Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: a4At052t7PU4/HD91ipwzfJ4XC0bmihPd+0WWvmKZ8o=
Subject key identifier: DB:D5:8D:5C:89:ED:66:5E:9C:49:73:D9:D3:10:AB:B8:43:DB:01:58
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 018F8748967575A4AD8784E22C5220E55032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 01D7
Signing time: Fri 17 May 2024 16:00:32 +0000
Manifest this update: Fri 17 May 2024 16:00:32 +0000
Manifest next update: Sat 18 May 2024 16:00:32 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: /t35hKtonBVsLrZrSXOkrp3vP6DjwzqaKFdCv/8YGPA=)
2: hDmc63I6vLhBj8WHVNy8STPhJcQ.roa (hash: 89J1x94T0qpVQE94ANTjKAiRAPsNuY166Ue3kAJgwAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:96:75:75:a4:ad:87:84:e2:2c:52:20:e5:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: May 17 16:00:32 2024 GMT
Not After : May 18 16:00:32 2024 GMT
Subject: CN=dbd58d5c89ed665e9c4973d9d310abb843db0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:3f:c6:18:95:53:90:89:34:7b:5b:2b:4b:
2a:f3:3a:f8:fa:c7:8d:a2:57:ec:49:9c:8c:5c:2b:
19:95:df:d5:21:28:c7:94:ba:7c:cb:43:39:c3:bd:
27:34:4f:8b:e0:53:4e:8e:31:57:4a:99:9c:b0:98:
86:53:63:17:dc:6f:cf:92:1a:a4:75:d8:77:26:6f:
a5:69:85:5d:d0:5d:ad:25:d4:fc:ab:d6:f1:e1:83:
13:0e:34:a3:a2:34:1f:1c:4b:40:04:68:62:1f:06:
a3:eb:e9:b7:aa:04:6f:61:25:8c:70:09:22:26:93:
e5:00:31:8d:78:ea:b8:3e:7d:c5:58:c4:b6:da:f4:
08:0d:de:3a:2a:7e:62:10:d9:79:a9:c8:68:69:7e:
c0:c9:9a:2d:60:08:7c:dc:d2:0a:88:22:f7:22:a6:
44:2a:d6:c9:89:11:9d:90:2d:d9:9a:f8:c9:58:d5:
af:18:af:fa:4b:fe:e6:f5:a2:f0:1f:2e:19:db:78:
46:d5:16:01:75:7e:6c:97:15:e3:6f:aa:3a:8d:88:
4c:08:ee:c8:98:55:bb:21:34:46:5f:99:12:4c:45:
f0:18:28:b2:28:fd:a6:f8:3d:90:47:8c:39:7c:88:
00:21:20:8b:0f:c7:e7:8d:c0:2e:02:c8:60:07:6a:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:8D:5C:89:ED:66:5E:9C:49:73:D9:D3:10:AB:B8:43:DB:01:58
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ed:f6:f5:8e:8d:61:d7:8a:4c:c3:f5:fa:4f:c2:8f:ac:05:
d7:5a:13:1b:ea:26:4d:e2:8c:04:b9:8d:78:6f:ec:e0:3d:37:
a3:fb:e3:24:35:32:1b:2f:46:97:08:6f:de:ed:5a:45:ac:13:
4c:6f:71:04:2d:55:a1:9e:06:d3:e1:37:0d:e2:9f:df:82:24:
bd:db:91:7d:0a:9c:9c:ad:16:a6:a2:4b:49:4a:7f:8e:fb:9f:
a5:c9:8a:f2:12:b5:c0:90:ca:8f:46:6a:a3:9b:43:8c:59:2c:
51:a3:e4:be:69:b9:d0:16:d4:ef:1d:86:0c:4e:a2:68:19:7e:
43:44:74:8f:5d:19:b7:bb:64:78:0a:fe:e0:6c:a5:f7:e5:6d:
c8:3c:e4:52:c2:26:6e:64:72:01:af:5f:23:c1:0f:4a:42:63:
9d:87:2a:7b:32:b0:e1:40:70:e0:2c:ce:47:a4:5d:49:df:1b:
0a:97:ae:04:c4:3f:54:d9:d4:90:56:34:9b:1c:00:83:26:7d:
e9:88:1b:a7:95:b6:b6:e6:f4:22:2e:bf:d6:93:82:52:a7:5d:
61:2c:15:c2:98:c4:0c:d1:6e:28:db:82:7e:09:f5:1a:dd:d0:
f6:01:17:b5:f0:39:25:16:6f:ac:33:69:04:84:80:91:50:3c:
06:6b:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:05 2024 by rpki-client on console-fra.rpki-client.org