Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: CjmzNMGteFSvfc2cw8VeU126vmFdH9CPK11aHgy5IKA=
Subject key identifier: 1E:A5:5A:AF:86:EE:CC:B0:F8:DF:AB:D4:A8:C2:B8:B8:BA:0F:ED:CF
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 018F45A29FA1C3E391F645BD7D79DFF709C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1156
Signing time: Sat 04 May 2024 22:03:56 +0000
Manifest this update: Sat 04 May 2024 22:03:56 +0000
Manifest next update: Sun 05 May 2024 22:03:56 +0000
Files and hashes: 1: 6DnGXUB_wT475SR2lm8K-heAolc.roa (hash: /6iUZT6Wx1vvrq4UjQvtfNDEUq53yodiByx+CWXBehY=)
2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: IblceNqcCx6rEwba6ZE3SqrwQuYU1hvc5bK5QUJKDaM=)
3: 7_8eegxQyLP71BAmskazel0YJyc.roa (hash: NYmvQ/hnUv8GThLMHY/Fn4NRNuJobGMAd9a/vhWzZTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a2:9f:a1:c3:e3:91:f6:45:bd:7d:79:df:f7:09:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: May 4 22:03:56 2024 GMT
Not After : May 5 22:03:56 2024 GMT
Subject: CN=1ea55aaf86eeccb0f8dfabd4a8c2b8b8ba0fedcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:f0:75:ab:82:3a:10:8a:4b:68:ac:40:19:
7a:25:be:28:88:16:f1:cb:af:af:cc:7e:cb:f7:81:
df:0b:a5:98:09:ff:d8:27:a7:0f:6c:35:3f:b9:85:
6a:3f:7a:63:76:55:7b:47:e1:c8:fc:8d:56:35:17:
3a:ef:de:22:10:80:98:fd:6f:1c:9a:9f:fa:67:0e:
af:c9:06:9c:e3:88:a4:56:a4:04:35:62:0b:0d:e6:
1d:e8:d3:a0:58:bc:55:24:36:52:14:47:a4:60:71:
cb:cb:97:0a:9a:c8:c4:8d:08:d7:e7:fb:09:0a:d8:
09:8a:20:05:57:b7:a4:e7:b8:3a:66:e6:ca:a8:83:
fc:b0:68:fb:b4:c2:0f:81:05:25:df:89:cb:f6:5a:
fb:96:bf:1b:ae:04:c5:3b:35:af:55:ad:46:b8:4d:
bb:56:41:9f:f9:0f:ca:64:0f:be:65:32:d0:42:b7:
b1:42:23:ac:86:8d:ea:85:03:ba:20:d2:27:e8:f5:
d3:6c:91:1b:19:3f:f8:60:56:dd:01:88:83:35:13:
07:5f:a2:b6:d2:a1:40:a9:c8:ff:ec:9d:02:cd:b6:
56:be:35:27:f0:74:c4:79:c8:6a:3e:f2:02:7c:b1:
2c:8e:3b:77:3e:eb:96:8c:65:b1:e7:d8:b4:65:e9:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:5A:AF:86:EE:CC:B0:F8:DF:AB:D4:A8:C2:B8:B8:BA:0F:ED:CF
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6d:1d:e0:2f:5c:e0:58:10:c3:43:41:cd:c3:53:1b:ab:32:
2a:7b:1f:a7:f0:b4:e0:66:41:1f:3a:bd:9b:1f:28:9c:8f:dd:
ae:8f:e8:84:a4:3e:50:f8:fb:a3:c7:16:97:90:96:a5:21:89:
42:25:a8:77:38:f7:a2:a9:01:36:6f:ff:ce:eb:e6:cc:f4:f6:
a9:f3:83:bd:d4:d8:b6:c0:ce:ac:5e:37:a2:9b:ef:df:4f:1f:
b0:15:0a:5b:72:9d:c8:79:b0:b0:c4:8f:13:75:1e:0a:98:4b:
9e:dc:d7:44:f4:3c:0a:99:1a:a8:c2:52:98:76:40:12:3b:aa:
b5:32:fe:b9:ff:10:5d:58:ac:17:e7:58:49:56:4d:f2:67:0d:
6b:14:b7:3b:ad:67:bc:ae:de:bf:a0:90:66:34:17:9f:21:55:
05:dd:ff:35:eb:e2:94:46:2b:23:c5:c1:13:54:9c:82:6a:61:
5e:51:d2:96:a6:73:3d:f3:60:15:4f:dc:0d:94:2e:2b:60:04:
96:f6:04:9b:e1:1b:ed:49:f9:74:cb:4d:35:e5:87:03:03:33:
fb:54:0d:03:f6:20:58:90:45:42:ba:4a:f5:73:ac:08:5e:f9:
a1:71:5b:4b:04:cb:ae:f0:66:a7:36:1d:79:0e:fc:40:5a:f9:
15:7e:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:16:38 2024 by rpki-client on console-ams.rpki-client.org