Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File: tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier: AIYQa1JlpS6aLjqdw+NWiGGNJh7vHooIhUHEKh8nMaQ=
Subject key identifier: A0:45:E7:38:AB:44:18:1A:7A:EB:0B:AE:36:E4:F0:D5:D4:06:21:C0
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 018F874A0A398656CD32A213E04D567FF4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number: 0418
Signing time: Fri 17 May 2024 16:02:07 +0000
Manifest this update: Fri 17 May 2024 16:02:07 +0000
Manifest next update: Sat 18 May 2024 16:02:07 +0000
Files and hashes: 1: BBIzMd4cxInJmVK7Qydc8xiuYqw.roa (hash: 4GQ+jspCjXdjSz7kKb+m/EVB191Qu2mjKUEluAYdxuE=)
2: rK5roigYfXhL7vARVIMa5XfmHCM.roa (hash: lCJMW0BI6GD5AqnE9DylwRMypthcF7aLclly5Z7Vpyw=)
3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: uWxoKb2Ier84trrkS8wfEEVR2c21JdGQF4oJBze2AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:0a:39:86:56:cd:32:a2:13:e0:4d:56:7f:f4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: May 17 16:02:07 2024 GMT
Not After : May 18 16:02:07 2024 GMT
Subject: CN=a045e738ab44181a7aeb0bae36e4f0d5d40621c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:ee:de:63:17:7d:15:bb:3e:a4:93:47:ac:
e5:e6:04:88:7c:db:f3:74:20:e3:ca:ca:b0:75:d2:
7d:6c:be:0b:34:26:84:5f:53:5e:a7:b1:72:7c:1c:
3c:11:44:52:70:4b:2a:5d:00:49:c5:51:59:b2:d6:
7b:cd:cd:2a:b7:0f:a8:b5:f7:4b:ea:ac:71:1d:2c:
0b:09:98:eb:39:e7:40:91:23:d6:8e:1f:c2:38:cb:
41:55:c2:da:0c:6f:d9:62:21:f9:38:f9:f5:aa:50:
4f:d9:90:7b:2d:e2:fe:83:20:06:31:06:81:cd:86:
9d:1d:ab:05:3c:18:b1:d3:56:3a:31:03:de:47:cb:
5d:92:66:7a:47:9d:2a:d5:bd:ca:4d:d7:04:a9:53:
76:f9:d4:28:5b:ae:41:7e:ee:d5:35:f8:dd:ea:ab:
6b:ff:6b:0c:fb:34:af:7e:3c:61:ab:c3:9b:d7:53:
d8:92:dc:bb:56:c2:87:d4:08:c4:61:ff:32:4d:2c:
0c:33:59:c5:45:63:06:c2:e9:54:83:25:22:a6:b9:
ea:d2:b5:65:8f:0c:cd:e1:91:f1:63:93:6a:92:99:
77:f6:35:c7:f6:f7:5b:33:e6:29:c6:d4:78:81:c7:
34:85:53:57:e2:4b:ff:66:84:20:58:5c:81:b1:e1:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:E7:38:AB:44:18:1A:7A:EB:0B:AE:36:E4:F0:D5:D4:06:21:C0
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:b3:94:3d:b1:7d:b7:25:d6:e8:92:a6:ce:bf:45:bc:4a:
42:4b:73:b1:53:ef:37:32:6c:5b:45:f1:f3:61:9f:4c:b9:ae:
f3:51:54:0a:4a:62:0b:7c:83:78:9e:37:c2:3e:fa:16:c4:71:
55:34:32:f2:4e:99:9f:04:e1:5d:10:1f:20:d0:bb:80:a0:75:
88:91:53:9e:59:6d:0c:b0:a8:41:cc:22:7e:4a:2c:50:e1:3d:
fb:3a:5b:94:3c:ea:4b:f7:1e:dd:b5:ad:9a:35:f9:ec:33:20:
ba:44:bd:95:12:af:7c:74:4e:96:49:cc:3c:7d:47:c4:27:57:
35:0e:45:fa:2e:d4:c2:66:1e:23:9f:12:f3:73:b7:2f:b4:d7:
db:00:1d:4f:a2:53:6c:93:0c:93:3c:20:a8:2b:7a:82:ca:47:
c7:89:fe:f8:c2:9b:18:d4:5c:2a:c1:99:3e:ea:5f:00:e9:dc:
2d:35:e9:f1:d1:80:51:a0:c7:18:b3:92:d6:4d:8b:04:93:84:
d3:64:d0:9d:2a:2f:5f:13:35:82:5f:2a:00:b9:bd:2c:32:fb:
cc:79:8f:b3:59:76:00:fd:2e:a1:f7:37:1c:d9:19:ce:d6:67:
0f:96:f8:53:37:de:a3:e7:94:10:c8:10:37:b5:e2:d1:0f:3b:
6d:0a:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:44 2024 by rpki-client on console-fra.rpki-client.org