Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: ITWqfEwyWP3cD+M60EMXg9l/tbNiMDdRplioOOdaH0s=
Subject key identifier: D5:FD:D3:6A:94:CA:17:E4:1B:F3:8F:52:11:F8:0F:2E:7C:47:0C:1C
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 018F874867BBA662290589D48E3CF060977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 04A9
Signing time: Fri 17 May 2024 16:00:20 +0000
Manifest this update: Fri 17 May 2024 16:00:20 +0000
Manifest next update: Sat 18 May 2024 16:00:20 +0000
Files and hashes: 1: X2OUTpbQfsZw-VIkUy7-7rL1GFM.roa (hash: eakXgaR2/mZNtoxszg3Zo1L0ErbEH4AY5ajuWmbZt3I=)
2: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: qOCsztle0+/H8StQsZ0WyF8tFPF5AbSfLlCtjTA/4XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:67:bb:a6:62:29:05:89:d4:8e:3c:f0:60:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: May 17 16:00:20 2024 GMT
Not After : May 18 16:00:20 2024 GMT
Subject: CN=d5fdd36a94ca17e41bf38f5211f80f2e7c470c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:57:5e:9d:89:a5:34:f1:89:36:55:a6:d3:
5c:5b:47:26:e2:48:8d:71:ff:f2:da:bc:13:eb:2a:
cf:84:7f:c6:10:c5:6c:e5:a4:9e:6d:18:74:d2:5b:
c4:d2:22:3e:b8:e9:65:20:19:22:81:15:ba:82:2b:
74:b7:26:e8:6a:18:1c:68:7e:8a:eb:4d:d0:53:55:
08:9b:bc:74:ed:dd:ca:70:ab:4b:61:09:ff:e4:d6:
20:94:f2:53:07:a4:b8:f4:85:72:e4:f4:14:ae:fb:
9c:53:cb:18:59:d5:2e:ec:29:0e:8c:a3:6b:b1:a4:
53:9b:34:48:f6:f6:27:b4:01:2a:6b:e1:11:9c:34:
fa:14:d2:be:50:83:81:74:fe:d8:bf:e2:80:03:27:
73:c5:13:bf:4c:fa:a0:94:bb:d9:ad:82:35:90:f1:
60:48:b1:b9:ff:01:61:aa:1f:6e:6c:95:62:95:d5:
1d:9d:e5:b2:cf:56:52:33:14:df:94:ec:74:82:02:
25:5d:28:4a:e6:00:b2:d9:cc:e1:37:fe:07:50:fe:
e2:49:a9:53:9d:7f:ea:65:09:83:20:9d:c7:60:0d:
92:69:57:6a:03:dd:20:d7:42:2f:7e:e1:77:9c:01:
e5:bd:f4:41:a0:a8:d3:fb:76:73:d8:7a:6f:e3:15:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:D3:6A:94:CA:17:E4:1B:F3:8F:52:11:F8:0F:2E:7C:47:0C:1C
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:05:c5:16:73:e7:12:fc:d2:1b:bc:4c:ca:20:cb:7f:27:
97:32:65:08:99:46:5b:77:7e:0e:39:3b:c2:27:52:f6:00:33:
66:d0:7e:cf:c2:7c:63:5d:b7:ba:2e:52:cc:f1:7c:92:d3:69:
e2:74:3f:a1:b5:e4:9d:73:7c:54:66:22:a3:fc:46:73:d9:4a:
9e:a0:11:7e:be:1f:d3:01:4b:0a:77:57:6e:8f:96:b1:38:9e:
23:94:f2:cf:29:8d:66:58:d6:d3:17:b1:0e:3f:7d:b9:f5:39:
09:f1:f0:21:a4:4c:aa:7d:dc:46:95:ae:02:eb:cb:c2:b3:81:
ea:a9:35:76:51:fd:f6:c8:26:61:a3:cb:58:2b:2b:2f:6a:d5:
07:fd:52:38:84:95:c6:3b:37:77:4f:93:7d:d1:dd:3e:97:36:
62:73:15:ea:88:74:bd:90:54:96:b3:14:57:d8:15:0a:35:66:
fe:3d:6c:b4:01:8e:5d:cd:ff:5f:9f:04:70:a8:52:24:db:bc:
27:05:4b:c3:fe:87:4c:6b:89:87:eb:1b:8e:db:97:0d:3f:a2:
cc:08:c8:34:aa:b2:7a:12:27:7c:76:ee:dd:b3:cf:01:63:e8:
ed:c6:65:93:da:bc:63:e1:7b:e7:68:6e:58:a2:a1:b0:48:a8:
1d:99:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:37 2024 by rpki-client on console-fra.rpki-client.org