Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: 4IXi5LQqVLajQmGL7eMTLpgXeARwZj5GKupG389O0MI=
Subject key identifier: F1:7C:B4:5B:FA:8E:B6:88:5D:93:1B:19:18:C2:27:0D:6E:AB:D7:CC
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 018F8FA6C56EE884EF018226C91FBAC27490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 019A
Signing time: Sun 19 May 2024 07:00:22 +0000
Manifest this update: Sun 19 May 2024 07:00:22 +0000
Manifest next update: Mon 20 May 2024 07:00:22 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: zZ0satbgtofscAIwjPKNh5GmUvv3OrkwtHSE3TSB4ek=)
2: UD67o1HhlLWeIcw0bTjX3trp_CI.roa (hash: OUPpZro8aOFeFisRMTIfLNsk6dCNtIqDMsp6d/uAhdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:a6:c5:6e:e8:84:ef:01:82:26:c9:1f:ba:c2:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: May 19 07:00:22 2024 GMT
Not After : May 20 07:00:22 2024 GMT
Subject: CN=f17cb45bfa8eb6885d931b1918c2270d6eabd7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:35:c0:78:9f:01:48:63:02:d2:b4:e1:f1:
30:24:79:aa:4b:ac:b9:32:3e:d7:44:e1:4d:50:1d:
40:88:cf:74:07:fa:92:61:df:5f:4f:38:62:a4:78:
bd:c7:1e:92:c5:c8:d9:96:19:18:90:cc:85:ab:3b:
da:aa:b8:5a:43:9e:9d:bc:38:96:6a:1c:7e:46:96:
c8:e9:9b:26:b5:f2:5d:9b:98:48:38:0e:31:c2:3a:
b9:c5:1e:60:6e:f8:0f:35:80:85:a3:4d:55:be:8e:
9e:45:dc:41:49:0b:9c:3b:b0:c5:fe:8a:27:3f:c8:
a9:fc:dd:6b:19:54:97:f4:34:66:fa:98:c9:00:64:
e2:63:ec:8d:c3:2d:b3:94:29:4c:2b:c0:3c:8c:71:
2a:2a:d4:f3:27:fa:be:e9:29:41:cc:f7:8e:78:c5:
34:35:a4:df:cd:cc:26:e3:bd:40:7b:6d:37:19:b1:
29:1e:66:ec:2d:d6:0d:3f:e4:ed:60:02:d4:ce:f1:
e7:19:00:16:ff:d2:54:1b:0a:73:4e:85:ef:a5:d1:
02:ba:05:df:29:61:36:a9:92:df:96:41:fc:f9:ef:
a8:d1:e6:85:dd:52:62:a5:99:86:8b:47:97:85:4e:
5b:10:73:14:5b:b1:e9:e8:09:11:33:d6:59:6e:bc:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:B4:5B:FA:8E:B6:88:5D:93:1B:19:18:C2:27:0D:6E:AB:D7:CC
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:33:68:a4:78:58:48:33:cd:31:bb:e1:bd:27:51:d2:2f:
3d:64:2d:3e:85:b5:e6:da:ba:fd:f3:f5:85:e0:08:fc:0a:ce:
67:68:52:88:cb:fa:5a:db:48:e2:81:46:30:2e:37:23:5a:49:
87:fa:d7:98:8d:ab:3d:e6:a9:6e:7b:33:50:d3:66:d4:25:c7:
c4:d4:5d:01:24:b2:f3:e3:29:6f:ac:00:b1:f6:e5:26:4d:e8:
f3:28:17:9b:10:6c:c0:7a:54:76:c1:4d:60:b3:a6:e4:bc:77:
ee:d1:07:84:61:14:48:91:dd:48:15:0d:84:32:f5:ef:67:a8:
f5:fd:a1:10:17:90:25:ce:9e:7a:d4:ca:ca:62:aa:fc:51:12:
98:b8:93:b8:3b:46:8a:1a:75:c3:e4:0d:74:22:6c:df:b3:7b:
4c:5c:a7:be:65:1f:0f:9b:b7:02:18:9d:ce:22:ea:71:92:bb:
24:ac:7c:27:13:fa:84:31:e2:b7:1b:65:aa:7a:ef:2e:2d:0a:
01:8f:42:77:07:60:0b:c6:05:a9:67:25:2b:da:0f:12:18:c1:
e0:b2:7f:63:94:f9:23:f5:8b:3e:ab:4a:6e:ae:e4:9c:1a:72:
9b:1e:86:48:e3:dd:2c:9e:20:b6:ed:ce:fe:48:19:17:00:a9:
b5:b2:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:43:06 2024 by rpki-client on console-fra.rpki-client.org