Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: jjlicf/RIAKsqIyMMIBVarduxpMgwn4YXv9/LnS1vpw=
Subject key identifier: EB:BD:59:CB:85:39:78:40:20:4B:2A:2C:CE:D8:87:C1:43:71:3F:36
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 018F1597B712E067DED8A687E38D5C2EC4C0
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 01A2
Signing time: Thu 25 Apr 2024 14:10:13 +0000
Manifest this update: Thu 25 Apr 2024 14:10:13 +0000
Manifest next update: Fri 26 Apr 2024 14:10:13 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: puPkQc9WgJ6ODTIBs/aLIaKnIqhtjtzvX3FvE95fpKQ=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: XQSFQUMlaDHv1aEUW9lqMWA2KcUZRgYB4UUKul2dUQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:97:b7:12:e0:67:de:d8:a6:87:e3:8d:5c:2e:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Apr 25 14:10:13 2024 GMT
Not After : Apr 26 14:10:13 2024 GMT
Subject: CN=ebbd59cb85397840204b2a2cced887c143713f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:d1:2b:d6:fa:ce:f7:9f:53:2c:c1:db:bf:
b6:13:c4:30:2a:9c:4d:5a:bc:0a:58:d7:76:91:a5:
a5:05:0f:8a:f9:a9:d6:57:e1:48:33:2b:fe:bd:29:
55:64:94:06:aa:fc:b5:50:7d:a3:2c:b2:f0:09:06:
79:03:ec:6f:9a:06:fa:07:8d:e6:37:b6:e7:78:11:
79:7d:1c:b6:78:87:f2:2b:04:39:ab:95:47:05:80:
65:a7:9d:5a:45:52:42:71:b5:f4:84:a9:8f:fc:b2:
03:fc:00:9f:71:98:41:6a:c3:2c:60:c4:dc:40:23:
dc:25:58:0b:99:76:b2:18:ee:38:c8:9d:7e:73:7f:
e2:6a:cd:bd:d8:b2:97:64:7b:ae:14:0f:cd:56:44:
9f:71:bd:89:79:aa:72:86:2b:fd:8b:d5:80:69:65:
88:d5:2a:62:54:4f:c0:e5:1a:c8:9f:bb:77:57:46:
a6:cf:e9:64:6d:b5:e7:70:84:78:d9:96:16:a7:49:
78:af:0c:6f:44:10:45:13:e1:25:8b:56:05:98:1e:
f8:98:08:ca:e2:7f:77:4e:db:8a:4b:58:dc:97:2c:
82:c2:76:ce:5e:9a:dd:07:ee:2e:6a:ea:0d:dc:48:
23:ef:b1:b4:80:04:29:5c:51:43:2e:09:1f:99:96:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:59:CB:85:39:78:40:20:4B:2A:2C:CE:D8:87:C1:43:71:3F:36
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:dd:11:33:34:61:11:c1:37:d4:27:9b:1e:61:fd:83:40:
78:b1:cd:07:99:27:74:41:ee:36:1f:82:75:18:9e:89:88:d5:
11:1c:9a:9b:00:7f:30:e8:56:fa:c8:31:ae:03:b0:93:db:56:
f4:c1:32:36:44:0d:81:d7:4e:8d:ca:2f:87:36:39:db:55:90:
51:d1:a5:9e:b4:ee:d9:51:72:4b:0e:bd:42:57:2d:73:f1:dc:
72:d7:98:eb:78:7d:b0:fd:93:8c:4e:db:3a:72:af:52:d0:6e:
45:0d:db:18:2c:c0:97:58:8d:31:c0:d0:bb:11:9b:31:0e:50:
39:23:46:65:5f:a4:9e:5a:b4:0d:fc:15:55:53:ad:5e:80:24:
f4:14:ea:75:75:a2:3a:d2:a1:24:e6:2f:9e:79:53:74:f7:c2:
22:ec:ea:c9:c4:f1:0b:ad:d5:13:d6:ac:cf:f9:93:24:17:a9:
d1:15:5f:0a:e4:b7:ca:49:47:f7:6f:53:d8:fc:e6:8e:30:1a:
31:de:e3:1c:cb:98:66:d5:ab:cd:6a:f8:45:bc:45:44:33:cc:
1b:61:0e:0b:5d:e2:54:72:a4:5a:5a:75:78:5f:c3:e6:1e:a6:
d3:ce:3e:69:88:dc:b3:c7:64:b5:a0:d4:73:9f:de:9b:c0:ba:
b9:97:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:04:54 2024 by rpki-client on console-fra.rpki-client.org