Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: xQTNjc3s4Qp+kfScxbQoBEtg8Qq9sMHawZt4NS+0W18=
Subject key identifier: 0F:FF:E3:F2:7E:D1:8B:6D:8A:AE:DE:6A:8B:15:E0:A1:68:B6:D1:18
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 018FB45922E775D2F66B815127F31181D4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 0B9A
Signing time: Sun 26 May 2024 10:01:31 +0000
Manifest this update: Sun 26 May 2024 10:01:31 +0000
Manifest next update: Mon 27 May 2024 10:01:31 +0000
Files and hashes: 1: 1dR2R-7hlcf2EODtbBHqMUyzpQU.roa (hash: VRGbRCNqbZWvcwu+EGZRgdGzim90389vWdJj45CVHPg=)
2: 7bMPEq4rb3YMZjkp-diRNLSvU0g.roa (hash: v+mzn2/SkSpc6PzSLbqd2tHr3vpzxG52oOANIcYQzHU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: bqcJt93uQYNy8HbSg2HS2yjJraqnmGzu9WA4Wga3KSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:59:22:e7:75:d2:f6:6b:81:51:27:f3:11:81:d4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: May 26 10:01:31 2024 GMT
Not After : May 27 10:01:31 2024 GMT
Subject: CN=0fffe3f27ed18b6d8aaede6a8b15e0a168b6d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:d3:d4:bc:38:83:c3:66:64:c0:73:bc:01:
4a:cd:61:5a:e7:e2:e9:fd:a1:0c:6b:47:12:e2:ca:
96:67:4c:d9:68:da:66:48:0e:71:61:11:91:a7:0b:
c3:1a:7b:6d:29:17:33:d4:a2:3c:29:a9:cb:fe:40:
3b:25:b8:7d:3d:31:e4:d9:cf:40:e2:25:b2:5c:40:
7e:4c:f3:3f:cd:d9:b3:a3:f3:29:4f:a6:05:f4:e2:
3f:61:4b:87:23:61:b2:26:21:5c:5d:21:9f:a7:84:
30:8a:6f:6a:6d:68:1d:89:60:20:d7:6e:e6:21:ed:
d1:ad:8f:54:50:3a:6a:f9:8e:66:27:fe:a2:d6:40:
a1:06:d3:cf:4c:b0:8b:c5:e0:7f:78:d7:b6:6c:19:
bb:dd:f7:ee:5f:eb:08:39:ca:66:16:61:53:25:f9:
56:16:4c:f3:95:6b:bd:8b:23:7f:38:76:47:42:2d:
fb:24:ce:41:46:d3:ac:75:fc:40:7c:b8:fd:fe:99:
b5:76:04:93:ee:ab:ad:ba:be:43:5b:5a:69:53:38:
e0:f2:b4:4d:27:56:81:41:20:c3:76:65:7b:2f:b3:
54:a8:f7:94:a6:5a:36:7a:e9:7d:b1:07:f2:dd:6a:
65:a7:ca:56:20:99:a4:55:f8:f6:b5:3b:da:74:9b:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FF:E3:F2:7E:D1:8B:6D:8A:AE:DE:6A:8B:15:E0:A1:68:B6:D1:18
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f7:a3:21:9b:9d:e8:15:22:07:26:e4:3c:d9:0e:d0:b9:f1:
55:e4:cf:92:01:23:c8:e3:ea:b5:c2:d8:ec:7a:9e:d5:1a:4a:
3a:03:8b:5f:1b:55:bd:7b:4f:92:19:08:5a:42:ca:19:52:d6:
b7:d5:5d:9c:b7:0d:05:2d:5d:8a:4a:97:6d:15:f2:16:73:73:
f1:4e:1e:2f:65:87:fa:ca:1f:d5:ce:dd:53:1e:25:cf:40:ef:
fa:db:03:bf:95:39:73:d4:7f:e6:e5:f6:b0:58:55:83:e9:f0:
16:76:59:3e:5d:6f:ac:f1:f8:ed:97:a8:e3:94:a7:a0:31:92:
7f:6c:85:d7:31:36:f4:1a:49:3c:d2:79:4a:69:e9:e7:3d:58:
49:ba:a4:6d:06:bd:eb:71:1e:64:cd:b0:4d:70:8b:b1:af:fb:
c0:9c:f9:85:ea:09:f3:f5:8f:05:62:08:56:11:db:ee:68:81:
48:0c:27:91:78:e4:13:7b:f7:46:6b:70:2b:0f:9d:d1:4a:84:
63:82:fd:58:fb:25:dd:22:31:d2:93:ce:92:4b:74:83:44:f3:
fc:0e:3d:70:90:c9:1d:11:f4:0e:c2:e4:82:47:d5:56:32:d8:
2b:dc:48:52:13:de:08:9e:9c:5a:0e:1f:cc:ba:cc:48:92:36:
f9:8b:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:37:25 2024 by rpki-client on console-ams.rpki-client.org