Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: XWe7LpDpD4BxICYrv3ZA732eTv4jI5mkCUmJZr6k71w=
Subject key identifier: CE:AD:08:8F:70:4E:0D:6B:50:1F:85:05:A2:6C:CD:DA:0A:0C:2A:0C
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 018F467BD1E4594263A7FEED2581E72C7133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 0BED
Signing time: Sun 05 May 2024 02:01:10 +0000
Manifest this update: Sun 05 May 2024 02:01:10 +0000
Manifest next update: Mon 06 May 2024 02:01:10 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: OyTlv4mQKUOn8qC0pO4LSLi2r3+TKAQUBtDRt8pLRXY=)
2: zaSKpF2sXN10hG7kkAflZzJv_DM.roa (hash: A/vtZtbag9cSGoLxmWXAvZrP/K9FMWhUP3VJQ078BTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:7b:d1:e4:59:42:63:a7:fe:ed:25:81:e7:2c:71:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: May 5 02:01:10 2024 GMT
Not After : May 6 02:01:10 2024 GMT
Subject: CN=cead088f704e0d6b501f8505a26ccdda0a0c2a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:89:dd:2a:6a:ee:3d:33:48:0e:94:37:a3:
03:0d:0f:b7:5c:b2:6a:4e:d3:b1:69:13:7a:61:eb:
ee:24:f3:6f:6e:45:de:21:54:04:d7:5a:e5:91:88:
24:0f:14:0c:03:c4:fa:e7:13:d8:07:39:3e:b9:64:
1f:04:85:73:7c:ec:f5:0a:4e:ea:f8:b8:60:bc:eb:
1d:32:93:b7:22:09:3b:fd:be:3f:c8:a7:85:52:9d:
45:e9:0a:1d:f6:b7:bb:5e:91:2f:bf:22:0b:f7:38:
3b:dd:a6:f5:23:bf:44:91:a8:b0:e4:e1:75:c3:78:
0a:3b:12:5c:54:d2:10:4a:68:7b:06:ed:c3:2e:c1:
94:49:1f:bc:eb:6f:5f:57:32:be:54:e9:71:a4:ad:
6f:e2:7a:ab:f0:69:23:e1:d5:7c:dc:f6:4e:ed:2c:
dc:08:77:13:5c:47:7d:68:d7:3d:b4:92:c4:a4:fa:
bb:f5:c8:33:01:d1:3b:74:c2:42:6e:0b:1c:3f:2a:
6c:78:9f:c2:3f:c0:af:13:e7:81:e8:da:c4:58:80:
1a:f4:4e:d1:82:47:c8:27:29:fc:d8:5f:14:b4:49:
0b:cd:ff:33:7b:08:05:f0:ce:1b:02:90:ea:44:e8:
9f:82:26:ac:dd:0b:bf:1c:c7:28:2d:1d:55:62:5e:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:08:8F:70:4E:0D:6B:50:1F:85:05:A2:6C:CD:DA:0A:0C:2A:0C
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:38:bd:ad:ca:73:d7:7a:b3:c9:7d:1d:e8:2e:62:54:4c:
48:d3:e5:01:7c:9c:b8:09:fa:20:56:ef:05:03:12:1a:59:75:
f5:f7:a4:63:c1:ad:e4:e6:92:74:6c:e6:2a:f1:98:64:44:3b:
07:2e:4f:eb:0a:6c:b7:45:e5:95:b6:e8:be:be:65:b4:22:3a:
6c:14:3d:83:cd:3e:4b:20:df:66:57:bb:aa:97:67:8a:0b:a0:
79:2c:d4:4c:92:c8:f9:c7:11:1d:d5:89:ac:06:45:70:ba:79:
38:45:29:36:e8:b8:58:ab:e9:56:2d:26:e8:33:2d:8a:4f:26:
8b:41:c5:10:3d:ee:84:b8:10:91:ec:22:df:fe:3a:7c:6a:e2:
23:fa:47:dd:c7:25:b1:c3:33:37:c8:86:fb:30:ac:86:07:d0:
4d:3b:d6:86:01:2c:62:e1:00:6e:aa:24:bf:79:ca:53:19:f2:
c0:96:43:a7:e5:35:ad:13:03:e6:56:cd:d8:f1:70:b9:0a:52:
d3:46:6a:96:8f:ac:4c:10:75:a4:a4:0d:80:9b:a4:75:2a:56:
51:99:dd:5f:5a:3e:ca:1a:31:72:20:35:96:15:75:42:4e:9b:
3d:87:21:c4:2d:5e:9f:6d:98:1c:04:e5:c5:d6:42:26:1b:7b:
02:33:63:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:42:43 2024 by rpki-client on console-ams.rpki-client.org