Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: WMFJpHHDNQusmJ33001WtStjqNvIypeBEFn7eZa8YME=
Subject key identifier: C9:E6:82:2C:99:3F:DE:70:7C:EF:85:E6:7B:59:84:6A:AC:1C:4A:FA
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 018F8E5CE9472A871CBF7FA4E61CB1338B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 117A
Signing time: Sun 19 May 2024 01:00:04 +0000
Manifest this update: Sun 19 May 2024 01:00:04 +0000
Manifest next update: Mon 20 May 2024 01:00:04 +0000
Files and hashes: 1: 3bPOoAKvXwUuvSsCWE906BkkNrw.roa (hash: 9aa2UD2K+krwyXAfpe1xqdzCvWmIZ2tLkV3mS4NfNJU=)
2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: semZNIX3A61zBTuhqWQjhrtn9AwMRilwWLP9U4B5jnk=)
3: b2b5xVLNvhTOZDh5ylp5ELt8Iw0.roa (hash: +5umBJqzwK277oLq3TMGXS5/3OZEWrI/GAwwdC1jpZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:5c:e9:47:2a:87:1c:bf:7f:a4:e6:1c:b1:33:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: May 19 01:00:04 2024 GMT
Not After : May 20 01:00:04 2024 GMT
Subject: CN=c9e6822c993fde707cef85e67b59846aac1c4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:22:6d:6e:e3:7f:5d:dc:6a:ef:8d:b0:e8:
c2:67:2e:c0:e8:f3:61:9e:99:bf:b5:c1:c2:08:be:
00:22:df:72:20:40:72:1a:34:1d:11:9a:78:a5:0a:
32:92:31:c3:4d:19:8e:80:f3:8c:a1:29:a8:3b:05:
a4:4e:1f:dd:fd:93:5b:bf:84:ca:ca:98:a7:74:18:
50:d0:d8:7a:45:14:a1:ee:e9:b2:07:8f:4c:71:70:
47:f8:ba:8f:8c:50:7b:a0:e0:88:40:a6:07:1d:b3:
dc:b1:a5:03:6a:9f:63:93:0d:9a:4f:1f:2e:72:5c:
7a:d0:fb:24:dc:04:b3:36:9d:c3:52:9b:99:98:4c:
e0:b0:ea:8e:ac:8b:30:89:c8:b9:a6:bf:2d:c8:00:
d8:aa:df:cb:d9:8f:41:91:5c:10:a6:03:7e:29:18:
a0:e1:b0:56:0b:07:51:c5:11:6f:22:2c:b3:4e:62:
bc:bd:cc:e1:d2:15:44:8c:57:52:b7:b0:02:b3:e6:
48:11:57:3f:4d:79:38:49:30:1e:9b:59:17:02:9c:
66:12:56:2d:5c:80:46:65:32:49:63:ec:74:53:9a:
66:e3:bb:1d:a3:4f:8d:de:04:b7:b4:92:fb:03:89:
e7:ff:3b:7c:f0:fc:e4:a5:0a:86:dd:bd:20:fb:2d:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:82:2C:99:3F:DE:70:7C:EF:85:E6:7B:59:84:6A:AC:1C:4A:FA
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7e:20:f7:11:b7:5b:f4:bd:47:ef:53:9a:14:c3:32:eb:45:
d3:19:2a:7a:07:00:70:ac:31:02:70:c5:dd:83:8c:73:63:10:
78:4d:68:78:63:88:61:89:23:1c:3a:84:38:e4:4a:e0:d7:1b:
3b:50:d6:e4:a8:06:28:74:03:34:34:37:d6:a3:53:e8:47:94:
88:8c:d3:23:99:2a:8e:03:cb:db:55:ae:55:27:04:d6:7b:24:
de:90:3f:71:e3:4d:fb:e5:4c:a0:f2:a8:19:fd:28:18:55:4e:
a8:03:70:9c:4d:5e:77:74:68:ab:f2:67:4e:04:0c:e7:6b:a3:
18:a7:e0:11:4f:65:a3:30:c3:f0:f9:bd:7f:25:63:7b:b8:b0:
4b:a0:a2:c3:fc:e1:63:e6:f0:6f:07:f1:07:d4:65:c1:32:1c:
06:38:4f:d9:0b:bc:33:37:1a:28:8d:81:4c:d4:67:cd:eb:a3:
d2:cb:2c:ea:09:25:43:a5:ca:d0:92:ec:41:d7:a1:a4:62:f2:
4e:33:66:1f:2b:fb:70:1e:f8:f7:20:19:90:dd:d5:73:c1:6a:
49:d1:b4:66:37:27:ac:00:94:93:d5:49:84:27:2b:71:e2:f9:
6b:ba:32:2a:6a:6d:05:6e:03:cc:d0:a6:ee:f0:13:85:1d:2a:
a3:28:13:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:22:42 2024 by rpki-client on console-ams.rpki-client.org