Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: Nrl3ttr88dZ7E6AB91ldLxvMWJZpmt3xjIPQ1TXh+a4=
Subject key identifier: 72:93:03:6E:39:06:CE:99:80:0A:9D:81:AE:5F:CA:14:5F:0F:DB:FA
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 018F8DB827C922ABC810FBE78C082011C5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 117A
Signing time: Sat 18 May 2024 22:00:07 +0000
Manifest this update: Sat 18 May 2024 22:00:07 +0000
Manifest next update: Sun 19 May 2024 22:00:07 +0000
Files and hashes: 1: NUME3F4fpbFpPHXxjqL2riACA_g.roa (hash: Z+teIa+r/TFgEavQJJhMqBljQBI3IWDjmFWxiwAKUe0=)
2: n7OpLFGd3gQd3ja83SWHli-DR7I.roa (hash: RssCe31bUsH7oGMfdH1YNsGiGMdh15L/7hW6aQxIDWw=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: jAgeauh7DNlJ2wXtisRMj1xYny6Skj0Sy3/zoMQXGaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8d:b8:27:c9:22:ab:c8:10:fb:e7:8c:08:20:11:c5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: May 18 22:00:07 2024 GMT
Not After : May 19 22:00:07 2024 GMT
Subject: CN=7293036e3906ce99800a9d81ae5fca145f0fdbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:97:d0:71:3f:24:cc:42:fb:c0:4c:79:a0:
1b:56:e9:42:d0:ee:fd:f0:5d:f3:de:ea:13:55:a2:
18:fa:dc:66:62:14:90:73:8f:32:43:d2:f7:87:69:
39:8a:76:82:5b:92:d5:b7:05:58:72:23:f5:5f:b9:
41:7b:d6:d5:9a:9b:50:fc:4d:de:54:7d:48:0f:bb:
33:51:86:16:2d:5c:ab:b1:1a:f1:1b:a6:1e:3c:a5:
62:87:b9:fc:d6:ff:4b:0c:15:b9:0c:d0:58:b0:d4:
61:0d:09:6a:28:f1:f4:7b:6b:c0:dc:93:55:7b:e3:
22:cf:43:81:c7:04:87:e8:6c:cc:7a:94:72:09:35:
a7:18:51:8e:19:92:03:ad:ad:ef:df:03:5c:5b:53:
1c:02:f6:1e:97:c9:cc:27:df:4d:04:85:1e:5d:a8:
a0:1c:ee:85:b8:3e:7c:2b:31:d9:07:78:76:30:47:
f6:63:cd:a5:c5:73:64:10:26:9d:6f:9a:38:71:b4:
93:dc:39:c0:27:90:da:6f:e5:57:0f:90:aa:e4:3e:
74:29:be:a9:20:bc:02:ae:5d:12:00:b9:37:a0:fc:
85:fd:41:f2:4e:b2:70:b7:73:11:b4:2f:f6:9e:da:
22:42:7d:f9:93:9d:49:28:20:ab:53:d9:14:79:0e:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:93:03:6E:39:06:CE:99:80:0A:9D:81:AE:5F:CA:14:5F:0F:DB:FA
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:cf:c3:13:11:75:2d:26:3e:54:6c:0a:a6:b3:84:95:59:
04:f0:66:65:64:4b:6b:40:23:cb:88:ae:c1:26:1e:ee:50:cc:
dc:9a:a2:0a:50:7f:20:25:2d:e5:50:fe:71:a1:9c:93:44:68:
8a:fc:cb:60:ae:d7:e2:af:c4:f9:50:ab:a2:a2:34:4b:f1:73:
b7:20:b3:d8:31:9c:ff:e5:1a:73:b1:5b:f2:1a:96:c2:f9:f8:
0f:e7:56:7b:5f:77:8f:b6:87:85:a0:2c:23:b7:e9:49:a4:dc:
b7:46:b3:5a:f3:76:cf:f3:23:72:28:aa:22:9f:52:57:21:c3:
60:9b:57:1c:8d:03:6a:b8:ed:18:c8:a7:76:86:da:09:5b:0f:
b0:0b:a2:70:21:d2:a0:5b:b3:c3:74:d4:0d:1c:90:4e:f3:fd:
8e:0c:3c:4d:7e:dd:a9:b3:8b:00:5f:40:83:1b:d1:94:46:d5:
9d:7c:43:06:4f:4a:1d:5c:24:46:1a:fb:2f:2a:86:ad:e6:21:
4d:78:24:f5:6d:37:ca:31:b5:d3:3d:98:50:fb:83:51:eb:9b:
13:a9:1e:6b:a4:2b:27:dd:c3:39:88:a5:ca:2e:b4:8b:9c:f5:
10:df:1b:3e:d7:d5:74:dc:95:94:67:71:d2:63:8d:3f:00:a5:
7b:05:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:50:10 2024 by rpki-client on console-ams.rpki-client.org