Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: CA5z+E4RhvI3zUs/rlupkaQjqCJH88krhfNDe1z1Izw=
Subject key identifier: BE:1C:FC:56:4B:2C:E1:3E:C0:D6:CB:60:10:11:67:AC:1B:35:83:A7
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 018F362F27EF2A276080B80BBE74E0DF9279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 0E51
Signing time: Wed 01 May 2024 22:03:31 +0000
Manifest this update: Wed 01 May 2024 22:03:31 +0000
Manifest next update: Thu 02 May 2024 22:03:31 +0000
Files and hashes: 1: DZUDJ1OrHg4AC5YEwlDkGujtVxM.roa (hash: TGYaRp6sELVEUxDkMoxL9TmVoGBFwpX726m4+vdr/1M=)
2: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: T1cr6p32mKGhjYCfIaxgXC7i45AQI6aUFDFQux6dpuA=)
3: xMwGilYyvB4z1o40r8XBWDmB1Cw.roa (hash: 8/gXLSqYaLMGJ1vZJ92gxKX/o7B07SqmUpfhjCt5qok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2f:27:ef:2a:27:60:80:b8:0b:be:74:e0:df:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: May 1 22:03:31 2024 GMT
Not After : May 2 22:03:31 2024 GMT
Subject: CN=be1cfc564b2ce13ec0d6cb60101167ac1b3583a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:6b:4a:a2:e6:9a:ba:f2:c4:dd:6b:c2:9b:
a3:89:1b:e0:2c:2f:a7:b8:e1:48:ae:df:f2:0b:1b:
3b:8a:3c:7c:2c:35:c4:34:f0:fa:5e:ee:c2:11:ab:
e5:ff:2f:d7:8d:29:0b:1e:d5:d4:b0:e2:d7:ca:58:
1a:14:5d:c7:46:03:84:4c:0c:83:e2:68:0f:81:81:
ae:f7:f0:ce:fa:11:20:7b:a9:c4:68:fc:20:ff:fd:
c2:30:64:c8:98:fb:e1:39:35:1c:18:2c:07:53:f0:
49:34:6c:c3:77:9e:c4:f9:a7:3b:20:d6:42:95:4e:
0b:74:2c:91:6e:d7:e1:e4:04:77:26:8b:42:c0:3c:
ef:57:a1:b2:b9:52:ee:a8:8c:dc:af:25:53:db:bc:
5a:7f:8f:9b:f0:4d:99:3f:79:df:01:d4:4d:5c:fa:
de:35:c1:be:e5:70:13:01:4e:6f:8a:47:81:46:6e:
45:b4:12:9d:e0:24:d6:08:08:9e:ce:c7:ca:89:88:
c9:b1:ba:0f:5b:6f:10:3b:eb:bd:80:d0:b3:69:b7:
a2:e2:f7:a8:0e:30:b5:0c:76:8f:f6:c2:12:ad:90:
3b:ad:45:5a:de:3c:86:d2:bd:3e:b8:ee:63:8e:09:
9a:86:d6:b7:7c:8b:07:33:76:0b:96:b5:75:73:5b:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:FC:56:4B:2C:E1:3E:C0:D6:CB:60:10:11:67:AC:1B:35:83:A7
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:30:49:fb:2c:8f:9e:b8:64:26:b8:e7:79:8d:80:ee:b9:d5:
96:fd:2b:4c:cc:92:f6:6f:29:2f:8f:ef:dd:f1:a2:37:a0:f8:
47:1b:60:c4:6a:ec:48:5b:cd:d8:47:08:f6:02:ab:2b:6a:cd:
ce:7d:c5:73:65:b5:76:63:21:f9:e4:48:9e:9d:98:ae:9e:8f:
64:8e:eb:a0:32:3d:52:cf:26:fb:1b:45:ea:0e:ab:33:80:39:
ff:e5:a3:9a:94:f8:f8:2c:77:81:da:c6:3d:ca:6f:52:87:51:
95:bc:93:de:b8:e9:45:a5:3b:bb:28:50:29:79:cf:bf:88:b4:
e0:68:74:c2:97:12:ea:d8:66:f3:1f:bf:11:ce:37:b3:86:47:
ee:19:34:0e:d7:06:e5:8e:7e:3a:03:38:d8:88:ae:71:2c:32:
ee:49:cb:45:89:8b:d3:1f:d6:4a:c7:44:21:ce:1f:d6:41:a2:
e0:cf:40:02:80:e0:54:e9:d4:2c:15:55:19:04:95:41:5b:5c:
2a:c9:c1:1d:3d:7a:e2:f2:c3:7e:a4:31:22:78:ed:73:25:69:
79:b5:5c:13:c0:3d:8b:b0:a6:be:53:50:1c:c1:7c:3c:c1:8a:
53:73:65:75:ef:0d:38:05:81:4a:a7:0d:63:8e:f2:18:7f:b6:
64:e3:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:01:54 2024 by rpki-client on console-ams.rpki-client.org