7a:50:03:59:62:fc:54:4d:a5:b7:73:0b:bc:30:17:a7:
ba:48:c8:21:31:89:45:ff:6c:ad:71:cc:3b:b3:73:57:27:ff:
b4:65:07:27:af:8a:88:09:07:be:7e:53:a2:ab:e5:d3:d3:20:
5b:49:2b:d2:0d:c9:b1:4b:fd:2c:41:7a:d6:ac:2a:38:a6:61:
83:7a:2b:89:21:6f:9d:3a:88:63:e2:a3:2e:46:7d:2b:0b:08:
74:3f:4e:f6:23:e1:0a:9b:66:23:52:85:d5:23:f8:38:f5:9d:
24:da:fa:9e:f5:ed:98:fb:2a:95:a1:92:57:b6:ad:0a:e8:90:
5c:26:95:3e:4f:a4:98:a8:39:aa:b1:e3:c7:26:48:ab:ec:56:
46:2d:fb:ba:52:1e:2e:0c:29:e6:7f:dc:dc:16:85:9c:b0:4d:
39:63:fa:eb:4e:be:07:c7:98:f4:ce:b3:78:42:7c:f0:aa:40:
84:72:1e:73:f3:d1:62:bd:0a:1e:fb:75:9c:47:9e:13:6d:b2:
a3:79:d4:da:94:81:2b:c5:12:ba:f5:4e:60:28:12:8f:52:13:
ca:b7:4e:1c:f9:0c:29:da:ef:fd:b1:3c:2a:c0:9d:ed:4f:00:
74:99:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:04:28 2024 by rpki-client on console-ams.rpki-client.org