Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: h1wsBtKT3xDB5kQiWCXJuiLFfvllDz9G6WGbaos834c=
Subject key identifier: 8A:D6:34:61:BA:A1:7C:BC:EE:18:16:0E:90:92:1D:F6:F8:11:E3:F7
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 018F521203FB7D6539CC92C4BAAF44013030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 0E74
Signing time: Tue 07 May 2024 08:01:03 +0000
Manifest this update: Tue 07 May 2024 08:01:03 +0000
Manifest next update: Wed 08 May 2024 08:01:03 +0000
Files and hashes: 1: VNGm0-XEqEwFjPetPXGa9H4vkhs.roa (hash: RfZMCsV+YaD+73y+1J8973Vb2JKg8pf44L9tvREV9z4=)
2: Wqq7MOchCLQImeisA9VO-RCRes8.roa (hash: Wo+f15Q1xZv6Z5p1WFovLhjfU6jJ+hez6UOYcYgTQTM=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: JV4Ki/tvwgHHGbjr0cupnT6cNVnM3xGwBz1qLtSIR2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:12:03:fb:7d:65:39:cc:92:c4:ba:af:44:01:30:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: May 7 08:01:03 2024 GMT
Not After : May 8 08:01:03 2024 GMT
Subject: CN=8ad63461baa17cbcee18160e90921df6f811e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:44:3f:06:db:a1:f1:a1:cc:38:bc:20:51:
d9:0c:c5:85:b6:81:69:d1:69:0e:7c:bf:59:6b:8d:
66:97:8b:da:e6:73:47:2d:59:ab:a2:da:7b:ef:44:
b8:59:76:db:e7:93:f6:b4:e2:97:57:15:86:06:b8:
84:7f:4d:53:5b:90:b0:cb:91:33:fb:16:a6:15:34:
09:9b:c1:9f:86:ed:f0:38:63:4a:fe:9f:e8:94:5d:
08:71:98:80:c3:3a:c1:6f:91:f3:5e:73:b0:1e:4b:
42:79:fe:9c:de:d1:e5:0b:be:b6:c9:43:7f:7d:04:
e7:99:1b:e5:23:1f:b9:78:a6:9b:d3:ce:6e:82:38:
12:80:d0:09:95:7b:7a:55:8d:d2:07:d3:fb:bc:a8:
0a:63:da:82:2e:b9:8a:4b:6f:54:55:d5:0b:22:9c:
1e:d3:4f:d4:7b:57:f1:12:ae:8b:86:a6:92:e7:55:
ec:bb:1a:68:2a:d1:30:b0:cd:b8:41:a2:39:0d:47:
b5:21:7c:d9:63:29:a1:f5:ed:d5:e1:9e:e9:61:d4:
37:58:8c:80:8f:d8:ea:a5:f8:fc:f9:28:06:0c:31:
52:ff:0b:9d:be:68:ba:76:ab:68:8e:40:0b:ac:ff:
62:9a:33:e7:03:af:52:ed:26:ad:a4:70:fe:3f:54:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:34:61:BA:A1:7C:BC:EE:18:16:0E:90:92:1D:F6:F8:11:E3:F7
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:51:37:a3:cc:3c:de:c7:98:ba:e1:61:51:71:0b:aa:6d:62:
47:48:0e:e4:c3:02:c5:6c:cb:c1:52:d9:40:59:79:97:98:8c:
e0:58:87:8a:5c:69:e9:44:34:18:cf:4b:33:f2:07:69:e9:4a:
42:39:44:a7:dc:55:31:b3:32:9b:19:92:2e:57:e9:fd:f6:f0:
e9:5b:1f:71:63:69:cd:29:cd:f5:cb:77:fa:56:77:b0:8b:f2:
39:54:4b:69:06:87:8d:70:a6:07:a5:f1:60:69:99:1b:ab:5a:
5c:83:8c:68:36:f2:95:c7:85:e0:40:91:c8:31:a8:06:54:35:
30:4c:62:d7:b8:e9:9c:d0:eb:3c:0f:c3:2f:e6:cf:0f:94:ff:
f1:88:b8:c7:d8:ed:6e:37:15:ae:c6:1b:fc:bf:7e:dd:8e:83:
a9:6d:a2:bb:b1:17:10:db:e6:1e:a4:e8:8b:e8:fb:75:a2:07:
89:e7:f3:97:6c:1c:27:00:e4:1f:6a:8f:1e:ab:5c:aa:4e:5b:
4d:d5:b2:48:60:d0:b8:c2:43:14:08:77:e9:7a:51:fb:72:0a:
0b:57:43:a1:ab:c9:6d:fc:0d:cb:63:21:06:73:c8:71:9f:56:
55:45:b0:52:11:bb:4f:46:28:e9:2c:66:ef:44:1e:32:e4:23:
d2:23:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:10:41 2024 by rpki-client on console-ams.rpki-client.org