Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: xmtVXZ30Nm2Acia0R4kS/Ck096Vh2PYh4uNiKXSAu/Q=
Subject key identifier: DE:28:2E:AF:05:77:36:72:0A:81:04:89:0E:2C:4A:1F:E0:9C:B5:EB
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 018F40E7F35A060862CE18A214B38EBA52CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 05A6
Signing time: Sat 04 May 2024 00:01:33 +0000
Manifest this update: Sat 04 May 2024 00:01:33 +0000
Manifest next update: Sun 05 May 2024 00:01:33 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: EEmgxbUykmw7RzfwZ3SV4i6UEEVscR9ydn+EkS35NWA=)
2: Ibyte-tjE3QUzwaz7tIHIx4O7Vg.roa (hash: f+M4uxkuB9wS0xBVznRZhg0WIHyPQdZz3TeUVc46eBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:e7:f3:5a:06:08:62:ce:18:a2:14:b3:8e:ba:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: May 4 00:01:33 2024 GMT
Not After : May 5 00:01:33 2024 GMT
Subject: CN=de282eaf057736720a8104890e2c4a1fe09cb5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:e8:7c:ef:d3:e7:33:ba:40:6b:02:32:ae:
34:03:51:d3:e8:17:e3:7a:4d:5c:1d:24:58:b4:85:
b4:66:8d:04:4e:3e:3c:f4:10:ab:11:c2:0b:6f:07:
2e:93:9c:dd:66:91:fc:b0:b9:70:41:bf:79:cc:1d:
95:ff:93:05:1d:96:a3:b3:02:8e:2b:1d:f4:01:1c:
e9:47:13:8f:ae:2f:31:cd:e8:52:81:71:5c:30:70:
37:cb:10:44:c8:21:a4:cd:05:59:39:cd:40:82:83:
46:79:7a:c5:1d:cf:44:3b:cf:67:f7:a1:fd:3e:f9:
a5:52:e1:6d:61:2a:b3:e1:09:e3:8a:9c:d3:bb:5b:
98:71:f0:cb:66:d3:96:26:83:04:5e:ec:be:73:f0:
c2:fd:54:1f:64:eb:12:c4:16:dd:aa:4e:45:c9:a2:
80:f9:05:4a:05:6a:3f:0c:2b:b5:ef:a9:9f:36:89:
77:59:ac:fb:58:aa:bc:d6:4c:c5:d0:9c:f5:ec:26:
85:d5:36:47:79:6d:7d:1c:99:ea:65:3a:72:be:28:
e5:58:c3:a5:27:9b:9e:af:80:1e:d2:ba:0d:42:4f:
2b:24:56:41:42:75:d4:8e:1a:27:2f:98:5c:55:8b:
6b:60:e9:e1:a1:f4:d6:ca:aa:66:a6:7a:1d:61:52:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:2E:AF:05:77:36:72:0A:81:04:89:0E:2C:4A:1F:E0:9C:B5:EB
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:25:62:6a:ef:1e:fd:2e:b8:07:8b:0d:af:c3:7b:1b:e5:
fa:b5:ca:81:c5:d2:ce:69:9b:da:62:c8:91:bf:a1:c9:5f:e3:
4f:87:45:1e:7d:9e:d8:24:d3:74:24:9e:69:cb:cd:c4:df:24:
a5:db:d2:c8:c8:4b:cc:03:99:23:40:97:7a:63:2e:67:f0:cd:
25:75:61:1a:a3:a4:01:57:0e:cd:95:c1:38:7e:ce:b2:ea:7d:
9e:70:c6:e4:19:d4:bc:6d:9a:72:0d:20:7d:94:f9:8c:db:3e:
f4:8b:be:d0:2e:17:84:bf:e1:33:67:70:80:86:1b:0b:92:99:
5e:8e:c0:b0:91:12:f5:cf:76:c4:34:3b:61:98:9a:88:e7:02:
ae:f3:70:21:9d:a0:06:3b:e6:3f:9a:5b:2d:fb:bd:a2:7b:07:
6c:87:f8:72:35:38:9b:ee:cd:75:ba:18:e0:ef:9a:a9:ba:bf:
12:49:eb:c8:54:f8:55:3b:f4:9a:84:26:e3:11:7f:d3:5b:f9:
f4:65:b0:eb:40:e3:f7:47:46:c1:d1:16:be:b5:e9:02:9d:5c:
89:07:11:53:68:96:e7:3b:8b:a7:1a:8d:fe:a7:ef:7c:4c:63:
3f:54:96:ea:8e:57:96:ef:50:d1:14:47:6a:ab:cf:8e:d6:9d:
7f:a4:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:55:51 2024 by rpki-client on console-ams.rpki-client.org