Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.mft
File: iFu5uIz0iegP7mHwmOgIaBEDhxk.mft (raw, json)
Hash identifier: KJXiKv8rzHoW3OGkT6hhv8Y7SjxcHFyd4VYCJO3+tTQ=
Subject key identifier: FA:52:5A:A1:F0:1B:7A:3D:AB:C7:36:65:CD:86:91:B4:DC:21:3F:BC
Authority key identifier: 88:5B:B9:B8:8C:F4:89:E8:0F:EE:61:F0:98:E8:08:68:11:03:87:19
Certificate issuer: /CN=885bb9b88cf489e80fee61f098e8086811038719
Certificate serial: 018F953B271B72F627F5609C8FC0EB16A58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFu5uIz0iegP7mHwmOgIaBEDhxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.mft
Manifest number: 03BC
Signing time: Mon 20 May 2024 09:00:32 +0000
Manifest this update: Mon 20 May 2024 09:00:32 +0000
Manifest next update: Tue 21 May 2024 09:00:32 +0000
Files and hashes: 1: Ddt11r4KTOu4-iGllnZjy_mgsF4.roa (hash: Th4/KLHitv7ty9K8/pxSnMIA6bIPcW/23rqmdb0Dp1I=)
2: iFu5uIz0iegP7mHwmOgIaBEDhxk.crl (hash: GsTJ7S6h34X3LjHMkDHnLqzxcKCjoVwQMujocZgvLYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFu5uIz0iegP7mHwmOgIaBEDhxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:3b:27:1b:72:f6:27:f5:60:9c:8f:c0:eb:16:a5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885bb9b88cf489e80fee61f098e8086811038719
Validity
Not Before: May 20 09:00:32 2024 GMT
Not After : May 21 09:00:32 2024 GMT
Subject: CN=fa525aa1f01b7a3dabc73665cd8691b4dc213fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:b9:34:b5:53:66:36:6f:4b:e8:a7:50:d2:
9b:48:e2:d7:cf:11:11:ba:3a:11:99:88:93:58:5a:
1f:fa:34:9a:b4:09:de:ed:be:89:7d:5f:64:b0:27:
f4:30:6b:bf:a2:58:8f:31:ea:2c:2b:ab:15:c8:c5:
9b:bd:88:1d:29:01:ae:45:b0:65:75:56:2b:ae:ce:
d3:68:3e:2a:a0:02:42:40:5a:18:90:c8:1c:ab:5b:
1a:48:4b:b4:3e:3f:47:b0:50:62:37:9c:24:63:cf:
98:2c:7d:90:83:a4:85:7b:8c:08:11:fc:88:3b:cd:
a9:c9:d2:24:fe:7a:3a:cd:d6:9e:bb:74:41:6a:0d:
86:cc:9a:46:24:6b:17:2c:9b:5c:41:d7:87:cd:25:
da:46:a4:cf:64:e4:af:04:2d:ad:53:fe:97:3e:c9:
4f:36:e6:58:6b:d7:53:42:2d:b3:12:bc:73:06:e8:
0d:e9:37:3a:c4:63:33:8b:f5:36:56:a8:ce:fc:cf:
a3:ce:89:b1:3f:7d:ba:ac:8b:63:1c:88:dd:65:c6:
ba:33:44:97:c2:6e:32:b4:35:8b:ae:c3:19:3e:48:
a5:36:8c:fb:e2:9d:ab:f1:a7:b7:94:b0:5c:1b:26:
e5:65:1d:1d:79:ed:39:d7:d7:58:ea:a7:45:47:aa:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:5A:A1:F0:1B:7A:3D:AB:C7:36:65:CD:86:91:B4:DC:21:3F:BC
X509v3 Authority Key Identifier:
keyid:88:5B:B9:B8:8C:F4:89:E8:0F:EE:61:F0:98:E8:08:68:11:03:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFu5uIz0iegP7mHwmOgIaBEDhxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e85c71-26cd-472b-bd9a-c3f8a8cee9eb/1/iFu5uIz0iegP7mHwmOgIaBEDhxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:88:50:4e:73:1d:83:fc:3d:6e:69:51:d5:72:6a:f9:40:
89:90:54:f5:eb:1b:c2:45:34:01:1f:56:05:3c:59:30:3c:6e:
b9:c8:89:51:dc:2c:e3:24:10:50:34:d3:38:44:a6:f1:7f:56:
43:f0:ad:53:57:4b:f0:3a:71:80:94:4e:80:51:d5:be:ad:a2:
64:65:21:86:0b:b5:12:6b:35:83:bf:76:63:ab:c7:29:75:99:
8c:d9:3d:d4:1f:32:1e:db:a8:82:dc:6d:07:1e:0d:8f:51:03:
10:80:72:e1:1c:89:10:66:fd:fe:86:40:3b:28:e7:89:33:34:
ad:2e:81:9a:bb:26:af:46:f3:93:8d:0f:54:6f:fc:8a:11:be:
d7:83:d6:81:9e:b4:8b:91:99:68:8a:b0:91:16:10:39:fd:41:
3f:dd:93:ff:0e:d3:a1:18:81:2a:11:f6:1e:96:ce:86:cc:76:
fb:4d:b8:8f:22:0a:13:9c:ff:de:68:76:4f:fc:34:5b:dd:5f:
42:57:e0:2a:07:e5:09:43:3c:c9:7c:09:4f:58:64:e0:64:4f:
c3:88:63:b6:26:66:d9:67:2b:25:95:c2:d0:54:25:fb:7c:cb:
9f:64:d2:81:bb:e3:14:b3:51:3d:1b:1f:59:dc:4e:85:51:7e:
43:f8:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:31:58 2024 by rpki-client on console-ams.rpki-client.org