Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: zjr8/IyzL3PkGQc2tPK5/vPdsh/d9y919dvsPeZREw4=
Subject key identifier: 8C:9E:AE:7B:77:D4:01:E0:9D:77:7E:BD:D9:0F:08:5C:0F:62:81:02
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 018FC35DAEDD5A89A6AE85362955DF9E90A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 11A3
Signing time: Wed 29 May 2024 08:00:47 +0000
Manifest this update: Wed 29 May 2024 08:00:47 +0000
Manifest next update: Thu 30 May 2024 08:00:47 +0000
Files and hashes: 1: 01n2Lp9-OH11ofSfwwHieYCtLg0.roa (hash: maoa+8AB84+Xfu+Yx4Qp2kgld/gp//MD6mn30N5Ehd4=)
2: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: V02uiU3rjD2zg/zaXBl790O+1MIQnZcgZL24TE3JMZE=)
3: ujFq6v_qEmROMM_OwxwW1ljUyp8.roa (hash: 7wih1SIrH8gFh2yQ0ki33DJQU3WbayxcVPuP4ZtBLjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:5d:ae:dd:5a:89:a6:ae:85:36:29:55:df:9e:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: May 29 08:00:47 2024 GMT
Not After : May 30 08:00:47 2024 GMT
Subject: CN=8c9eae7b77d401e09d777ebdd90f085c0f628102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:19:a7:ea:bb:c3:9f:01:91:3c:10:4b:71:
93:ce:66:5f:47:90:c2:f2:e3:9e:ee:a4:61:93:9f:
4d:17:98:75:24:89:15:71:79:ba:85:6e:c7:8d:ed:
4a:d5:31:e7:18:12:87:bb:51:e7:48:31:c3:79:55:
cf:2a:50:23:ca:ce:bf:0b:9e:09:cb:12:3a:b8:85:
51:c5:fb:56:29:cd:ed:c4:35:3d:71:43:45:2d:7d:
9d:f2:54:68:2b:1e:8f:20:f0:b2:de:5f:d7:c0:c2:
b5:77:bb:1f:9c:d7:92:7f:02:ab:50:af:42:4b:54:
a7:b6:fa:c1:a6:4b:5d:13:59:c7:53:e3:6c:9f:f0:
71:5b:13:1a:43:ab:40:d5:07:64:10:ee:c6:f3:d4:
ea:ee:23:0b:ff:cf:fd:65:06:ad:18:8e:54:61:a5:
54:6a:48:b5:1a:f0:aa:ed:a7:86:ea:58:46:0c:e2:
1b:81:f9:a0:21:b7:e7:41:ca:67:02:90:51:49:73:
92:7c:7f:ef:1b:5d:93:75:83:20:52:45:59:7c:36:
eb:5d:68:68:e9:5d:84:71:be:76:38:2a:f6:33:54:
3a:5f:84:a8:2b:84:41:f2:bf:9b:56:97:4d:53:bc:
f5:23:a3:11:a4:00:88:a6:c6:5d:b0:a3:9e:09:c7:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:AE:7B:77:D4:01:E0:9D:77:7E:BD:D9:0F:08:5C:0F:62:81:02
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5e:1a:18:56:ef:66:fb:02:08:0b:e8:55:f8:48:31:49:0e:
3a:f1:2b:ea:6a:22:63:7f:cf:b3:73:50:69:2f:10:a7:5a:2a:
3c:f5:46:98:56:99:6a:48:73:ab:cd:da:a4:d7:92:c2:ac:c5:
98:74:a1:ac:e0:ed:df:0b:73:f1:a6:ac:aa:44:eb:8c:de:e8:
81:62:c9:ac:fa:ea:c1:43:d9:ac:eb:12:c0:5b:e0:ee:d5:e8:
c2:40:00:0b:0b:39:1b:98:52:c7:0d:3d:d5:5a:4e:ae:f2:14:
c6:91:fd:8d:38:ab:1c:f8:6f:85:2a:39:8c:51:db:d4:67:bd:
94:84:ef:90:e5:7f:07:8e:6a:04:1c:fb:1c:50:fa:cb:44:4e:
f4:bf:6d:cc:dd:0a:b4:ea:e6:32:07:8d:83:d9:df:eb:15:f8:
49:6f:ee:60:81:79:e9:8f:f0:94:4a:35:67:49:1b:a5:38:50:
46:f2:44:37:b3:51:42:4e:17:06:da:fc:64:0a:52:a6:93:9e:
20:8f:91:68:f4:f2:47:0e:e2:e3:f8:cb:37:6a:29:89:0a:1a:
4b:6f:fc:05:e3:3d:eb:ad:14:73:a9:fb:02:08:84:e6:9e:91:
59:90:a2:26:b4:30:60:3b:ae:e6:9b:b2:53:72:b9:74:e8:7b:
cb:d1:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 12:30:12 2024 by rpki-client on console-fra.rpki-client.org