Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: HHJ+lmmESTqTHuzzj3mGqhikwyf6m7CaLm6mcoo06uI=
Subject key identifier: 4F:F6:DD:06:E6:2D:91:44:8A:69:70:8A:C2:71:AC:AF:00:C1:20:CF
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 018F8E5D7AD2C16D7C5A7741FB7D35F32E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 05A3
Signing time: Sun 19 May 2024 01:00:41 +0000
Manifest this update: Sun 19 May 2024 01:00:41 +0000
Manifest next update: Mon 20 May 2024 01:00:41 +0000
Files and hashes: 1: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 7szfjbOboU42J8P/DOElSs9dYGxS4WOfWFDWj641dX4=)
2: SZz9H4HOe20DCr_66JjsBT61HHI.roa (hash: ZQ5EzC/QhWxCwI/iW+FgB68q/OTM9QaYMCYQdzsjFWY=)
3: XEk4OEe6dC_dLyYWMNkysigweWo.roa (hash: lI2Lb3pU6MGtSPPokHno9CGg7qAH2kVxkjIQGP3sQPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8e:5d:7a:d2:c1:6d:7c:5a:77:41:fb:7d:35:f3:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: May 19 01:00:41 2024 GMT
Not After : May 20 01:00:41 2024 GMT
Subject: CN=4ff6dd06e62d91448a69708ac271acaf00c120cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:f2:c3:d3:3f:cc:8d:b1:22:4b:fc:71:0f:
eb:bc:a5:96:08:88:07:b2:e0:a6:46:e9:90:7b:c6:
ad:74:bd:be:12:89:c9:2c:7f:82:5a:cb:73:92:78:
6d:c8:b3:ac:a8:17:16:0b:fc:e4:a8:27:6f:52:3a:
1c:04:86:1e:04:a0:23:72:36:28:63:52:aa:01:3f:
83:42:05:6f:eb:c9:2e:24:cd:44:c6:8f:41:c2:34:
1f:15:18:60:85:85:d1:c0:65:ba:75:3f:aa:2b:53:
28:2b:6d:3c:04:cd:c8:83:58:23:cf:97:d7:55:05:
4d:91:6c:38:49:51:a0:99:e5:ff:61:ea:0c:c9:a5:
90:7c:28:10:22:24:37:8f:41:57:58:c4:8f:7a:26:
f9:a1:ac:23:b5:31:1d:d5:44:15:9a:5e:62:c1:2b:
31:cd:6e:ea:65:7c:00:4d:a3:28:dc:9a:d7:61:46:
1e:80:63:77:16:7d:67:b0:de:43:5b:22:5d:2a:81:
4d:b7:c0:12:13:eb:fb:7f:ca:51:b5:17:fc:d6:47:
f2:1f:08:11:54:a8:f6:fb:41:02:f5:92:2e:9b:b5:
55:86:ad:48:2d:95:b8:f3:80:79:eb:d6:b2:03:3d:
15:06:f7:36:ac:f9:b2:52:b0:a5:89:49:02:af:24:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:DD:06:E6:2D:91:44:8A:69:70:8A:C2:71:AC:AF:00:C1:20:CF
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ec:bb:f8:95:d1:c5:0e:19:54:c3:e6:21:e9:8b:f1:0b:68:
a7:43:3e:ec:2d:0c:a4:c7:31:c7:1e:de:65:2b:cc:32:d1:6b:
83:c1:3b:14:b4:8a:4d:35:fb:cc:87:46:cf:f8:df:fa:0b:f2:
a3:58:80:14:ad:42:4c:8d:f5:41:b7:d6:5a:04:d8:e6:fd:1a:
c4:7f:9f:39:59:92:5a:7c:19:67:14:bd:31:4d:a1:db:e3:3b:
1d:db:c6:4d:62:cf:e7:91:8a:a4:04:f0:59:d3:a2:a0:7a:b6:
5d:d0:03:3a:72:c0:04:50:f2:d9:4c:45:8e:c1:fd:cc:c7:f7:
ba:c7:b6:7a:32:98:af:c5:21:a9:30:27:c6:10:6d:79:7b:4b:
7a:1d:2c:46:85:9c:66:cd:0a:69:08:b9:2c:46:92:1d:b6:17:
15:51:66:9b:b0:79:85:3d:b0:5d:f4:aa:af:98:71:e2:6d:7b:
87:47:db:0d:2b:aa:4d:63:1d:6d:1a:c0:ff:a8:57:65:13:d0:
26:96:51:da:0b:e5:09:9a:f6:ea:07:9c:1e:e8:6f:fc:dc:66:
ac:fc:a1:0b:87:f4:a3:61:1a:83:8c:1e:e1:d5:e2:99:b3:91:
79:64:3d:ce:08:49:60:98:dd:25:bf:b3:7b:93:8c:eb:37:79:
8c:15:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:06:23 2024 by rpki-client on console-ams.rpki-client.org