Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: zfgGatTsIE+M687nN/ZFs6d43h+iDm0a6nzFiXYPV14=
Subject key identifier: 40:0E:55:E8:1D:9D:7F:B3:58:0A:D8:D9:86:1E:DE:F7:41:A1:D9:44
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 018F8F0381B89A361787AFE13F804E288DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0AA9
Signing time: Sun 19 May 2024 04:02:02 +0000
Manifest this update: Sun 19 May 2024 04:02:02 +0000
Manifest next update: Mon 20 May 2024 04:02:02 +0000
Files and hashes: 1: V1tMmdzah-_uOvzPSHjAfOUHHkg.roa (hash: nT6H6NesBpCv1QrpokozTU99Zdsr6bkxXnSGh/q+DJ0=)
2: ZXRdT2cnMGCUlawCIGIBaK1hfME.roa (hash: e0VJTyTS0oIBZxBdQT4lqqoXnPmOJeqIuneV9KcVdkM=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: VYM1mYtuMfcuTceLX2NMtEuZqjU/ZGxocqQX8GVqhAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:03:81:b8:9a:36:17:87:af:e1:3f:80:4e:28:8d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: May 19 04:02:02 2024 GMT
Not After : May 20 04:02:02 2024 GMT
Subject: CN=400e55e81d9d7fb3580ad8d9861edef741a1d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:84:23:ad:20:b6:1b:bf:df:36:35:69:db:
f2:46:57:44:3a:4e:44:cb:3c:17:4b:bb:f2:1c:2e:
51:5d:43:d9:13:88:b4:1d:e0:0d:22:cb:18:57:ec:
ce:b6:d5:c1:c0:81:8e:e6:d9:6c:50:75:c8:2a:64:
d3:2f:2d:6c:5d:01:55:cd:fa:d4:2f:ee:18:c3:a9:
40:7f:a8:0b:8e:08:c1:28:43:44:56:a5:01:02:21:
78:78:79:cb:49:c7:0f:79:71:a9:76:79:d5:b9:67:
77:65:a7:6f:b0:14:23:e7:08:cd:8c:87:ee:69:ef:
f5:70:09:ef:8c:3d:98:00:66:64:5b:31:60:2b:8a:
66:9b:e7:e8:33:31:7b:07:34:6e:c6:e4:47:2d:d7:
50:4b:e2:f9:9d:82:e9:07:3b:3a:a8:8e:8d:15:8f:
90:da:e5:17:ad:dd:fe:f4:01:41:e9:15:23:b2:86:
f6:04:d6:fb:03:c1:6f:e9:90:91:15:b3:de:a1:17:
b7:3f:5c:da:75:b9:01:c5:e1:8f:88:cc:7a:58:b5:
8c:a3:92:d8:23:ea:d3:71:4a:fb:dd:8c:6b:bc:e9:
9d:1b:e1:c3:85:cc:ff:8f:d8:25:eb:06:a5:cc:48:
56:f6:ff:0b:67:97:e5:a2:eb:19:6b:d6:d7:a6:75:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:55:E8:1D:9D:7F:B3:58:0A:D8:D9:86:1E:DE:F7:41:A1:D9:44
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5b:e8:be:cc:8c:0d:44:73:28:44:2b:53:41:bb:18:a8:d0:
b7:42:a8:d1:9d:58:bd:54:7d:2b:cf:7e:3d:cc:bc:9e:29:b3:
ca:76:fe:c6:25:3f:e7:99:1b:7e:76:df:e6:c3:2a:7f:eb:b6:
a7:a6:ef:08:0b:64:3d:9c:58:e2:8c:f3:bc:19:5c:0c:06:f8:
ec:d2:0e:74:07:81:45:c4:73:9b:31:c9:d3:fc:7c:03:ea:d0:
b9:04:89:3f:f5:60:b6:e9:68:cc:8c:66:b0:cc:bf:f0:4f:49:
be:0b:00:ac:22:65:f9:28:8b:0f:06:2d:24:60:1d:0f:f2:eb:
69:38:c0:6e:e6:c4:3c:da:1b:8a:2b:b9:46:ce:f2:a1:f0:c5:
b5:bd:24:ea:da:7e:84:d4:08:6c:0c:94:73:bc:73:4c:b3:70:
9c:c7:a3:6e:8d:00:9e:ab:32:4b:c0:44:7e:fd:ab:88:61:66:
31:ce:ab:9b:09:aa:0e:59:94:a9:6f:12:78:85:9d:72:55:36:
e3:71:2a:7d:5a:e5:46:a7:00:d7:24:d8:1c:b1:d3:68:d6:5e:
36:9a:0b:84:33:a8:72:26:63:af:c3:42:18:a3:56:d3:f4:c5:
01:d0:d5:fb:b9:4e:70:a7:b5:67:e8:78:1c:0f:ea:d7:6f:ea:
0c:ea:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:26:01 2024 by rpki-client on console-ams.rpki-client.org