Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: I7fiBeDR7Y5TxpGEqk6T5o/JLkIMK3QM1AUQp6cJwIY=
Subject key identifier: 7C:9D:47:1D:13:F5:A9:EC:EB:00:0F:F2:15:8C:97:FF:FB:84:65:17
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 018F87ED920F8F5CB58E82660B01595C5B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 19:00:44 +0000
Manifest this update: Fri 17 May 2024 19:00:44 +0000
Manifest next update: Sat 18 May 2024 19:00:44 +0000
Files and hashes: 1: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: vjohwEZ9GJCNy+VXRwScTw54BkfY+yM/60DZsVdMJK0=)
2: pja1mcuE4fLv-SYAL1h7IMV8cNg.roa (hash: AHFc08AGYrXBXbMRJLm6ueHfvgcpPIfPuLJIXMUV43U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:92:0f:8f:5c:b5:8e:82:66:0b:01:59:5c:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: May 17 19:00:44 2024 GMT
Not After : May 18 19:00:44 2024 GMT
Subject: CN=7c9d471d13f5a9eceb000ff2158c97fffb846517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:66:47:87:d4:3f:f0:e7:b1:90:61:09:16:
96:a3:20:d6:a0:4f:4b:fd:9f:d2:c3:51:12:e4:74:
ee:5a:48:81:0b:7d:f7:29:5b:17:d4:67:0f:94:6e:
f5:c7:d2:99:e4:ce:7a:47:a9:e4:bb:87:82:68:fa:
f9:aa:41:14:e1:67:19:83:4f:1f:b4:c4:73:a6:af:
bc:02:ca:28:93:39:7a:9c:94:a6:d7:ae:9e:aa:1a:
84:04:a3:f3:6a:00:2b:e9:73:94:05:0b:7d:40:99:
cb:f5:9c:b2:cc:f3:04:8c:dc:15:03:87:ab:a6:0d:
8b:33:58:af:19:08:5f:1a:6f:4b:a7:1d:a1:de:6a:
97:09:8e:ae:a7:e6:11:6c:7a:dd:49:20:4e:b4:2b:
85:14:07:8c:33:2d:98:c2:f6:67:87:a8:f0:4e:32:
6a:a4:ae:63:40:b7:30:4d:05:62:67:24:b5:e4:04:
df:9d:8f:cb:37:22:b3:58:a0:58:34:09:64:2a:55:
b9:ff:7b:b2:05:ab:7b:83:97:d6:61:d0:e2:17:d8:
a0:8f:ab:c5:ff:78:3c:b2:0b:28:d2:ff:80:1a:fe:
e3:d8:0b:84:a5:a2:aa:f1:32:90:bc:c1:3d:ab:19:
2e:10:cb:54:bf:bd:25:49:4c:92:ff:67:91:a2:05:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:47:1D:13:F5:A9:EC:EB:00:0F:F2:15:8C:97:FF:FB:84:65:17
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b8:f0:70:3b:56:07:86:e8:bd:c0:41:94:0d:2b:b6:a1:5d:
de:b0:3a:63:3c:2a:5e:fe:9a:d1:85:d4:29:7a:f1:a1:78:a7:
99:9c:46:6f:fd:00:74:ec:9b:45:94:4a:d8:a7:15:65:69:05:
26:2e:45:dc:90:2d:33:cb:4b:df:b4:5c:27:80:b5:88:76:72:
df:fa:94:14:d0:a2:3a:e2:0b:9a:9b:4c:ee:ae:d4:c1:3e:fd:
1f:15:ac:4f:dd:99:6a:9e:3f:42:58:e1:1d:6b:11:ad:0b:02:
df:c2:4c:d8:87:1d:32:0b:bd:a6:24:c9:d0:07:5d:a1:42:85:
f3:44:a8:21:2c:06:4e:ab:07:a1:c2:b3:05:38:89:d7:c6:31:
98:7a:8f:f4:3c:aa:e7:ab:69:f5:73:e0:b0:75:45:63:a7:14:
06:bf:4d:65:21:ce:ac:fc:15:9e:13:88:a6:f9:78:07:b3:7f:
4d:6a:f2:d0:b6:3b:89:a0:95:af:13:d0:98:24:37:dc:ec:c7:
5b:5b:0e:30:f5:48:e0:cf:a3:ff:4f:99:76:5d:94:88:12:4d:
6f:f5:e2:d3:8c:b6:ce:e2:a2:75:21:74:e8:a1:e6:d3:0a:39:
ad:50:15:ca:ef:7f:b9:c2:ad:2f:e8:7b:ad:04:e5:df:2f:2e:
bc:93:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:25 2024 by rpki-client on console-fra.rpki-client.org