Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: bNYcwjyFtIcDljTGcsMWDdJFI+m+McN+RtGbg67ruXc=
Subject key identifier: 90:02:28:4B:34:42:77:A5:FD:30:DF:AC:34:91:EB:67:53:A3:DC:45
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018FB75983019D2DE5D2B1DD18887E1D20F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0B65
Signing time: Mon 27 May 2024 00:00:47 +0000
Manifest this update: Mon 27 May 2024 00:00:47 +0000
Manifest next update: Tue 28 May 2024 00:00:47 +0000
Files and hashes: 1: GPY_K1_sfXyPYe8-6LnYr6zIw9w.roa (hash: VJ6MSwljUbKvfUEr1ygFZO3gIO7CxWngBhfDGtjHfoY=)
2: JAyLYywo3_6H7w_Jbq8WYcS_5tk.roa (hash: g8QOA14pHSyNglfWIf6C5GuHjmogABGtz4h5JC3lnWc=)
3: NlI9WiQJdSYBSfNnSvKHpLzoXmM.roa (hash: 2IxPjS1fx+1UMUaF/aCaeCMu4YJJYTGwdmLPsHhlyBM=)
4: P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa (hash: uGUZL6F9ZqmhNnqoptB1O3UNNKibyxZ99aP3ldN4wbw=)
5: PN-hNBC2YiRvBhT7CiQffYhGTZI.roa (hash: HlCF3505pz3FUxgf118Kbo0us350ojRdmyDphTKI9Bs=)
6: n5grmYLFusDXskduHNK0u8Uh7_8.roa (hash: Ot/hVRNHpI3TyJW49c6dgVaMjbZnxiCg+2OWKcBEwPs=)
7: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: nQzLLv9+zdJIbQA+i9cAcpFk5nYgtavTEc2zAHnEUQw=)
8: zgrnwFwrYqHet0VOTL6GObVqaoI.roa (hash: 1GJv1hWWjnySvpXINDXo87s+shmbypQM+oObXHaGOnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b7:59:83:01:9d:2d:e5:d2:b1:dd:18:88:7e:1d:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 27 00:00:47 2024 GMT
Not After : May 28 00:00:47 2024 GMT
Subject: CN=9002284b344277a5fd30dfac3491eb6753a3dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:25:c1:1c:14:07:87:2c:b4:da:c8:65:0c:
f5:0d:8c:09:2b:eb:bd:47:ad:ed:71:e5:b9:26:ac:
fb:01:58:d0:51:31:ef:be:7d:e0:f9:55:c0:55:43:
00:77:5a:c7:76:55:fb:4b:0e:8c:d0:ba:74:c5:73:
da:03:db:02:50:d2:a1:03:1e:7b:2d:e6:95:71:6b:
d8:32:e1:04:29:f2:05:5e:ad:08:93:6d:0b:80:1f:
55:3d:41:48:67:b6:16:b4:04:3c:5e:c0:fe:8b:b8:
6f:43:46:79:f3:b6:69:61:b8:b7:c0:63:69:7d:d6:
35:34:57:91:89:66:3b:24:d7:4b:ad:af:b6:b1:25:
54:f3:5d:ba:41:24:ef:f6:ec:bf:df:a6:0d:38:56:
64:65:4f:e2:81:52:9f:71:43:8b:f6:56:aa:02:0c:
72:74:c3:90:90:60:a9:ad:4e:07:29:20:32:49:e1:
d4:ea:cb:4d:09:0e:14:47:96:e4:42:3a:a1:e8:ce:
04:ac:d1:84:69:8f:b7:0f:b2:28:52:ea:06:66:a1:
c3:04:e1:6f:e5:5d:45:32:63:c5:86:58:fb:1e:9b:
8e:26:64:38:c4:83:a0:ad:20:a5:b2:e1:08:40:f1:
8e:cb:9f:6a:1f:a0:fd:ca:dd:c7:c0:cf:4d:ca:55:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:28:4B:34:42:77:A5:FD:30:DF:AC:34:91:EB:67:53:A3:DC:45
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2d:78:a0:9a:7a:c3:3d:f5:2c:d5:34:1b:fd:f5:dc:96:89:
9e:48:5e:5c:e0:40:c5:90:03:f8:4a:73:c4:a4:17:da:7d:b7:
46:bc:fb:05:31:0c:b3:e6:f5:e7:cc:d9:c7:60:65:83:d6:61:
90:f9:a8:0f:16:39:c1:56:3a:3f:5c:a0:e0:63:b7:58:c2:fc:
4d:7e:e0:69:98:f8:d3:7e:d1:25:3e:76:e5:05:9b:ca:b7:8f:
39:ac:0c:2e:8e:fc:ba:94:c1:8c:12:1b:5d:1e:37:74:38:c5:
9b:51:60:f2:d0:06:95:9b:d3:34:76:40:45:9e:03:02:38:80:
a7:5a:61:28:01:1c:86:28:cb:9f:61:7c:94:ce:a5:50:b3:5b:
b2:da:f8:47:18:63:7e:e5:9b:1e:12:7d:33:ed:77:b3:1e:fe:
f3:f1:16:fc:95:ee:99:b5:d4:69:5f:4b:29:d9:1c:3a:75:c9:
99:ec:d3:c1:7a:ee:42:4f:38:aa:59:bf:8e:ff:5d:16:fa:cd:
d6:0b:dd:71:26:a9:f2:ab:d4:6c:c8:37:73:e6:f8:ca:15:cc:
18:4d:7e:33:d6:2b:25:b7:4b:82:73:53:4b:2c:b3:f7:e6:62:
43:b8:3e:57:5d:e2:e4:25:01:92:99:fa:50:ef:e2:f9:11:6e:
0b:66:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 03:52:46 2024 by rpki-client on console-fra.rpki-client.org