Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: uJZ6pGe/fFLPbx4D+wTW8hE1KUvYJqDpZ4lUkeiMnb4=
Subject key identifier: A1:2A:7A:3B:DC:D5:D4:2E:5B:DD:F9:09:F0:75:F0:E1:B8:46:10:42
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 018F3AE5F1294907DC653BA3A3B098E8D22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1151
Signing time: Thu 02 May 2024 20:01:39 +0000
Manifest this update: Thu 02 May 2024 20:01:39 +0000
Manifest next update: Fri 03 May 2024 20:01:39 +0000
Files and hashes: 1: 1-l_oslWg7nS91APpwbvsaIwB3VQ.roa (hash: /Al+HNQIrqZ/WnEai2qguKtO2v1BzfhEEK9y50h+sdI=)
2: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: CZkeTJwrV2i/if3wAl5S5F9KZs7Jp5B2RLf7Sl8jpA0=)
3: aXmGrshJipNWZ-zQcxb6zzhkn_E.roa (hash: LHvlKpW8+5H9WfEO9z1FRZZn9O9YK7DRQz61w6aA+nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:e5:f1:29:49:07:dc:65:3b:a3:a3:b0:98:e8:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: May 2 20:01:39 2024 GMT
Not After : May 3 20:01:39 2024 GMT
Subject: CN=a12a7a3bdcd5d42e5bddf909f075f0e1b8461042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:66:81:30:77:07:7d:24:5f:93:b1:ae:12:
4c:fa:79:ce:ed:28:08:a5:34:48:6c:8f:5f:7a:eb:
75:68:08:84:f4:ed:76:b7:e2:9d:b9:a0:96:6a:6e:
09:b2:25:44:7e:67:11:74:01:00:d3:a7:8a:55:7f:
7c:83:43:11:43:a2:6b:26:41:6e:a2:72:8a:19:cb:
c1:08:84:99:6e:89:2b:bb:88:1a:e1:ca:28:cb:0b:
5c:cb:fb:8e:27:d3:38:be:42:14:f6:0b:06:dc:d6:
d0:2f:00:81:7c:33:a3:ef:d9:27:80:9a:25:28:26:
e7:26:1f:b6:de:f6:e3:1d:d9:fd:54:58:68:5a:e8:
1d:ef:92:86:de:6e:3f:c6:3c:dc:eb:b5:d9:b8:a2:
67:6d:c0:1e:ca:ad:f0:19:f2:0d:c9:d7:9f:b4:43:
52:dd:ad:7f:b4:7f:ad:e4:17:82:82:d0:4c:f7:65:
36:06:6e:fc:1b:13:7c:54:a5:28:38:9c:fe:d1:6f:
be:1d:26:ca:29:54:cc:27:44:b5:fc:43:0b:b7:49:
9f:f6:0d:76:db:35:3a:61:d3:94:89:75:4e:bb:92:
bb:db:da:4a:ea:5b:e8:c8:9d:a2:d9:68:5f:1e:14:
54:92:d4:96:e0:dc:f2:3b:8f:7f:fc:5f:f3:70:ee:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:7A:3B:DC:D5:D4:2E:5B:DD:F9:09:F0:75:F0:E1:B8:46:10:42
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4e:68:46:f3:8d:52:01:df:2e:ee:97:27:0a:a8:7d:f1:d7:
ea:1a:a7:78:1a:ca:75:c4:36:d5:02:01:bd:5a:19:3b:51:99:
99:36:73:51:62:0d:99:9e:fa:92:06:28:92:c8:18:94:61:07:
16:dd:4a:15:fc:46:e5:4c:f5:a5:df:dd:df:e5:5b:4f:79:23:
61:b4:59:2a:7d:68:58:c6:e4:1f:c9:3a:bd:6b:c3:b2:e2:fd:
f1:cc:d3:19:b6:41:57:02:b7:ed:51:bc:dc:2b:86:4b:de:19:
21:9b:cb:89:fc:85:75:de:58:28:e6:44:69:f5:0f:b9:0c:ce:
4c:d4:62:66:e6:0c:b2:72:61:f9:5f:15:4e:24:4a:96:6e:a6:
ca:a3:f7:c9:8c:74:93:d7:e9:19:ce:23:c2:85:83:41:b2:6c:
b5:14:48:b0:2a:6e:b5:72:0a:26:40:9d:33:59:14:06:c0:35:
78:49:b8:a7:29:8e:53:92:fa:3f:44:d6:6d:ac:8e:40:36:f2:
8c:26:4c:3a:ef:ce:cc:c3:25:88:04:08:e1:6a:28:0a:7b:6a:
14:50:79:14:dd:8c:9a:a1:17:7b:70:39:db:6d:ab:49:32:76:
ac:1a:f2:d2:ba:a1:40:ca:70:cc:66:b4:fe:84:a4:99:f8:dc:
cc:92:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:14:57 2024 by rpki-client on console-fra.rpki-client.org