Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: FFmT8d4BzlzuvDRi3YDUUWKFlqAX5heR/IaWGPCci3Y=
Subject key identifier: 10:C9:69:A0:20:C8:3E:C0:04:DD:F7:90:69:17:8D:DA:8B:98:AC:B3
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 018F430CD0677E3056EB5DFFF0D909006864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1158
Signing time: Sat 04 May 2024 10:01:04 +0000
Manifest this update: Sat 04 May 2024 10:01:04 +0000
Manifest next update: Sun 05 May 2024 10:01:04 +0000
Files and hashes: 1: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: BmdetQM5q4gFg8nSzNO2ft7DOpCdKyLQ1nrKCFrdV4U=)
2: JMvzuj7TabENncCSzpTdtk1E86k.roa (hash: UrLP60Ea94nONn35mFwWgGGvHddzGY3pgrLlX2RqTuA=)
3: YOgTQbPxDKik_ykSfpOCKy8lR4s.roa (hash: PZA5b69DTKTF2UiEA7rdeb4ibzPiF/swOT4jbWML7eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:0c:d0:67:7e:30:56:eb:5d:ff:f0:d9:09:00:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: May 4 10:01:04 2024 GMT
Not After : May 5 10:01:04 2024 GMT
Subject: CN=10c969a020c83ec004ddf79069178dda8b98acb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:36:92:61:cc:4d:ef:11:58:85:9c:3b:8b:
df:76:47:0b:11:a4:b8:15:80:1e:af:34:bb:5d:77:
db:f9:cc:64:c9:fe:f8:fd:5e:ce:c9:a3:58:cf:bc:
f5:f1:8f:04:c0:ad:95:8a:bf:6c:5a:af:58:1c:2d:
ac:b8:e5:fc:0b:1b:b9:99:b7:cc:39:6a:5b:3c:70:
37:05:bc:60:4d:5c:dc:22:e3:0b:af:4e:d6:9d:5a:
11:fa:43:73:96:93:6a:09:13:3c:b0:75:22:10:75:
c8:15:26:ef:08:76:80:33:46:80:6a:5f:97:08:ec:
d4:82:2d:63:1b:22:10:b3:cd:57:c6:f5:18:d4:c5:
10:ca:d0:16:83:df:bc:1a:a8:25:f5:03:9e:e4:05:
cc:16:a7:7c:36:5f:d9:39:69:5f:57:2a:1e:c0:ea:
95:2c:40:e7:28:c3:ac:f8:d1:38:83:59:9f:99:3d:
24:24:75:17:d4:d5:c4:d2:c0:15:eb:5d:c7:01:2d:
59:4b:9d:f9:49:05:16:48:81:bc:ff:f8:71:3b:19:
d2:6d:9f:79:cb:77:57:81:0a:38:b0:5d:0d:a0:72:
91:65:d3:c6:3f:a3:d9:f7:82:aa:a2:c5:a2:6a:e4:
1f:a6:a4:a3:aa:25:33:7c:b1:f8:85:76:4b:08:57:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C9:69:A0:20:C8:3E:C0:04:DD:F7:90:69:17:8D:DA:8B:98:AC:B3
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:29:8b:47:02:a0:c1:85:61:1a:66:b4:c1:0f:a3:36:fa:d5:
0e:e9:fd:34:f5:7f:71:51:49:38:d8:6e:9b:7e:0b:fb:e6:62:
e0:65:09:77:a2:1e:57:3b:b0:07:5f:af:a3:af:47:93:4b:d4:
82:20:7d:01:1b:17:bf:66:80:f7:59:00:a5:2f:1a:5e:f5:7e:
6e:df:4a:2e:d1:d4:a3:73:60:7d:ab:eb:8b:2c:16:f6:ea:c1:
25:cb:7b:ad:e6:bf:d5:ee:b9:40:e3:11:41:fe:9b:f7:f5:76:
f9:e6:fb:3d:d3:54:ec:17:2d:98:33:2a:3b:e3:a3:11:e5:46:
60:42:ed:d0:bf:64:37:36:d2:a7:26:d6:77:ab:72:db:33:88:
93:c8:57:96:15:b6:3c:68:f0:1f:e1:9d:f1:e6:4e:da:5d:1e:
f5:b3:5d:75:d3:aa:3a:c2:37:12:a4:55:4f:fe:1b:c0:4c:14:
87:bb:0f:ef:9c:c5:e4:e6:62:40:4a:11:77:4f:e8:71:bc:4a:
ca:c9:4d:a2:07:84:29:a0:2c:57:5e:35:a6:63:8b:1d:44:c9:
45:bd:e5:12:27:e9:1b:ab:a6:46:79:09:97:49:38:77:32:e4:
d1:ca:ab:e5:c1:85:8c:e9:a7:1f:97:03:3d:d7:5c:0a:e2:d7:
01:19:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:26:16 2024 by rpki-client on console-fra.rpki-client.org