Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: YsUmUogydkZDYewe54ZWZJMGkD+7eLa+Rig57PMREWI=
Subject key identifier: B7:A4:0F:DA:3B:22:BF:68:26:54:1B:F7:E9:D1:CB:87:BC:47:5C:E4
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 018F8D4A6D68910E2CBD22ECFB071B050389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: EE
Signing time: Sat 18 May 2024 20:00:15 +0000
Manifest this update: Sat 18 May 2024 20:00:15 +0000
Manifest next update: Sun 19 May 2024 20:00:15 +0000
Files and hashes: 1: BTs6gjcHcw7okqjlk63lvVIsJ2o.roa (hash: A8J1+c+C+98/k7lwN7BlDSV2auDSWMgbTEfJSA9SjK4=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: 0PYGleqk5YSQq+XjzJKjekgTkAGdah9fm6SwmWLb1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:4a:6d:68:91:0e:2c:bd:22:ec:fb:07:1b:05:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: May 18 20:00:15 2024 GMT
Not After : May 19 20:00:15 2024 GMT
Subject: CN=b7a40fda3b22bf6826541bf7e9d1cb87bc475ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:de:9d:c8:9a:da:ba:63:2e:b1:38:00:bc:
99:a5:f0:84:db:ef:95:d0:90:74:08:0b:1a:4b:1e:
17:e5:4a:d1:20:6b:f7:46:18:cc:8d:ae:17:20:73:
1a:b6:84:ae:e9:0f:1c:c6:ed:f6:b9:d6:8c:25:ca:
34:40:4b:40:a4:8f:97:46:10:ed:4a:ae:06:a8:5f:
6c:97:00:09:a5:65:84:54:f3:27:74:cd:ed:aa:74:
a9:3d:ed:08:12:02:b0:72:90:9c:6f:12:8d:68:31:
19:0c:62:38:5f:d4:23:14:f1:58:d5:98:ca:d6:23:
2b:0a:e4:32:d0:77:ab:6f:7d:15:45:b8:38:40:7e:
e0:9b:10:9c:06:ef:a3:c2:5b:5b:2b:c4:5c:f7:27:
74:4c:58:87:38:1a:f1:fb:6a:5b:ba:82:e8:c3:e8:
47:6e:29:e7:09:b0:20:21:97:be:c3:4d:4f:1b:11:
92:33:c9:2d:87:f6:77:56:0d:25:0c:f3:b4:e9:58:
b5:d5:44:bb:b6:8c:53:f2:03:14:1b:b3:e8:ee:10:
a6:b7:73:d1:bc:b6:d5:dc:03:95:4b:b8:be:de:f1:
f8:69:ec:77:d7:b6:3d:35:86:d2:42:32:40:4a:f9:
27:0a:77:f0:2c:d5:7f:a5:0a:f1:51:e5:55:67:21:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:0F:DA:3B:22:BF:68:26:54:1B:F7:E9:D1:CB:87:BC:47:5C:E4
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:d2:27:c3:67:b6:fd:7a:b5:3d:be:94:30:5f:1b:7d:94:
b5:a5:30:41:21:ce:25:d6:fd:fa:85:f0:35:0f:28:fb:1a:dc:
e9:08:62:6c:ca:7a:c8:a8:75:8d:f7:59:13:6d:65:2e:f8:7c:
97:2d:c2:51:32:59:c4:ed:ca:06:cb:37:f3:47:2b:6c:2e:ef:
1b:55:79:ce:98:18:75:1b:68:02:f7:23:4c:33:da:d2:de:0f:
81:c7:1d:ac:aa:22:87:d2:f0:da:d8:e3:a9:c8:fa:28:9d:90:
17:56:09:d2:27:e7:e9:67:3c:32:ed:79:4a:b2:3c:7d:3b:fe:
a1:41:c8:a9:db:fd:6b:ce:5e:0a:e2:02:99:fe:5e:bb:7d:8b:
52:03:8d:2c:23:7c:dd:f3:46:a8:9c:29:e7:36:8c:2c:1e:92:
2c:14:87:07:f5:5d:68:7f:74:43:9d:13:38:1e:68:d7:c2:14:
39:d3:d8:b1:39:8d:71:1e:55:02:dd:99:41:ae:a3:54:61:79:
a7:70:0e:55:0f:92:9c:9d:b0:e3:0e:86:a3:46:6d:77:a3:f3:
4a:ef:39:f7:aa:a0:05:bd:59:20:8c:39:4b:ad:77:1a:19:14:
cc:d9:29:d3:73:a2:6d:db:56:68:f0:13:de:3e:42:11:97:98:
c7:c0:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:53 2024 by rpki-client on console-fra.rpki-client.org