Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: Hq8Wer3CogzSqTZc7jP8qdywpHvYU6R39EbdDbLXt9s=
Subject key identifier: 74:14:28:BA:95:E1:A5:7A:33:20:09:D9:29:29:07:3C:E3:91:FD:70
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 018F8D8130414CE08BBEC1144BC25AE1517D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 0EF3
Signing time: Sat 18 May 2024 21:00:04 +0000
Manifest this update: Sat 18 May 2024 21:00:04 +0000
Manifest next update: Sun 19 May 2024 21:00:04 +0000
Files and hashes: 1: aWaAP_Vq0N7VNyfThxzneJcXxno.roa (hash: IQHBW+5TT6AAb4/Jj/TJBNIIY4J0wU3h1uvbC15E3cU=)
2: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: dJnWUX7u675JtV1HpPDyWAc5DHdZrS1yZq9GUZid0Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:81:30:41:4c:e0:8b:be:c1:14:4b:c2:5a:e1:51:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: May 18 21:00:04 2024 GMT
Not After : May 19 21:00:04 2024 GMT
Subject: CN=741428ba95e1a57a332009d92929073ce391fd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:a8:5c:e4:95:b1:4b:93:7e:94:9b:c2:30:
51:cf:49:63:2a:1a:c2:48:fd:35:62:39:80:25:9b:
65:be:d7:da:3f:21:32:9e:8a:a4:1f:e7:ab:b4:a0:
82:8d:d3:b8:17:b4:f1:ef:d2:60:87:45:cb:dc:f0:
23:42:72:1e:71:de:89:40:db:d9:db:e9:39:a6:c9:
54:75:42:a9:b1:c1:d5:74:ba:4d:8f:63:86:77:8b:
44:9f:fd:18:5d:6f:94:28:33:bd:cb:50:a6:03:df:
9d:da:db:cb:99:6c:13:86:27:c7:fa:82:a6:4f:b2:
7a:4e:34:ff:18:67:5e:fb:17:d5:d0:be:0f:7c:a0:
81:97:53:1a:cf:2d:c2:71:cd:38:e8:1e:1e:ca:0d:
8b:0d:a5:fc:a2:35:3b:80:0b:51:e8:89:5c:41:c7:
c5:c1:0c:56:96:a9:d3:b7:82:c3:cd:ac:2f:07:f5:
e3:de:8c:ab:fd:f8:df:7b:bf:e8:bb:ac:60:94:6d:
7c:2c:a3:c3:47:7c:ec:a5:40:cc:5b:b4:2d:25:85:
b9:9a:8a:98:59:78:de:20:27:7d:10:4a:a1:06:58:
da:fb:0a:b0:c0:ad:f8:3e:1c:89:ea:5a:7b:d1:f6:
ad:14:ef:03:30:83:e0:ae:25:fc:16:43:18:0a:69:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:28:BA:95:E1:A5:7A:33:20:09:D9:29:29:07:3C:E3:91:FD:70
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:10:f6:fc:dd:4e:b1:2e:10:d8:f4:ad:6a:6f:2f:79:52:ed:
96:2a:b3:9d:2a:dd:1b:9b:3b:b7:69:7e:27:82:16:a0:1f:8f:
0e:1f:2b:0b:26:23:dd:a3:d0:14:f1:58:9c:a3:2c:09:f9:f2:
e4:67:cf:85:be:b4:c1:fa:ca:8d:1f:cc:0f:5b:3c:d3:16:e4:
c3:80:bb:b4:42:a1:43:c8:b8:97:5f:38:48:68:d2:24:03:f0:
ea:7d:26:ba:02:34:0e:44:c6:4c:82:e7:31:58:f9:43:e7:0c:
65:5d:ea:ef:a6:6a:f1:53:d8:3c:01:db:d2:ed:85:09:31:d5:
50:68:09:ef:31:ad:90:f9:f6:29:d4:d4:ea:38:3f:3c:5a:f8:
2b:31:07:83:f3:43:cb:4a:33:57:f5:85:83:b4:10:90:b4:83:
4b:00:b6:0f:8c:0d:0e:58:63:51:c5:70:17:4a:69:35:1b:89:
44:33:24:a7:d9:85:91:95:5c:f6:a7:b8:37:5c:1f:8b:2b:f3:
8b:95:20:53:d4:34:21:3b:f4:49:32:50:19:22:ab:85:c2:25:
9f:59:93:03:e4:6d:0b:91:99:69:f7:b5:6c:35:87:15:e8:9e:
a2:8a:22:3b:0d:b9:04:db:46:ea:d5:d7:42:fc:60:d7:2b:3e:
4e:5d:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:23:42 2024 by rpki-client on console-ams.rpki-client.org