Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File: T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier: SjxJQjrCrU5AEtkXkzWhDHj6fM1rSWiHxw0RcUkGkR4=
Subject key identifier: 1B:B7:B2:C9:A1:58:CB:93:F7:FE:95:33:3A:EC:F1:2E:2F:6D:49:5F
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer: /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial: 018FB3B448B70DB7FC1F27040B0E69016663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number: 0F5C
Signing time: Sun 26 May 2024 07:01:27 +0000
Manifest this update: Sun 26 May 2024 07:01:27 +0000
Manifest next update: Mon 27 May 2024 07:01:27 +0000
Files and hashes: 1: RRT3Ku1Z9_GGqK0gL9ZS2SiF1bQ.roa (hash: 8bbmbzVYcpWKfWuqq2G7P55307UmEwbUoBntilQMksY=)
2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: G0wRa7VDatIlu8x76/rkrGre3aipvVkbgcJBt5jdQJY=)
3: k8-_qCaleGVGBTJ9SnNrva0N-YQ.roa (hash: Ne390Cep1DU4VVcSq8E2aLfRdsuok+Ddk54CTcdbrYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b4:48:b7:0d:b7:fc:1f:27:04:0b:0e:69:01:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Validity
Not Before: May 26 07:01:27 2024 GMT
Not After : May 27 07:01:27 2024 GMT
Subject: CN=1bb7b2c9a158cb93f7fe95333aecf12e2f6d495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:1b:ae:71:b6:06:07:bf:e8:f1:63:38:1d:
81:ab:bf:c6:02:a4:8a:0f:77:80:a7:9a:24:0f:f0:
a8:4d:09:55:8a:b8:cd:21:19:1c:06:d8:b4:3a:a0:
c5:7d:67:0d:08:6f:7c:d9:26:2a:d0:6a:ec:78:31:
88:5a:29:b7:eb:33:44:5f:d0:c8:47:30:11:04:ae:
c9:69:08:83:b1:36:0d:58:05:79:d8:17:7b:74:19:
89:b5:cd:18:62:16:09:76:48:2e:c8:52:49:ea:f1:
ae:42:28:5a:d0:00:0e:30:3c:84:85:64:63:6b:1c:
f3:91:d0:6f:49:93:67:f6:cf:1b:e3:82:2a:89:06:
bf:72:11:a2:7c:ad:bb:02:4f:3d:f1:b8:f3:0a:53:
de:7d:ff:30:27:05:6d:52:ec:4f:05:35:48:45:b6:
7e:ea:69:b2:59:b7:75:30:0e:35:92:40:fb:22:d5:
bc:90:32:9f:65:c1:86:b4:ba:b8:08:93:c5:dc:c9:
61:48:78:1f:81:e4:47:0a:16:5e:19:d2:38:d1:af:
21:b9:6b:84:0a:b2:5b:25:a4:3a:ed:04:e3:e6:2c:
92:5d:dc:ce:87:36:c5:06:bb:ea:07:da:ff:b9:3a:
c8:31:fc:f9:1a:5b:75:31:0e:0e:9b:21:ec:90:7e:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:B2:C9:A1:58:CB:93:F7:FE:95:33:3A:EC:F1:2E:2F:6D:49:5F
X509v3 Authority Key Identifier:
keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:81:e4:89:45:2d:19:e0:cd:b3:9a:22:a8:5b:18:60:0c:
db:38:53:8f:ed:27:5f:d8:9a:55:9f:b8:d5:c0:b1:a2:0c:9a:
6b:7d:b3:10:31:e3:d6:6f:09:10:0d:15:81:51:64:62:91:f8:
48:a3:c7:58:8e:15:2e:8b:b7:cc:53:de:3f:cd:3e:41:48:4a:
ed:c9:68:e7:df:31:3f:61:6e:6b:2d:4a:f3:8e:bb:0a:73:09:
92:e8:88:0d:8c:79:30:d4:b6:93:1b:b5:c1:f8:a0:82:41:f7:
77:54:87:5f:b1:9b:3d:2b:0e:2e:7c:46:19:58:6e:bc:68:4c:
a1:82:55:18:0b:03:63:a7:95:d8:31:ee:d5:73:c8:30:17:31:
94:ff:5f:09:ae:8c:77:6a:4d:5d:d3:d8:48:c7:ee:9e:44:fd:
74:8e:72:78:36:4f:e9:76:23:e3:b8:e2:f7:b7:9a:85:69:87:
12:2a:97:3c:c9:26:d2:34:3a:01:43:4a:e4:25:7c:84:f0:e4:
93:a6:30:6a:13:ef:0d:bd:42:e8:ac:74:33:26:8d:62:c7:b7:
35:05:db:54:f2:c3:b0:03:d3:52:fc:30:06:e3:b3:80:a1:ea:
4d:70:3e:5f:46:ed:45:a6:6f:f2:35:dd:1d:04:86:e4:5d:ec:
ee:f3:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:41:33 2024 by rpki-client on console-ams.rpki-client.org