Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: qPZ2kE8063S9Yaq+jHvEkeD4r/QnXhBRGLb4sDNKRqM=
Subject key identifier: 8A:8E:D9:1A:18:95:AA:DE:BB:DD:13:E9:EC:32:04:04:22:7B:22:A9
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 018FB97FA750C80275FCC07B5CFE36DDB216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1125
Signing time: Mon 27 May 2024 10:01:41 +0000
Manifest this update: Mon 27 May 2024 10:01:41 +0000
Manifest next update: Tue 28 May 2024 10:01:41 +0000
Files and hashes: 1: 6zPK28B6g3lAL0jk8y8ZvNZADSc.roa (hash: SsJ+mCayzTUP7pZSZbIJWA9S8lhXEkjoWgYYskU148s=)
2: OervXHNAuNl2w3zrZsTcNkmAXHM.roa (hash: CWVEI9ATg5+Uv1OQJhLN+05/2A1JHbfIZBtz9AUR41k=)
3: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: 5UtL5ZT41ZBrojMbivKkzszVl5r7jM1PixGa6z34k+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:7f:a7:50:c8:02:75:fc:c0:7b:5c:fe:36:dd:b2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: May 27 10:01:41 2024 GMT
Not After : May 28 10:01:41 2024 GMT
Subject: CN=8a8ed91a1895aadebbdd13e9ec320404227b22a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:ea:40:54:c8:01:ed:51:a6:2a:2b:3b:47:
81:34:d2:7a:5e:98:c7:fb:81:a2:74:da:51:fe:73:
a2:23:cb:a7:4d:33:9b:5a:4a:0f:b4:2c:12:ea:69:
a3:03:ac:3c:d3:92:86:26:90:00:8b:63:5b:dc:c2:
56:89:69:89:d3:e6:cf:65:78:c7:6c:96:73:93:c8:
8f:e3:1e:4d:f0:b8:b0:4c:01:e0:4e:b3:a4:e5:67:
ed:3c:bf:34:7b:87:47:a3:e1:20:60:52:78:02:93:
2c:2e:a1:d4:87:93:41:da:ef:d7:6e:50:47:20:2e:
e1:86:94:c4:6b:2e:c8:6c:f2:c7:7e:09:49:09:44:
a2:bd:95:8f:a1:12:1a:ee:c8:f4:39:f5:d9:a3:88:
e7:e9:84:ae:ba:3a:a7:19:77:03:86:0b:a1:9a:da:
a2:ea:77:5f:8a:be:72:76:a4:11:aa:d7:8d:21:4c:
75:0a:81:22:b3:f7:28:f1:b0:fd:1b:a7:ff:31:75:
60:b2:87:d5:ec:0f:8e:7b:9f:ae:f8:64:31:45:ae:
34:fe:fb:15:9c:61:ca:47:2c:8e:9c:cf:ff:c1:90:
9c:7d:95:38:d2:b3:cb:11:e9:6f:bc:2a:88:e3:7e:
b3:b2:9e:06:56:2d:94:d3:da:eb:22:d6:7d:22:a7:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:D9:1A:18:95:AA:DE:BB:DD:13:E9:EC:32:04:04:22:7B:22:A9
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:5f:9d:e9:de:e2:65:bf:a1:23:18:b2:b0:4c:50:ed:f3:
9c:1f:15:ee:bc:b8:7b:0e:ab:88:96:67:12:0d:90:a8:c0:35:
e5:4a:55:1f:53:78:76:34:43:fb:25:ec:e6:0d:ae:59:f3:70:
db:f2:0a:35:ed:b2:84:7e:b8:a1:53:0f:26:ff:9a:17:58:66:
e8:3b:1f:21:de:1d:79:cb:77:77:d1:64:cf:a8:33:5c:9d:2d:
8a:c7:c3:4e:44:90:48:fd:48:0a:29:a9:1e:ba:94:38:cf:de:
83:07:63:b0:69:e8:4b:63:b3:88:b2:88:8e:ce:08:ab:3d:3a:
e3:d3:2b:7f:74:a4:95:44:96:d9:57:0f:48:1b:d0:e4:0e:2f:
33:93:07:e9:d9:8d:15:4d:71:f7:1a:d3:dd:67:38:e3:ae:31:
33:1e:04:42:0c:59:c1:5c:14:ef:31:c5:b5:a9:8d:7c:51:2d:
87:4b:9e:17:2a:b7:19:c8:7d:1b:f0:28:5c:33:36:a7:c2:f1:
d8:cd:9d:e6:47:72:8d:ab:8a:dd:1d:0c:1c:06:83:53:38:ca:
14:35:1d:5b:ee:64:9d:9d:ef:5c:9d:88:56:56:8d:12:92:f0:
07:ca:05:c0:58:c7:64:e4:66:25:13:d9:01:fa:1d:a9:8c:5e:
41:1e:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:54:39 2024 by rpki-client on console-fra.rpki-client.org