Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: +YtE2MueWeqZ1zlzTQVZzc6o9eUG2MjON+ltc9HRsI4=
Subject key identifier: 3E:87:AB:C4:41:9B:9F:6B:0E:8E:34:38:5B:A2:A5:0B:29:80:04:36
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 018F87B652D4B372653CE76C6FCC28885F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 09E0
Signing time: Fri 17 May 2024 18:00:23 +0000
Manifest this update: Fri 17 May 2024 18:00:23 +0000
Manifest next update: Sat 18 May 2024 18:00:23 +0000
Files and hashes: 1: JY_zqahBtL6K5fU2TmogafRf9eE.roa (hash: FQAijQm51+0EufUa0kU3UpPA/SVjCAO7luM4OeIl5eg=)
2: P4xo3G1SxSGSFzE0w7n-bFETBu8.roa (hash: DYRObucHtQjjMk7cPaDPN6dylgKxMEpFSJoZxj5u1Zc=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: Wxx3UeauLHEwxhXYj53hLA2yqJvxmZq2EsFa33fp6gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:52:d4:b3:72:65:3c:e7:6c:6f:cc:28:88:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: May 17 18:00:23 2024 GMT
Not After : May 18 18:00:23 2024 GMT
Subject: CN=3e87abc4419b9f6b0e8e34385ba2a50b29800436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:73:f5:ff:71:68:af:36:3c:d5:34:7e:9f:
68:b0:5d:3b:09:be:7b:35:3f:20:ee:d6:63:b1:60:
54:33:15:01:4a:1c:8f:b9:17:cf:84:3b:38:68:e3:
7f:91:8e:23:d8:b2:fb:26:63:88:b4:1e:ca:cd:90:
b7:f7:92:d5:52:3b:c3:c6:11:d7:18:31:97:1b:8d:
52:da:4c:89:65:50:69:13:f1:c8:8d:87:7f:13:d5:
b2:78:27:59:81:c6:87:3e:7f:f9:2b:d6:0d:ba:e9:
12:b6:aa:30:68:bf:5b:85:7f:cc:74:bb:29:56:59:
b7:d3:79:fc:9b:56:2a:55:3e:ef:af:c8:86:29:25:
e1:86:fc:03:e0:55:81:ee:2d:d7:50:26:69:ae:8b:
3b:03:da:10:e9:66:a2:4f:7f:a5:18:c6:4f:7e:0b:
c2:d5:ac:8b:63:99:cf:0d:a3:46:48:53:e3:f8:03:
3e:91:ea:83:e4:3c:eb:aa:37:4c:7a:36:da:87:e4:
86:32:24:67:52:3a:0b:b9:d0:78:72:d5:0c:93:d7:
99:79:7b:69:de:f4:c1:77:4a:5d:63:1d:e8:f9:f2:
b8:65:63:59:b0:aa:1c:81:92:63:37:e1:7a:09:72:
90:b2:1b:46:af:c6:fe:80:ca:4d:2d:9e:d2:d1:c5:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:AB:C4:41:9B:9F:6B:0E:8E:34:38:5B:A2:A5:0B:29:80:04:36
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d1:43:65:35:18:c9:76:40:c6:f3:10:bd:bc:82:10:59:70:
b2:0b:c8:d5:7b:ec:06:63:cf:39:01:6a:c2:58:c6:93:83:fa:
e1:99:42:ec:e5:99:21:ac:1e:17:32:72:5d:e1:ac:ac:22:e4:
28:78:2d:4b:85:ea:21:31:e8:cb:dd:91:ea:e0:03:3d:04:0f:
91:2e:0b:b9:d9:af:d9:e0:fd:5e:1f:d6:f2:ba:90:73:98:ab:
5a:57:ff:a1:1b:71:47:72:09:d8:05:48:b7:1c:ca:55:79:29:
83:dc:97:b4:d5:e5:39:d6:ec:6f:61:2f:5d:35:b7:e9:de:3a:
72:82:74:f0:13:93:b3:61:d7:c0:d1:66:c0:2d:43:6f:d5:c4:
5f:83:fa:0a:73:c8:26:6d:31:29:a3:53:86:ae:06:11:14:cc:
64:cb:51:85:93:0e:48:1b:b1:a5:48:a3:9e:8d:3a:a8:2c:7e:
e7:39:23:69:93:12:31:c5:eb:30:37:ba:d7:d1:cf:e7:b1:73:
52:55:db:9e:7d:24:b1:26:2c:e8:5d:68:52:13:e8:95:a1:d2:
7d:40:a8:72:3d:7b:1c:1a:d5:59:b7:16:05:d0:bb:fd:b8:82:
53:aa:15:72:cb:5f:51:4b:66:b2:fa:b2:db:e7:b0:83:c6:33:
d8:5c:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:01 2024 by rpki-client on console-ams.rpki-client.org