Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: yELC+eFNG09VT72ISbjoXp6ScMV+0yyA/s5Dqg7A16g=
Subject key identifier: D3:EA:C9:E7:4E:C3:E1:FA:8D:CD:95:E5:05:E5:63:73:7D:2C:79:C3
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 018F866C8C335E61133AD8E1EF82D76EC236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 117C
Signing time: Fri 17 May 2024 12:00:11 +0000
Manifest this update: Fri 17 May 2024 12:00:11 +0000
Manifest next update: Sat 18 May 2024 12:00:11 +0000
Files and hashes: 1: 1j5RUArzQB-5Ow7hsVWpjRBHrdU.roa (hash: FNbKzcVERtvCknfkpof6VTXw2T9bR2kIoHfVjL012h4=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: oowTDDxQSEFwx+3exgbEqtT0eumz5HO8+GNB7s5loms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:8c:33:5e:61:13:3a:d8:e1:ef:82:d7:6e:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: May 17 12:00:11 2024 GMT
Not After : May 18 12:00:11 2024 GMT
Subject: CN=d3eac9e74ec3e1fa8dcd95e505e563737d2c79c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a7:20:f2:7c:20:a3:03:16:13:f8:30:23:0d:
4d:3c:17:04:3e:84:53:2e:1c:af:94:34:f4:9a:67:
bc:e3:84:c7:d1:aa:5e:2b:7f:de:4f:72:01:47:98:
86:58:64:45:44:70:6f:2e:e7:31:15:d2:7a:16:a3:
34:59:e6:18:ba:f7:7e:b6:18:67:b2:f5:04:a8:01:
45:11:37:09:b2:c0:91:6f:b3:23:c5:a7:99:a3:ab:
43:62:9c:20:24:21:2a:21:66:a3:b5:b0:fd:4a:d4:
f5:ba:9c:69:4c:ad:bd:83:4f:4f:77:c4:5f:d6:43:
ed:2e:32:76:ad:7d:cd:b7:6c:84:45:03:d8:b8:18:
a6:a3:73:b9:81:f5:c6:36:f3:60:16:1b:7b:db:25:
75:d1:e8:1d:62:31:b5:4e:fa:22:e3:26:0b:72:20:
fb:b8:93:f6:33:66:da:4e:0b:12:0c:ed:28:9f:b3:
b4:94:f4:4c:bf:49:11:50:e0:e9:5b:ab:2b:6e:cf:
45:a5:8f:c1:45:2e:6b:e8:b6:9c:0c:73:96:b4:84:
5f:7b:bf:dc:9c:5f:cd:a4:28:35:39:26:d1:0a:7f:
44:57:95:8c:c1:af:90:15:e2:b2:c9:13:fe:20:cc:
74:da:c3:58:2e:95:92:6a:b3:33:eb:c0:29:cd:4e:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EA:C9:E7:4E:C3:E1:FA:8D:CD:95:E5:05:E5:63:73:7D:2C:79:C3
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:be:7e:c5:68:91:40:31:8c:5e:6a:e0:ea:85:65:b8:9b:6a:
51:c4:cf:7d:fe:3f:3a:99:11:4e:fa:c5:b8:b9:e5:9e:14:f3:
b8:9f:6d:91:c7:04:b5:4c:0e:bf:36:bb:83:22:fd:5e:99:e2:
98:4f:97:2f:df:34:5d:f3:6f:5f:c9:cc:1c:0a:fc:ec:0b:40:
9e:f0:48:0f:14:63:c4:5a:6b:ca:27:de:36:81:e5:31:5c:5b:
47:20:04:e3:c1:38:00:63:d2:1f:bb:84:c9:9d:8b:38:e2:1d:
4b:4c:fc:79:0f:8d:75:df:ae:28:ec:14:55:8e:6c:d2:64:9a:
5c:b5:26:cf:d6:6c:50:52:b8:a1:d2:53:45:da:cf:a5:47:44:
9e:ce:2e:35:5e:9c:2f:2c:5f:47:00:50:6e:92:be:26:bd:13:
b7:7d:3d:94:7e:fc:63:65:b2:db:7c:54:37:f5:42:91:32:e1:
05:a3:f2:38:7e:de:17:e8:06:0a:21:e4:02:04:ad:bb:ca:e6:
f9:57:08:6a:01:ac:5f:a1:d9:b7:18:02:5b:21:1a:bb:97:61:
00:40:a0:88:c2:9f:a2:93:f1:25:c2:54:59:13:49:a7:79:c2:
cd:a0:7a:f6:2a:de:db:81:6f:f3:b6:94:d9:03:49:2d:8b:3e:
e6:e1:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:29 2024 by rpki-client on console-fra.rpki-client.org