Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
File: x5CPU-RRfc5MdMouMJgniJEMQDM.mft (raw, json)
Hash identifier: RyjxgAFNJKJ8dLGoozujwxKt9HZk12vwXgs3OILI7Gg=
Subject key identifier: FA:13:4A:DF:F3:05:63:9E:D4:20:9E:FA:4A:23:0A:9A:BA:57:96:51
Authority key identifier: C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
Certificate issuer: /CN=c7908f53e4517dce4c74ca2e30982788910c4033
Certificate serial: 018F885B599A574A7848AEE60E1BD43E55AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
Manifest number: 0C5C
Signing time: Fri 17 May 2024 21:00:39 +0000
Manifest this update: Fri 17 May 2024 21:00:39 +0000
Manifest next update: Sat 18 May 2024 21:00:39 +0000
Files and hashes: 1: x5CPU-RRfc5MdMouMJgniJEMQDM.crl (hash: Dod8wzr3cOQSyPegezDW8WNF97oKfrXrjzAn7BWvdrs=)
2: xJHJcV1S_oRq4k7PJAPY4NlZ7GU.roa (hash: WljFnN/2MM7b9bYFOe3EDxpuQLeEoi4dVGyd36MXN3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:59:9a:57:4a:78:48:ae:e6:0e:1b:d4:3e:55:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7908f53e4517dce4c74ca2e30982788910c4033
Validity
Not Before: May 17 21:00:39 2024 GMT
Not After : May 18 21:00:39 2024 GMT
Subject: CN=fa134adff305639ed4209efa4a230a9aba579651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:e5:fc:55:93:2f:7c:f0:0c:8f:dd:be:dc:
5c:f9:4d:cf:18:db:c1:f1:c5:8e:9e:1e:99:70:c2:
e2:e2:c8:2d:da:9f:24:d8:cd:d3:0a:8d:5e:4f:75:
ee:e9:66:92:67:dc:bb:ab:f9:33:1e:b5:f7:c1:86:
3e:2b:a4:59:07:34:91:72:ce:61:b9:12:13:23:d3:
45:28:0d:56:c4:6c:79:fd:98:99:7e:26:11:77:24:
a6:b4:24:88:82:4e:8e:52:1d:d0:b6:4d:e2:51:ca:
a7:b8:00:02:ff:cc:1c:e1:aa:90:19:72:b9:5d:4f:
55:73:38:67:c2:a3:f4:46:28:2a:c6:53:48:9e:47:
a8:23:c3:28:9d:ab:03:01:f9:de:06:08:ab:fe:58:
9f:42:0b:91:b1:c0:60:d4:c4:d7:aa:02:ca:25:f2:
ad:99:92:9f:64:4d:ea:3c:f6:b1:f9:5e:64:a7:73:
7e:83:78:e9:7e:43:89:f6:62:e8:45:61:07:93:04:
16:8a:1b:70:6a:70:02:47:1a:3d:ec:44:e8:4a:c5:
02:5b:15:eb:f8:bd:ab:3e:8f:38:56:4e:a1:88:9e:
f7:b4:52:9a:5e:4d:24:9a:d6:e6:4d:37:8a:f1:a1:
d8:74:37:26:db:18:e5:ff:1b:25:c0:66:04:d3:1b:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:4A:DF:F3:05:63:9E:D4:20:9E:FA:4A:23:0A:9A:BA:57:96:51
X509v3 Authority Key Identifier:
keyid:C7:90:8F:53:E4:51:7D:CE:4C:74:CA:2E:30:98:27:88:91:0C:40:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5CPU-RRfc5MdMouMJgniJEMQDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e425d8-f787-4f24-ba2b-28fe66144981/1/x5CPU-RRfc5MdMouMJgniJEMQDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:84:d4:c6:35:b3:d6:97:fb:93:29:d7:92:8a:d0:96:1a:de:
92:ac:91:30:69:db:3b:f6:5b:e2:29:bc:cd:f7:24:25:b5:93:
ed:fb:c0:ab:2a:d2:ba:19:6b:98:24:d3:f6:fe:77:ae:af:34:
8d:15:49:6a:67:1b:71:d8:8e:e8:63:6e:6d:50:af:52:e8:b4:
39:c6:2d:35:2a:c2:5f:f0:d3:ba:4e:5e:f5:4a:a8:5e:ca:09:
f0:0a:75:e4:10:37:51:57:09:76:5d:fe:10:de:20:67:40:a2:
3f:4d:89:4f:58:f6:6c:c9:3d:cc:15:13:0a:bd:12:f2:11:b1:
4b:35:fd:91:1b:24:9e:91:b7:cc:f1:05:33:ff:35:5e:a1:e6:
35:f7:c0:c1:ce:5b:4c:6d:78:d4:34:84:87:f7:3b:d7:7d:35:
77:65:e3:bc:0e:5d:70:20:43:6b:20:4a:9d:a9:71:df:0c:bf:
5b:25:22:17:28:1b:21:2f:05:c9:ec:57:d3:8f:6c:4a:f5:86:
fd:ff:86:c1:14:df:fd:4c:72:96:4f:5c:5e:31:52:18:f4:dd:
58:3c:ed:1d:3f:59:a6:f1:32:2d:de:54:fc:d2:dc:a6:bb:7a:
4b:db:1e:20:a4:83:e1:dc:58:e0:04:e9:10:f6:4d:61:4c:bc:
8b:0e:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:00:51 2024 by rpki-client on console-ams.rpki-client.org