Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
File: jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft (raw, json)
Hash identifier: 0Khn26Mr3wii6WSrvQqMI168VjWVALFkNcYvDnDNYOU=
Subject key identifier: 51:87:9C:99:AD:47:0A:5A:3C:60:CC:41:7B:41:D3:E0:24:F7:59:7C
Authority key identifier: 8D:2F:07:91:B0:52:51:59:72:0B:19:1C:41:1B:CC:47:42:0F:1C:E2
Certificate issuer: /CN=8d2f0791b0525159720b191c411bcc47420f1ce2
Certificate serial: 018F8748A8363D7A6F1C006D9975EA56DD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS8HkbBSUVlyCxkcQRvMR0IPHOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
Manifest number: 0F2B
Signing time: Fri 17 May 2024 16:00:36 +0000
Manifest this update: Fri 17 May 2024 16:00:36 +0000
Manifest next update: Sat 18 May 2024 16:00:36 +0000
Files and hashes: 1: 6mFWWvmAT5bsbpGhrdS4280FBZ0.roa (hash: hhnVXV6NbpaD8wWoWB6TkszRJCN8jzZOHkVGDzev+wo=)
2: jS8HkbBSUVlyCxkcQRvMR0IPHOI.crl (hash: KCU/OqNz4JYc5/bqoCGhdbxwW0b/1sNzIEQzyatGtRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS8HkbBSUVlyCxkcQRvMR0IPHOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:a8:36:3d:7a:6f:1c:00:6d:99:75:ea:56:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f0791b0525159720b191c411bcc47420f1ce2
Validity
Not Before: May 17 16:00:36 2024 GMT
Not After : May 18 16:00:36 2024 GMT
Subject: CN=51879c99ad470a5a3c60cc417b41d3e024f7597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:22:16:ac:f3:8f:a4:e7:0f:03:4a:0c:38:
12:c9:be:af:c8:d2:4f:4b:07:d9:41:3f:52:14:46:
0a:0e:bd:b1:05:ce:47:a3:89:14:e8:80:23:90:f4:
74:c5:e3:1a:f2:be:28:9c:d3:37:c8:40:8e:18:a5:
34:08:a8:6a:24:01:cf:56:a0:d8:dd:0b:66:b9:ab:
80:e5:1a:45:ab:f8:dc:a3:f0:4c:b4:66:3e:9e:fb:
17:b6:09:5c:8e:b6:bb:24:1d:10:5c:53:c3:9f:8f:
69:f5:eb:0c:d8:5f:e4:81:0f:d9:6e:91:f3:f2:d3:
c8:e7:91:d1:d7:5d:85:6c:18:d4:82:fe:d2:f7:39:
c8:ec:f7:13:f2:96:ba:60:aa:0d:7b:fe:ef:ea:07:
12:ee:4c:06:3f:72:7b:46:31:98:8d:30:fb:99:5f:
bd:fb:cd:47:9a:14:f9:e7:74:a6:d7:70:be:f8:77:
4d:e8:19:c4:56:ed:b7:b6:3d:3a:90:05:d1:b8:85:
ad:a6:a8:86:23:62:b1:2f:a4:61:ff:63:3c:db:de:
29:37:47:f8:9a:e5:cb:9d:b9:30:cf:b6:77:13:60:
43:cb:cb:82:16:fd:53:41:5e:53:4c:dc:de:ec:4d:
4b:64:74:fa:26:18:47:e1:4e:5f:dc:c6:71:8c:72:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:9C:99:AD:47:0A:5A:3C:60:CC:41:7B:41:D3:E0:24:F7:59:7C
X509v3 Authority Key Identifier:
keyid:8D:2F:07:91:B0:52:51:59:72:0B:19:1C:41:1B:CC:47:42:0F:1C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS8HkbBSUVlyCxkcQRvMR0IPHOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8c52a7-6609-450a-b361-63939505fe66/1/jS8HkbBSUVlyCxkcQRvMR0IPHOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a4:cb:f1:72:db:a6:5d:db:c1:35:74:c7:e8:fe:b3:73:24:
2d:b9:1e:bd:6f:dc:e0:02:d3:f2:0d:d5:13:1a:90:a2:99:30:
6f:e3:64:18:7a:9a:0d:57:16:43:2a:1d:ea:bd:2c:c3:ec:ca:
26:82:12:ca:44:c5:3e:fd:42:0a:8f:38:c8:a2:6b:b1:e9:cc:
2b:27:3c:50:09:ec:75:40:43:3e:b3:70:e1:e5:79:4b:2e:a3:
5c:ef:65:a3:6f:12:75:b6:d1:83:c9:80:12:d2:b8:36:1e:d0:
79:9e:f4:55:f1:f5:23:da:33:6f:59:fe:94:c0:e9:92:fd:e8:
43:3c:14:25:a2:41:56:c1:fd:14:f6:ec:9d:6f:5f:26:80:77:
de:63:c2:34:a3:b1:61:dd:58:89:90:15:f6:f1:46:44:26:10:
12:52:93:a9:1d:5e:db:3a:72:83:bc:f8:04:73:6a:af:c5:bd:
aa:40:1d:f1:86:56:fa:f8:25:a0:da:56:61:1e:bc:18:8a:43:
90:7b:6e:35:f2:08:56:da:c2:19:14:c7:d4:02:2d:5c:e8:5c:
bc:31:53:24:7a:d2:fb:c2:a7:a6:22:30:7c:75:1d:7e:87:79:
83:3d:9a:e7:8c:be:42:52:d5:1e:c6:ba:54:bc:7b:1f:f1:f9:
d0:3b:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:01 2024 by rpki-client on console-ams.rpki-client.org