Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.mft
File: 1C5DAABC25062286EB5C9A517464013080037504.mft (raw, json)
Hash identifier: 4MIkl9sY9vfnmzvhh1ca2Vwg6F1FNzD1nfVOvI6124g=
Subject key identifier: A9:6B:A6:C1:AE:8A:62:75:8E:F0:CE:4D:A5:1F:B1:6C:68:65:74:0C
Authority key identifier: 1C:5D:AA:BC:25:06:22:86:EB:5C:9A:51:74:64:01:30:80:03:75:04
Certificate issuer: /CN=1c5daabc25062286eb5c9a517464013080037504
Certificate serial: 29CAEC985621268028C0D31EB1568C3BBC672709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HF2qvCUGIobrXJpRdGQBMIADdQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.mft
Manifest number: 02FA
Signing time: Tue 28 May 2024 17:11:45 +0000
Manifest this update: Tue 28 May 2024 17:06:45 +0000
Manifest next update: Wed 29 May 2024 17:19:45 +0000
Files and hashes: 1: AS210563.asa (hash: zHQpqsydIE4H+tnTSrMS0CrIihVxUsoMHQRmIfXBnas=)
2: 1C5DAABC25062286EB5C9A517464013080037504.crl (hash: MGm9xLnRzs8XzAVTx7HEPLPI26TvlmZbHnnCvX6dxdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.mft
rsync://rpki.ripe.net/repository/DEFAULT/HF2qvCUGIobrXJpRdGQBMIADdQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ca:ec:98:56:21:26:80:28:c0:d3:1e:b1:56:8c:3b:bc:67:27:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5daabc25062286eb5c9a517464013080037504
Validity
Not Before: May 28 17:06:45 2024 GMT
Not After : May 29 17:19:45 2024 GMT
Subject: CN=A96BA6C1AE8A62758EF0CE4DA51FB16C6865740C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:15:e5:d6:df:f8:41:76:4f:15:2c:cf:6f:
20:8d:18:e0:f9:6b:d6:e4:b9:5c:5a:c0:0f:3c:17:
3b:be:2b:16:71:c6:c4:6b:0a:63:cb:8e:00:9b:3e:
cf:fd:cb:21:38:70:df:5c:9e:a4:7b:d2:53:d9:66:
0b:96:50:da:21:5b:16:2f:e7:20:21:37:21:22:d0:
ac:02:72:2a:15:ae:31:02:f9:44:5f:70:cf:63:6e:
ca:63:f5:8e:d8:95:80:bc:7a:50:be:f8:82:54:e8:
68:40:87:17:91:0a:b1:0c:fa:c5:c1:9a:ea:ef:2c:
7e:6d:d1:70:8d:ff:52:eb:8a:47:f4:d9:b0:f0:e6:
af:35:ed:97:80:0f:f8:d4:31:04:ef:7b:5b:a8:2e:
80:bb:f4:f6:62:c7:0a:47:c7:a5:d0:b1:8d:b1:c1:
74:c2:e4:43:bd:45:30:f4:95:79:33:92:dd:88:b5:
56:78:2e:45:99:4e:34:ee:35:15:e1:93:01:1c:f8:
44:c5:1e:f2:00:e1:3d:26:5b:f4:96:01:ee:e5:33:
a8:6b:21:b4:22:dd:86:7f:c0:36:d1:f6:fd:24:da:
40:43:26:17:fd:b4:76:d0:1f:2d:dc:48:3f:a4:7b:
49:ff:ff:18:f4:fb:4b:e3:51:fb:b4:95:00:c1:4f:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:A6:C1:AE:8A:62:75:8E:F0:CE:4D:A5:1F:B1:6C:68:65:74:0C
X509v3 Authority Key Identifier:
keyid:1C:5D:AA:BC:25:06:22:86:EB:5C:9A:51:74:64:01:30:80:03:75:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HF2qvCUGIobrXJpRdGQBMIADdQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/8/1C5DAABC25062286EB5C9A517464013080037504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b5:f8:fd:51:eb:9d:65:40:28:22:9c:56:6e:ec:e8:96:ac:
3e:e4:12:8a:1d:95:8b:d9:9e:22:f0:67:23:36:9c:94:bb:ca:
4e:47:38:00:cb:c2:5d:b7:14:63:e6:d9:91:9a:dd:63:cd:f5:
04:ae:91:79:de:04:ed:37:7e:47:08:cd:3a:20:d4:df:63:d7:
4d:66:50:fa:db:95:9a:b1:2b:43:51:26:78:4e:f7:cf:d5:71:
de:51:f9:fd:1f:ea:9c:af:1f:41:41:18:5f:75:0b:56:9f:0f:
fa:ee:3c:c2:4f:b6:39:ff:7c:eb:f4:3f:22:58:26:a2:e8:fc:
7f:79:78:16:1c:3e:55:73:00:2c:cc:71:6e:f4:55:63:19:06:
52:a2:48:00:5b:49:07:72:62:cb:fc:50:9f:b2:89:1d:5b:0f:
f9:21:9e:17:25:11:f6:b8:8c:2e:0c:4f:2d:3f:31:3e:cb:78:
cd:12:28:e5:63:6c:fe:cb:ab:10:ea:47:4a:36:b5:63:ee:7b:
3c:28:cd:a3:30:a0:ef:ba:a7:6d:47:cb:02:df:e8:fd:3f:0c:
a4:4d:9a:e1:e6:3f:30:99:65:7e:55:b7:00:d5:01:40:58:c9:
89:19:70:c1:c2:8e:a7:53:0c:fe:87:88:3d:af:d9:c1:2b:83:
44:00:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:13:03 2024 by rpki-client on console-fra.rpki-client.org