Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: uHkood4akMumMWAeZyKZVzu7HPpb+7NstYgjYyZq3rY=
Subject key identifier: 8C:C5:FA:6F:27:7F:24:6E:37:EB:F2:FE:D9:E2:78:C9:A3:0A:38:DA
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 018FB045AD19A5BAC864BEE4AC05C7C691B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0481
Signing time: Sat 25 May 2024 15:01:47 +0000
Manifest this update: Sat 25 May 2024 15:01:47 +0000
Manifest next update: Sun 26 May 2024 15:01:47 +0000
Files and hashes: 1: 0AzkBQ0JFA5bEdMYWaXszlLBOLI.roa (hash: YT2lPNDQMAbFCNjc+R1VwQhA1zu37s9zIndAypywbp4=)
2: WcR7zHhUmC6rSaxttpYk9euQIik.roa (hash: wXzakS8nMeEGBjkg0PrjxyqwymvnWmh0iq5Wo7l7Qww=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: WX3oGgLXbhsjmBUTsqWq3fXsP26UObaGoC5fYYXw4JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:45:ad:19:a5:ba:c8:64:be:e4:ac:05:c7:c6:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: May 25 15:01:47 2024 GMT
Not After : May 26 15:01:47 2024 GMT
Subject: CN=8cc5fa6f277f246e37ebf2fed9e278c9a30a38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:87:36:3f:94:58:de:68:c0:80:b2:26:16:
74:95:c1:8d:2c:36:40:ab:dd:f3:8b:fc:74:6b:37:
f5:49:19:63:9f:05:1a:0b:9e:b7:43:b5:51:b3:3c:
6a:8a:97:59:f3:cd:7f:cd:57:2e:0e:23:92:87:e0:
fe:61:37:ad:d3:c5:93:b1:e4:f4:4d:d0:b4:c4:d7:
63:1c:b7:27:c4:8c:ab:06:43:9f:0f:81:5e:8c:7f:
f5:3e:fb:87:a7:1d:d5:3b:dd:93:76:a7:23:9e:33:
98:ec:51:45:da:d5:26:77:53:39:0a:15:79:ca:f9:
c5:42:56:31:7b:66:f4:ad:0d:09:1f:83:d2:d6:b1:
e8:97:88:64:10:34:60:4e:91:5b:de:13:c5:75:b5:
4b:37:90:91:cd:b0:7d:55:84:49:2c:01:81:86:61:
b0:8d:dc:e4:f9:a0:1a:b1:d9:9b:8f:a8:93:55:b9:
e3:4f:db:10:4b:c8:9b:22:47:93:5f:e4:77:52:17:
ab:30:fb:74:c9:10:4e:c1:24:47:74:aa:5e:d5:33:
9f:06:d3:6d:f5:b9:61:9f:82:17:6b:e8:c0:c2:77:
57:4c:0e:3c:3c:ef:ef:c4:66:65:16:7d:20:91:22:
dc:9f:27:6e:d5:b7:46:98:16:52:8a:b6:5c:5c:77:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:FA:6F:27:7F:24:6E:37:EB:F2:FE:D9:E2:78:C9:A3:0A:38:DA
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:3f:3b:dd:63:34:f1:f1:5f:fa:a6:2c:c1:53:c1:8d:8d:
3a:a0:b0:97:a3:24:dd:de:25:de:e7:ed:66:d4:f2:27:9a:73:
60:14:b2:90:3a:57:f3:cb:ca:2a:f0:41:8e:df:92:40:c5:aa:
f9:ce:a3:9d:a9:1e:0a:25:e1:3d:c1:c6:d8:52:4b:12:bb:35:
95:b2:c6:b8:b0:b5:da:69:06:82:0c:64:1d:cb:2c:96:b2:09:
e6:e4:a6:dc:2e:7d:7f:8c:59:80:bb:78:ed:4d:38:0a:bc:c3:
55:ab:cf:d3:b3:8e:65:c3:e4:7f:e8:03:a3:05:e4:bc:db:3a:
c8:4c:fa:de:a0:e8:88:54:cb:f2:f1:1c:ce:c7:53:fe:8f:d6:
9b:df:bb:25:eb:71:3d:ff:84:31:76:8c:4e:83:c8:de:9f:fc:
8a:ec:ad:19:91:b8:cd:64:13:e2:c5:69:e9:31:19:de:4d:70:
77:38:b6:eb:b6:f0:f1:17:0e:16:c9:d4:de:94:db:5f:f8:fe:
3e:8f:b4:20:d0:a4:62:e9:c7:70:f1:60:2e:f8:a6:6e:84:5b:
ac:37:eb:16:cc:87:d9:6f:a7:93:50:bd:a3:90:cc:15:32:ba:
68:0c:dc:7e:71:24:08:4d:61:ec:67:ca:6d:f3:80:09:f1:40:
25:c0:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:37:38 2024 by rpki-client on console-fra.rpki-client.org