Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: rxCo9P1b43SyfN/T9WpMrnXwGC0HInRgR3IPBjDic4M=
Subject key identifier: FF:8A:51:2F:81:71:3E:9B:F1:03:45:54:1E:61:32:D8:D0:30:C5:F9
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 018F874A8254C1CEFC756AB527ED4AC3E5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0B3A
Signing time: Fri 17 May 2024 16:02:38 +0000
Manifest this update: Fri 17 May 2024 16:02:38 +0000
Manifest next update: Sat 18 May 2024 16:02:38 +0000
Files and hashes: 1: F7DxsFuBQ8_PHNoz9pI4zDCfhgg.roa (hash: QnDOrBmHSLNom4Q1VW/GYLdPhy7oS7ia7FpkOXVtja4=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: FuXhErzqOeJdti9CKSCCfuxe1GgCPStzYV3vK4OvAog=)
3: dnfHFklZo6occvW-eJjsA220YVE.roa (hash: R5+4j+i9sSFBkEiL0zZHxS/FDSVDMHagBXItgtdAoc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:82:54:c1:ce:fc:75:6a:b5:27:ed:4a:c3:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: May 17 16:02:38 2024 GMT
Not After : May 18 16:02:38 2024 GMT
Subject: CN=ff8a512f81713e9bf10345541e6132d8d030c5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:f1:28:26:fd:7c:34:e9:0c:6d:c4:ec:c0:
83:89:49:7c:84:aa:a2:88:c6:92:71:c3:6c:2c:9b:
25:26:63:28:ad:2e:66:34:ac:89:a6:a3:2e:a5:83:
cd:68:dd:3e:33:44:4d:f2:c6:24:cd:ee:1b:df:fa:
a7:f3:43:a4:d5:bd:3f:83:40:32:fd:17:75:62:2d:
6e:5c:38:77:c3:1f:1a:64:7f:24:24:e6:a9:2d:28:
ca:12:16:e8:3b:bf:fe:1f:01:98:47:36:aa:f9:f8:
84:bd:a3:5a:09:4d:6c:83:a4:89:bd:a8:4e:53:06:
1b:41:5d:39:d8:ef:33:bf:28:0d:4c:6b:54:e3:61:
44:0e:a9:3e:3b:d2:ac:e8:fa:59:84:f7:5b:46:36:
85:f0:45:8c:e6:60:9b:13:eb:2b:5d:67:8a:ba:50:
d3:56:4b:3f:9d:2f:2e:81:af:d4:0c:40:23:e0:0d:
a2:f5:e0:ac:f1:37:79:58:32:22:df:55:27:aa:84:
eb:01:ad:62:4f:08:2e:18:36:cc:41:4b:a4:fd:9b:
39:5f:49:3b:16:e1:fd:c5:d1:54:e1:b7:bb:eb:06:
ba:bd:9d:83:80:ad:5a:9c:55:e0:3a:78:99:47:a0:
79:52:d7:cc:6f:2d:62:20:94:e9:e9:8e:cd:d0:8a:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:51:2F:81:71:3E:9B:F1:03:45:54:1E:61:32:D8:D0:30:C5:F9
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:56:2f:5a:1d:90:4b:06:fb:87:43:6d:52:6d:7b:a9:fe:
a8:33:38:56:ab:c0:b4:9d:a0:81:0e:d5:d5:73:b9:b9:2c:4b:
45:61:38:8d:fd:68:52:fe:e3:c4:49:58:e0:e1:a2:40:87:74:
b5:f3:3c:a4:d7:b1:62:38:12:82:b8:b4:55:89:46:9a:a7:72:
91:a7:d0:df:9a:ae:72:99:3d:23:c0:23:ca:b7:28:18:d3:54:
28:84:0e:b0:60:b8:e4:93:64:f3:2e:82:90:cc:a5:7a:1c:2f:
fb:61:f7:8f:4a:25:fa:c4:67:92:58:ba:20:f8:56:8f:e3:bc:
2e:c3:c1:06:75:a2:48:7f:4e:12:74:fb:81:30:98:cd:ad:d7:
48:ea:d2:3b:12:29:06:8a:68:a3:3a:88:b4:7d:8c:83:fd:47:
45:3b:19:f4:70:35:43:99:a1:ae:1d:05:ab:28:b0:cc:41:0c:
83:c3:86:57:40:ce:e2:57:64:cc:ef:23:71:80:8c:2f:ee:88:
20:37:fc:c2:1e:4d:63:d5:9b:76:99:d8:d9:f9:12:53:60:7a:
f8:f7:be:9d:bc:49:23:e0:62:e6:8c:b7:b3:12:33:36:28:95:
a8:14:a6:3f:58:4e:55:d6:ea:37:54:4d:c8:a5:2b:c7:01:bd:
a5:e4:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:52:44 2024 by rpki-client on console-ams.rpki-client.org