Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 7zE/UcEPQVV/poN8QpxoAG5p03Zz2tXjdMO+mmNBjck=
Subject key identifier: B1:99:C1:91:8D:90:04:AE:02:09:12:F8:89:59:05:F2:E5:D7:4A:90
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 018F8E2618789835A31FC3A4F58F0FD46381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 117C
Signing time: Sun 19 May 2024 00:00:12 +0000
Manifest this update: Sun 19 May 2024 00:00:12 +0000
Manifest next update: Mon 20 May 2024 00:00:12 +0000
Files and hashes: 1: QwwAb2l90khno-2jaMfBRPoeDZ0.roa (hash: NNnV0yC+kIsIZpnHWbTx6ioy1Ma9jO4uPAirfZcYGUU=)
2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: 332oGbnDvCZWtqrythpa65QmmGfGZjyvKkdn64p+DvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:26:18:78:98:35:a3:1f:c3:a4:f5:8f:0f:d4:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: May 19 00:00:12 2024 GMT
Not After : May 20 00:00:12 2024 GMT
Subject: CN=b199c1918d9004ae020912f8895905f2e5d74a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:51:c3:ca:af:d4:d1:2a:48:e6:16:ae:97:99:
88:24:c1:34:de:6a:90:54:5e:46:7e:98:5c:3f:1e:
38:a0:46:a5:99:52:4d:26:09:84:59:d4:ed:e7:3a:
e8:76:4a:45:c6:b7:82:68:cf:06:66:75:44:35:50:
8c:04:54:22:cf:af:40:04:de:c2:cc:41:dc:54:55:
56:19:90:3a:92:d9:20:09:d7:ca:2c:ef:5d:95:eb:
1a:8c:57:b1:0a:73:0e:b9:0d:31:87:6c:8f:e4:ed:
88:d2:3f:96:b8:a2:e2:67:2c:7e:b7:db:be:c1:e3:
64:1d:83:58:69:12:7d:06:36:e8:4e:5b:76:6f:d9:
f9:73:fc:54:30:48:64:c3:79:15:4f:84:5f:a0:89:
41:14:95:85:a1:fc:de:b0:f7:bb:82:b0:46:9e:dd:
2d:2a:32:37:a1:d7:fa:c9:31:45:68:dc:f8:82:4c:
2a:3e:73:f3:a6:0a:2b:72:f4:01:22:b0:88:29:84:
fa:04:f9:53:ab:f3:9e:ea:05:2f:62:e6:6b:49:12:
6f:7d:cc:ab:15:25:d5:c4:ba:49:83:00:84:e0:fe:
b9:66:f6:07:85:3e:2f:cc:85:ca:8f:65:da:b3:a7:
b6:2c:ac:9c:08:90:39:96:af:f2:af:c9:0d:4f:50:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:C1:91:8D:90:04:AE:02:09:12:F8:89:59:05:F2:E5:D7:4A:90
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b2:5f:4e:ed:46:80:db:f9:21:e7:9d:35:75:11:a9:6c:09:
c7:ab:8a:e3:7f:0e:bb:0a:26:89:47:e6:5d:f8:e0:0b:4f:26:
c2:d4:c7:8b:66:a2:a1:f3:1d:14:02:cd:24:7b:65:96:77:b3:
da:e5:ef:4d:fa:8b:86:db:13:62:6c:7b:c0:29:ff:f6:6a:1b:
f8:d4:f9:83:ab:f2:36:cc:82:3f:45:cf:e0:26:0b:d0:af:05:
b0:aa:db:8d:29:ec:5e:3e:08:c3:b8:7e:6f:62:23:7c:cd:67:
25:17:90:29:ee:b8:eb:c2:6e:d3:b8:05:30:90:18:2a:21:e5:
d7:f6:f4:01:88:50:26:f7:93:17:2e:24:1d:a2:bc:f8:7b:fc:
75:b0:0c:46:cc:b7:7a:81:3c:d3:ce:4d:76:64:2a:52:f0:0a:
07:5e:89:00:98:d2:1f:a6:05:1c:ae:eb:c6:02:88:24:28:ad:
55:03:d9:7d:41:d6:6c:4f:bc:71:b9:3e:a1:75:b9:de:11:de:
95:65:02:67:e1:9e:19:84:e2:67:01:56:fb:85:3c:00:8b:67:
db:fc:6c:f8:db:e5:dd:5e:16:26:7f:2a:31:f4:9e:b2:84:a3:
d4:d0:c4:e9:72:bb:d3:f8:44:9f:f0:98:5d:04:c6:c4:89:91:
7f:8a:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:08:38 2024 by rpki-client on console-fra.rpki-client.org