Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: 8GsGCjdXM3TGmg2csZFPTfKKca0awHFEoUM73OPabt8=
Subject key identifier: 75:4D:7D:FC:ED:6D:6C:10:AC:A6:FB:EF:1F:44:00:55:8D:96:BB:FD
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 018F904BF0189404B3D2B8500FCD65D26F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 0EB7
Signing time: Sun 19 May 2024 10:00:46 +0000
Manifest this update: Sun 19 May 2024 10:00:46 +0000
Manifest next update: Mon 20 May 2024 10:00:46 +0000
Files and hashes: 1: 07NWID6jL0m5jirJinvrrEJ4kNU.roa (hash: 9WZ9BexeSLxuwcQaPTctipRPoq8r5S6vpHcmIv4h3eg=)
2: BAOQzdYO52x5pHX4hBMM3XiCEcM.roa (hash: 2IOWLlDaPWkY3HIF7qq9PR5LxTzh41NtrMS4tChz3zM=)
3: DnnsgAS5y0LUX_6yAETNrAg5FjY.roa (hash: NrNAPqDPZQjIfbjbFOMBVEkPuLSBi/e3igCi8I65Qhs=)
4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: VxQXgYJ6sUbPBsJxHBe6tOWTrHHhQbeBuIw85Ivrc2I=)
5: P8iOL6sNbyT27rc5CMFHFJksCeg.roa (hash: lpEt2ZPxtqo4PRq5v3/kiJ3Zf3sZszL7ruxt2HHEMqo=)
6: PswHu72EXw-9uVwXFSkur3b8WUo.roa (hash: U1MGzETJsMRdLoLvQpIYrFdD62RfExlGvaak4z7I4Cg=)
7: Sbf_XS2_PTdkgRN73ERJ5kpCiBk.roa (hash: nnyt7doHD3rvbRLG4Y7ikSpWhPPEEDnQ/LAOOsa6brA=)
8: gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa (hash: xn5Qu6TrHpydk557pLufqdlLEgVHlgWw7N1ZzCJhZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:4b:f0:18:94:04:b3:d2:b8:50:0f:cd:65:d2:6f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 19 10:00:46 2024 GMT
Not After : May 20 10:00:46 2024 GMT
Subject: CN=754d7dfced6d6c10aca6fbef1f4400558d96bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:11:ec:ae:9c:24:c9:ce:68:6d:fe:ed:d9:
fc:ed:3e:f1:a6:86:c9:13:f6:0c:ee:2c:e8:95:ca:
9e:55:1e:68:18:0c:67:a7:86:e8:1b:1a:22:a9:0c:
12:a5:87:f2:10:6d:60:4b:9e:c1:a5:83:cd:f4:21:
0e:59:1a:4f:26:5b:ef:0d:00:8c:f1:ef:67:0f:c2:
86:29:73:b0:6e:3d:9c:28:a9:d9:d3:38:af:38:dd:
f4:c2:05:fa:98:b6:0d:13:ad:67:18:4d:b8:fc:c6:
f7:49:e5:db:b3:0c:be:5e:e5:4c:2f:74:ce:b3:a2:
4a:64:c0:b6:1f:20:37:72:1d:ed:b6:f2:c9:0b:bc:
ea:61:76:60:0b:aa:a0:a3:03:ab:df:09:a4:85:48:
4f:c6:3e:a0:31:01:27:ad:5a:04:6e:30:01:98:55:
0e:05:27:f9:89:b5:b9:82:87:2e:82:77:17:8d:fc:
1a:e1:2a:1d:a2:9d:1e:f0:02:18:bc:5d:8e:ca:a4:
12:b5:23:ec:c7:c8:5d:38:6e:86:e9:1d:4d:02:74:
e5:27:34:8a:ab:c1:55:60:a8:f7:14:9e:9d:e3:df:
b6:bc:6d:30:12:28:fa:f8:18:f4:ac:b8:5e:95:20:
51:89:55:34:4a:4a:c9:73:2f:96:3e:2a:64:fd:82:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:7D:FC:ED:6D:6C:10:AC:A6:FB:EF:1F:44:00:55:8D:96:BB:FD
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4f:5f:f3:b9:09:80:7e:2f:5d:64:3e:1c:f3:02:6b:95:27:
5c:83:1d:aa:ce:f4:c9:0b:5f:3f:a1:29:55:8e:89:98:d5:85:
5b:0d:35:7b:45:49:7b:0c:a7:a2:98:39:26:18:db:85:e0:39:
e7:fc:46:5d:2d:00:ab:f0:0f:38:dc:cd:92:2d:c9:83:3e:fb:
42:19:fb:b0:36:9c:16:1a:ca:38:95:b6:a3:a3:63:c7:2c:12:
b9:8c:65:f8:78:22:64:ca:f6:c9:dd:8a:fb:c2:36:6d:12:67:
0a:a9:c5:f8:a6:2f:84:64:6e:e4:82:5c:62:bd:53:9d:98:af:
ca:83:f6:3f:f5:aa:86:11:17:f8:d1:7c:89:37:0c:ca:49:87:
a1:ea:77:7e:50:93:a4:bf:f7:73:9d:e4:8f:2c:c9:a5:5e:aa:
e9:6e:b4:cc:32:d3:b5:85:57:e8:1e:cd:ef:49:a4:d2:e8:16:
e6:f0:b4:92:87:f6:f5:3b:2b:05:3d:1a:dd:e0:4c:0b:23:01:
5e:d6:de:20:a7:fb:d2:fe:44:7c:16:d3:ed:4f:84:27:91:f8:
f3:34:03:d3:e9:1e:77:51:81:da:84:a1:a8:17:5a:07:94:93:
44:19:bb:dd:b0:65:ca:41:9d:27:4a:3a:70:e3:af:b5:fc:96:
b0:84:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:13:46 2024 by rpki-client on console-fra.rpki-client.org