Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: G3SgkBqYw4IlS2RdH2edTgOX7SMao77hB6zlS/9zFG4=
Subject key identifier: 0B:3A:4E:A4:01:AB:D1:EA:97:52:DD:3B:9C:B9:D2:C0:55:B5:16:E8
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0190EFFC52A44611681270EC26A449B778E5
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 02D2
Signing time: Fri 26 Jul 2024 17:00:04 +0000
Manifest this update: Fri 26 Jul 2024 17:00:04 +0000
Manifest next update: Sat 27 Jul 2024 17:00:04 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: GHxqkdwYbhyOFoMg//R2wY4CDbBKfKuzbP3nqI7AvMg=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: IcmT5Fj0xwuASQA8haLWDlE6BCx4e3mI/lBeiW1GWsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jul 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:fc:52:a4:46:11:68:12:70:ec:26:a4:49:b7:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jul 26 17:00:04 2024 GMT
Not After : Jul 27 17:00:04 2024 GMT
Subject: CN=0b3a4ea401abd1ea9752dd3b9cb9d2c055b516e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:de:15:4c:96:32:bd:3d:73:bc:32:1d:68:
ed:fa:7d:e9:6b:3f:b1:f0:7c:47:69:09:a2:98:de:
4f:86:8e:d7:cc:ec:36:5a:17:3f:72:ab:9e:a0:20:
d9:59:d5:5d:b3:4c:85:1b:5c:fa:cc:69:28:0d:18:
b3:d9:3b:0c:3b:90:49:b0:39:f4:fd:f5:b2:96:24:
3d:bf:ec:c7:c8:7d:f1:5a:20:6e:e3:f0:58:bd:3d:
92:a7:01:1f:74:48:8b:ca:80:1e:37:b1:d5:59:27:
1b:85:03:a9:59:5e:fa:6b:b1:e0:76:d0:5f:b4:07:
07:13:f7:7d:68:6a:7b:69:88:48:22:52:d5:ca:9c:
0b:cb:f3:17:2d:b7:5d:df:1b:69:95:61:e5:66:ec:
5f:76:9b:d8:23:d3:fd:4f:10:66:b6:63:1b:3b:a2:
ae:0f:54:08:15:3f:b0:25:98:f9:d1:b4:86:f0:bb:
c2:86:d9:69:de:9c:de:1e:66:76:bb:89:e1:a1:cf:
a9:13:44:ee:12:10:69:ba:ae:12:ff:98:62:74:fd:
7a:8a:33:1f:f7:06:f0:4e:30:01:97:db:56:44:79:
55:ec:41:f0:dd:56:58:9e:6b:09:1b:1e:35:93:95:
d1:31:68:79:2b:00:c7:75:6e:6d:cb:1d:9e:05:bb:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:4E:A4:01:AB:D1:EA:97:52:DD:3B:9C:B9:D2:C0:55:B5:16:E8
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:1a:9e:de:ce:68:b2:b8:80:d5:23:ab:b4:be:c5:e5:b9:
33:be:34:77:d9:3c:bc:cc:0a:3c:70:05:1b:32:bd:e5:13:7f:
cc:8a:4e:0d:fc:2b:82:46:d1:f2:b8:b8:7b:18:47:ea:6a:a3:
18:dd:32:06:83:40:e8:b3:bd:61:a6:9f:5f:86:df:ec:3e:b6:
51:3a:56:1d:2e:83:7a:cb:cd:1c:d6:db:a6:60:1d:87:cb:e7:
08:18:e6:1e:4e:09:96:98:ba:f9:4c:24:5e:20:95:39:c1:51:
5a:9b:99:32:29:7a:ef:28:12:51:24:81:8c:56:50:ab:c1:b2:
12:28:3c:70:b5:a4:7f:bf:24:da:f6:c4:77:fe:88:c2:9a:0a:
3b:35:3e:15:e8:bb:ab:8d:2b:99:6b:e2:55:36:c6:48:97:2d:
c1:a3:aa:31:90:37:43:d5:31:94:a4:c4:bc:7a:68:51:c9:0b:
41:9f:b1:98:d0:bd:0c:64:ae:7f:a1:dd:9b:f8:79:c1:c9:e2:
41:2b:a7:a3:6d:14:a4:1b:ce:5c:c5:a2:ee:df:d6:0a:37:1f:
ec:81:32:9e:89:8d:c7:38:5f:82:9a:8b:9e:10:de:16:96:4c:
3d:a9:92:1a:32:80:06:2b:2e:66:94:60:f5:42:ba:a1:76:40:
eb:6c:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:27:42 2024 by rpki-client on console-ams.rpki-client.org