Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: FI0ZNIOy1Uo9q/A9yhbGD/ro7Wh4FJkipsH4ShdNKBE=
Subject key identifier: EB:1C:D9:03:16:71:C1:7C:16:E6:0F:98:21:AB:50:93:B4:8B:F5:62
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 018F31746AD6BB0990AFB81DC6721D588DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 10DE
Signing time: Wed 01 May 2024 00:01:04 +0000
Manifest this update: Wed 01 May 2024 00:01:04 +0000
Manifest next update: Thu 02 May 2024 00:01:04 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: nGUodbbeTQJqGBlOJQHAMQWeGoA40/8fatgdsVdUc4U=)
2: j6UeaMhZyAW78buT9jaExqjuHao.roa (hash: RUT9ykd9VcM3fRPwir4rsYlh/mQsH6jVCY7ckwTkoSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:74:6a:d6:bb:09:90:af:b8:1d:c6:72:1d:58:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: May 1 00:01:04 2024 GMT
Not After : May 2 00:01:04 2024 GMT
Subject: CN=eb1cd9031671c17c16e60f9821ab5093b48bf562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:ab:9c:d3:64:a4:fa:de:25:e9:d8:6d:44:
9f:d2:74:6c:f8:e0:01:84:a1:6b:1f:57:88:a2:fa:
2a:ae:6d:49:0e:0d:aa:4e:e7:d2:53:c6:36:40:b4:
3d:63:d9:b6:2f:a5:5b:6e:6f:07:b6:c5:29:05:65:
9f:ff:31:1b:0d:62:44:bb:f4:a7:6e:14:59:15:a8:
ad:09:7f:ae:8b:e1:1c:f1:0b:16:9b:8a:33:2f:11:
40:be:ab:06:3c:26:1a:41:b0:f8:3a:07:fe:7b:a5:
3d:12:88:45:f2:ce:e0:5b:d3:98:1c:08:5f:d5:64:
ee:6a:9a:83:e5:3b:16:14:20:29:f1:91:84:f7:64:
dd:8f:25:ed:2f:9f:32:0f:0c:5b:ce:a6:05:97:03:
34:8a:eb:be:1a:bd:ab:28:7d:7c:68:04:11:28:9f:
ff:87:51:4a:11:87:78:bc:62:7a:09:d5:88:87:4a:
29:73:40:73:cc:1e:92:5a:08:06:51:6a:c7:b7:98:
68:7e:75:cf:77:77:56:10:70:74:25:ba:49:e5:67:
91:e4:68:6d:26:b4:c1:c4:43:84:2e:5d:52:41:07:
5a:57:b4:00:b8:ff:bc:85:89:57:46:1b:03:0e:c1:
f1:1e:c0:b1:75:db:d1:e5:5c:f3:e6:75:02:ef:5a:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:D9:03:16:71:C1:7C:16:E6:0F:98:21:AB:50:93:B4:8B:F5:62
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:e9:e2:62:39:9f:a0:77:c6:e2:b9:ef:e8:a7:57:a3:1d:
f9:3f:d0:13:4e:76:3c:64:5c:27:d9:13:d9:1c:e8:52:25:7b:
90:af:10:ca:02:ee:84:bc:aa:7d:47:fe:12:94:b1:06:f9:97:
40:42:9a:a3:42:e2:69:9c:60:c8:76:c4:2c:ba:a2:99:af:50:
bd:ed:9f:2c:bc:03:40:68:52:e0:d1:a3:82:e5:f9:2a:f6:73:
d5:3e:8b:47:12:18:e7:06:dd:39:8f:3d:1a:6a:7d:58:47:8d:
e1:dc:f9:c0:76:2c:cf:97:37:3a:2f:0b:9e:17:7b:3b:ef:fc:
8a:66:f9:4b:1a:c2:2c:5a:61:c7:9e:07:47:a8:25:44:5d:a9:
0a:c2:db:51:fb:f8:b0:f1:2b:a7:d4:bd:c3:a8:4e:d3:9f:29:
c3:c2:a6:61:dc:55:6b:60:8b:09:6c:95:3d:28:9e:e4:d9:78:
ec:22:d4:48:91:14:ad:c0:31:53:66:8c:93:b2:b2:c7:37:77:
e5:08:0e:af:33:04:c9:3b:dc:5f:a3:85:e3:ca:3c:f3:83:78:
e9:63:59:5e:11:1a:a4:97:d4:0d:7a:0d:16:f1:0f:eb:70:c3:
a3:85:8b:3f:fe:c6:b7:3f:30:07:05:d8:be:45:12:99:35:2a:
96:b4:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:22:48 2024 by rpki-client on console-fra.rpki-client.org