Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: emL3i25JaMNV4aOcZTXVdtovlvWv0Bj/81M9Iutu2fo=
Subject key identifier: A4:CB:08:C7:57:35:65:E5:9A:5F:FF:7C:5B:5E:E3:91:ED:DC:97:F9
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 018F8749A6D8AC7C49AE507C6303AFF98A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0A6E
Signing time: Fri 17 May 2024 16:01:41 +0000
Manifest this update: Fri 17 May 2024 16:01:41 +0000
Manifest next update: Sat 18 May 2024 16:01:41 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: q8YudGaVTNCjteU2wHn4p+S35zpEbMvcKJ47irWgExk=)
2: lo2c5L0YOiTtusts_UImo8E5XTo.roa (hash: ED3vtnr+Xoin0XLoi9WVNs1xFAPK1p/ytlllVHcDwTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:a6:d8:ac:7c:49:ae:50:7c:63:03:af:f9:8a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: May 17 16:01:41 2024 GMT
Not After : May 18 16:01:41 2024 GMT
Subject: CN=a4cb08c7573565e59a5fff7c5b5ee391eddc97f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:04:de:25:8f:de:e3:3b:b6:a4:19:a1:52:
ae:e5:7c:7c:d5:bd:7a:ac:bd:a7:4a:0e:4b:9f:28:
71:7b:56:f2:92:45:ae:e6:b0:48:d1:e3:f7:5e:d3:
06:68:67:87:b6:aa:d0:85:c2:8f:42:50:16:60:75:
6c:33:cb:a9:3e:ec:93:ae:7c:14:25:bc:3c:21:8b:
65:4e:66:94:ab:93:5e:3c:42:e2:7f:db:18:21:a7:
d7:71:83:06:2b:90:39:52:69:0f:f4:ab:1c:48:87:
58:2c:0b:17:7a:ee:1b:67:4e:86:80:7d:d6:88:88:
5f:16:01:0c:1e:97:7b:20:b7:a9:68:93:b0:72:5e:
37:97:8d:98:27:24:42:1d:c9:1d:a5:5e:06:fe:01:
95:f3:26:7e:5d:a6:2e:c9:28:b7:e6:aa:6e:60:2c:
ec:4f:58:73:37:0e:5a:53:0d:e9:5d:57:8b:73:57:
d1:9b:3d:3a:05:7e:32:e5:cf:f3:f6:db:60:dd:8c:
87:ce:e6:79:36:56:32:d7:0c:70:49:53:2f:38:97:
5c:32:a5:b4:b2:c4:2c:ce:2a:ca:fb:89:f9:62:4e:
2a:87:d0:a0:9b:38:f2:b8:18:17:ad:2b:8b:af:62:
9c:48:49:03:c3:00:ca:d9:cc:db:eb:f7:a2:99:78:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:08:C7:57:35:65:E5:9A:5F:FF:7C:5B:5E:E3:91:ED:DC:97:F9
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:d6:3d:54:90:f0:06:e6:82:e2:b0:d3:70:10:36:f2:7a:
ef:0f:1b:31:c0:59:96:4d:52:28:39:4b:6c:d3:4b:b6:db:ec:
77:f1:c4:2c:dc:3e:9d:16:5c:07:89:12:c3:ab:f3:f2:a2:f9:
6d:58:9c:13:19:c4:56:2f:3d:a5:34:a3:eb:03:2e:d9:7a:5a:
43:ee:15:c1:a5:74:4d:f9:db:13:13:9c:a6:65:15:0d:b5:e4:
00:2e:94:c3:37:9e:b5:fd:67:73:f6:8e:4a:c5:47:e7:ae:cf:
7e:d0:fb:f5:5d:b9:47:45:65:b9:59:1b:b5:e2:b9:f9:a5:de:
0a:42:92:17:bc:e6:d0:62:69:bc:4f:1b:8b:1a:cb:c7:46:47:
b9:fd:fe:b6:d0:f9:a7:59:41:28:ee:aa:2c:de:c2:d3:6f:89:
12:d6:4b:ac:c2:b5:0f:1f:4a:9a:4c:40:ce:dd:44:19:cc:89:
c8:6a:51:b3:c9:f4:dd:e8:39:92:c4:fc:16:c6:a3:5b:c5:11:
f7:4d:d1:9f:26:a2:6b:09:af:7a:4e:d7:54:99:76:c1:7f:86:
36:ae:f3:52:9d:e8:c6:67:55:b7:a1:d4:f2:c2:6e:77:e2:30:
54:48:ab:f8:d7:31:bf:f3:95:d8:99:70:a1:cf:cb:14:6e:d6:
4b:3d:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:47 2024 by rpki-client on console-fra.rpki-client.org