Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: bvs2o3HlL/P+M3c0MzDz35XqFjVSdmDnccBw7DAY+6c=
Subject key identifier: A0:AB:01:E4:89:5A:8C:7E:FA:50:DE:39:B1:1A:CE:5C:5C:E8:1C:ED
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 018FB3B64F9AA2A99C1B989A95C6DBBC317C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 02D0
Signing time: Sun 26 May 2024 07:03:40 +0000
Manifest this update: Sun 26 May 2024 07:03:40 +0000
Manifest next update: Mon 27 May 2024 07:03:40 +0000
Files and hashes: 1: 1-hWKwQ4VmMaTLDs6uF86znL85XM.roa (hash: krBqvBlqM/Uxcg3L+TVuQzMw+XFx+qvjy2ONGjWk3Vo=)
2: VlvHox6eCEruIB8_jSleU2BRQNY.roa (hash: yotlHm1ZoKHXu1SLqxVylVdZlHJ/Gozvd3iQ7pyxEBk=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: YLMe7PqneVzZ2QvalhFIGP3IHbo+SiV3QXz6cdmoN6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 07:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b6:4f:9a:a2:a9:9c:1b:98:9a:95:c6:db:bc:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: May 26 07:03:40 2024 GMT
Not After : May 27 07:03:40 2024 GMT
Subject: CN=a0ab01e4895a8c7efa50de39b11ace5c5ce81ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:63:c2:e0:27:bf:6b:bb:86:43:f7:26:a4:
12:06:9c:f0:03:cb:6c:69:04:7a:d3:a5:a1:99:49:
63:3f:0e:50:ab:87:b1:4d:9d:92:39:4d:21:81:f3:
ba:c3:de:3f:27:ca:43:de:a4:a1:3f:04:75:c5:6c:
c7:48:dc:5c:d4:07:62:6d:f0:b6:66:2c:dc:3e:f1:
d8:84:df:59:12:a5:fc:0b:64:4a:0b:72:9d:0a:e5:
ef:45:73:d7:b8:62:04:13:bf:68:0e:f3:0c:b6:d7:
18:4b:b9:4c:b2:a2:84:c5:00:3f:53:69:50:8a:c6:
5f:5d:47:29:52:26:44:1d:aa:ca:d8:4b:c8:0c:52:
3c:b2:3b:c2:ad:93:c0:76:63:0e:84:1d:03:c3:48:
ee:33:1e:14:8e:e4:27:6b:7a:82:ad:4e:6d:7b:c8:
aa:b1:40:e2:33:89:01:ca:ce:71:a8:65:51:8f:af:
06:4b:f5:2c:36:8a:44:37:ec:9e:f3:80:33:c7:e2:
2e:69:a7:40:d4:74:a1:90:ae:56:2e:ac:d5:64:1a:
9d:66:72:89:d2:70:e5:65:05:41:e8:a9:b7:d4:2f:
66:d2:ed:e9:5a:16:0d:2b:bb:82:8a:84:a8:ab:d4:
00:5d:fe:66:61:bb:e7:cb:54:3a:c2:45:48:2a:0d:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:01:E4:89:5A:8C:7E:FA:50:DE:39:B1:1A:CE:5C:5C:E8:1C:ED
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:ee:ba:d8:25:b0:61:e0:40:2a:95:0e:9f:9c:8b:2a:4b:
68:b2:a9:ac:46:81:1a:bf:d2:c2:0c:71:22:90:28:d7:82:ff:
60:e4:b3:dc:2e:3e:4f:61:29:ed:92:10:c2:24:d4:50:0d:37:
41:0c:80:1a:8d:24:df:55:99:42:0d:ac:2d:10:08:fa:14:5d:
f9:eb:f5:ce:a2:bc:21:0a:6e:a4:06:33:4c:6f:0e:29:9a:2c:
2e:06:56:99:e1:af:21:68:69:e3:a0:0d:7a:1f:ae:b0:be:74:
b8:3f:ff:91:73:48:b5:e8:b0:5c:67:52:7b:5e:92:b8:05:69:
0c:c0:e5:1e:3d:34:17:81:ae:62:c6:d7:71:0b:cb:af:55:25:
ec:5a:d1:6b:99:37:27:43:48:1a:fc:64:78:c6:c8:86:2f:04:
6a:dd:3a:a2:e1:ea:08:66:8c:3d:2d:fa:52:dd:65:fa:6f:07:
7f:3b:ee:e1:84:8e:65:75:9c:df:b9:b8:a0:2e:72:b5:a9:2f:
68:da:a3:8a:18:34:48:e2:18:4c:79:1e:27:e1:8f:97:77:7c:
42:01:a9:dc:1f:3d:56:e8:5b:c4:33:8d:d2:16:d2:a1:92:e0:
aa:2f:b8:6a:90:75:08:cd:05:ba:5a:72:d2:37:d7:2a:5e:24:
1f:89:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:57:26 2024 by rpki-client on console-ams.rpki-client.org