Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: q9lAzcGsjVp3y01sZWy/irSizUQ3M/31USgjIz50y2o=
Subject key identifier: B2:E4:7F:CA:68:0B:E5:33:19:7E:4E:38:1F:6F:65:7A:07:70:13:37
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 018F9571C5FBFB74B3C82A683E9F68DC645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 117E
Signing time: Mon 20 May 2024 10:00:12 +0000
Manifest this update: Mon 20 May 2024 10:00:12 +0000
Manifest next update: Tue 21 May 2024 10:00:12 +0000
Files and hashes: 1: 24q95COjlr79mkmuT28CncqcnaU.roa (hash: O/97V2cMTbJBCGRuYjFrZEx1wc/JxLoKSTtinDTSXdg=)
2: Kq4K15_Ub3XI7IzjWsq7Rwn-JGc.roa (hash: 1TDfHybtzLaZite/JJzdxJlXyCPCVks+bItTmrJqRzg=)
3: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: c77jYML2ZFKa7zVFZ0fkAQ7y20KQVlNOpLSuqzKF9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:71:c5:fb:fb:74:b3:c8:2a:68:3e:9f:68:dc:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: May 20 10:00:12 2024 GMT
Not After : May 21 10:00:12 2024 GMT
Subject: CN=b2e47fca680be533197e4e381f6f657a07701337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:e3:20:b8:bc:86:d5:a0:36:ab:39:40:70:
7c:02:68:8c:ba:9d:3b:81:10:cb:99:b4:68:e1:f3:
82:0a:41:e2:9b:87:ee:0a:69:5f:5f:bc:13:a4:91:
99:e1:1b:19:42:55:79:6a:74:c8:34:f4:69:17:ad:
8b:f4:0a:fa:1d:83:46:08:a2:04:72:df:3c:4e:dd:
06:aa:18:45:af:7a:20:11:ed:6c:57:d0:61:ed:81:
34:47:26:b8:bc:8d:cd:79:b4:3a:59:06:2c:f4:98:
90:cb:d6:88:bb:3d:46:76:66:45:11:20:e8:2f:58:
6c:2e:43:d5:49:9b:da:e7:b2:85:b8:97:02:ac:9f:
e9:ae:e0:50:22:11:ee:59:42:04:33:34:f6:59:0b:
b5:eb:82:58:3a:a6:e2:ef:b8:24:06:d9:a2:83:b6:
91:87:62:98:a8:53:8e:4c:fa:d5:0a:cc:2f:53:12:
ec:2a:cd:86:2e:10:8a:de:b2:6a:0e:9d:2a:9f:20:
31:d6:b9:97:e8:8e:b0:68:2f:87:c2:70:81:5d:ea:
05:53:80:83:52:0c:ef:80:e5:36:c4:39:2b:c5:29:
d8:7b:64:ce:55:48:a9:1d:aa:a8:55:0d:dc:d0:54:
3d:32:0e:c8:14:c2:cf:20:ac:12:13:42:2c:64:bc:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:7F:CA:68:0B:E5:33:19:7E:4E:38:1F:6F:65:7A:07:70:13:37
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cd:ba:76:74:df:15:70:84:34:14:a6:70:6c:56:76:77:9d:
2f:0b:91:d4:39:f3:b7:b9:58:89:54:c3:e7:61:fd:57:b8:ab:
fb:05:cc:e0:06:0d:75:ce:cc:c5:be:0e:e7:a9:45:de:79:fd:
b7:ca:3f:38:e7:76:11:e6:85:0c:8e:42:c4:bd:51:17:7d:d8:
e1:a5:ce:a7:80:32:35:c6:37:14:0c:1a:d8:68:84:52:68:a2:
01:be:1e:5f:2d:e4:b8:b1:15:52:32:be:79:29:2b:c8:33:02:
49:cb:d6:00:3b:64:10:58:1f:07:ef:88:f4:6b:28:52:8b:3d:
fb:7d:9c:1b:82:3c:20:a1:b7:f2:75:16:56:b2:4e:83:34:54:
98:97:b9:12:54:b7:f4:3f:ef:e8:03:c3:5e:0a:1c:61:be:40:
a9:93:de:22:98:69:cb:85:c6:51:ec:9c:6e:8e:e1:84:7c:04:
f1:cc:bd:89:a1:94:f8:2a:7b:81:41:7e:b5:b8:2b:0e:ee:cf:
88:e5:ed:68:ac:05:a0:76:17:b8:90:95:29:b9:17:dd:e7:b0:
3c:ca:38:3d:9d:5a:f6:9d:8c:30:3c:8f:e6:ea:c3:61:69:2e:
29:b1:07:9e:47:cd:bd:ad:ae:ba:54:02:de:e6:bd:8e:a1:9a:
73:aa:28:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:19:33 2024 by rpki-client on console-ams.rpki-client.org