Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: x5jDkpfTRCxCspQ7upxGHDB4SW4danFjswqXRxIG8iw=
Subject key identifier: E8:43:2F:70:42:8C:5F:C2:4A:13:47:74:0C:9B:4B:4F:D4:21:2B:AC
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 018F42D6674C3864102203696B60FC603B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 0CA7
Signing time: Sat 04 May 2024 09:01:38 +0000
Manifest this update: Sat 04 May 2024 09:01:38 +0000
Manifest next update: Sun 05 May 2024 09:01:38 +0000
Files and hashes: 1: 3GjCQVWzGhZ9clnIHVfAC4ZIBOE.roa (hash: KddN6Fiv6XXI/LXB7saLFxICYbtQ5ela92BIg1jwFaE=)
2: 7_wG1qywB41busNPNyk58KBjTn0.roa (hash: CmAestMIVAI/htSVKCV+fMLI0A+sTiBwEXeUtUi2pSs=)
3: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: SoeiKyjD30ASjzsfDjIa3R1Lmhe+eFMBfYzdudpmpXU=)
4: LAhYdxfaM6Zs-HoXI1a3UbPX4xE.roa (hash: pwTodIZuuYqTvbBnaCVRMWAvMtiWCyRaBs4RZ/skCs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:d6:67:4c:38:64:10:22:03:69:6b:60:fc:60:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: May 4 09:01:38 2024 GMT
Not After : May 5 09:01:38 2024 GMT
Subject: CN=e8432f70428c5fc24a1347740c9b4b4fd4212bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:9e:b6:1c:fb:5b:3a:4c:c3:a3:75:99:11:
f4:8e:20:c8:39:74:f9:29:30:60:64:65:ad:76:bc:
4b:53:29:3a:2e:22:e8:c5:94:8a:7e:4b:8b:84:9b:
6b:d9:c3:af:d7:0b:2c:de:68:40:ae:35:c0:83:63:
f7:ce:73:f9:d7:53:7e:5b:72:75:91:21:75:b9:4f:
f5:aa:4d:4d:db:4d:be:8c:dc:55:86:2f:f2:55:79:
78:30:93:86:64:fa:5b:05:ce:aa:9e:41:fd:1f:c4:
51:93:02:69:ea:a5:91:43:e0:2e:51:d4:ee:64:7e:
28:b3:47:4c:13:0c:2c:74:df:00:32:23:5c:cc:6c:
67:d1:c6:88:4b:81:6a:09:b6:08:ab:73:fb:3c:74:
39:92:bd:ab:79:19:7a:95:b4:9c:ad:31:80:13:cf:
47:17:83:b3:bd:f5:81:31:ac:40:20:29:83:b2:92:
66:52:8a:49:b7:f5:fb:94:e2:2f:29:2e:e1:75:bc:
ee:1f:b8:e2:ae:3e:00:c9:67:89:ee:cb:96:81:8e:
34:be:19:ed:33:78:d6:fb:38:a0:1f:30:b8:89:85:
97:aa:f0:56:07:9e:10:37:ef:36:09:b6:5a:6f:64:
a2:84:e9:28:03:5d:53:30:13:58:3e:44:bc:9b:2d:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:2F:70:42:8C:5F:C2:4A:13:47:74:0C:9B:4B:4F:D4:21:2B:AC
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:28:f4:89:26:70:ef:2d:7d:67:79:d1:c5:f3:c8:6c:3c:
a8:a5:aa:6f:e9:86:51:bd:c2:f1:7b:ef:b4:4f:a4:fa:7d:49:
83:92:c9:bc:3b:b8:21:a3:13:79:f2:ed:9b:7a:02:5a:70:28:
46:4d:4b:d5:af:cf:d7:11:22:14:3e:4c:d7:4f:23:3d:ae:db:
f5:a6:45:f5:18:c3:57:2c:8a:8a:6a:1a:a6:97:1d:63:b7:e6:
64:34:3f:1c:56:b2:fc:42:45:35:2e:a4:63:59:69:de:27:d1:
43:1a:82:06:77:1f:7c:94:35:31:31:c9:61:21:41:a3:85:22:
77:6f:51:bd:71:98:d9:56:e3:97:4d:65:71:66:73:7e:eb:36:
9b:f0:8e:95:62:7f:f7:39:2f:04:a5:d4:d7:50:2f:c0:1b:07:
73:95:fc:ba:96:ce:4d:ba:d0:bf:f3:8b:ff:22:87:50:10:c6:
80:24:88:c6:fd:99:db:a9:df:97:87:d9:aa:a8:35:8f:8b:d6:
f2:11:09:91:19:c6:f5:25:79:ee:2b:3a:02:b5:04:90:2b:6b:
d6:f4:8b:60:65:6e:c9:cf:ae:0f:33:15:83:51:2c:83:58:40:
1f:eb:b3:ed:0a:c9:a8:5b:db:b1:be:76:c8:ce:1d:db:f0:36:
d5:b5:02:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:26:36 2024 by rpki-client on console-fra.rpki-client.org