Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: iP8W+Bdxcf1ekf/NVb2kaLP51pEC+4D6uG47Zl5aLI4=
Subject key identifier: C1:F0:EB:FC:A7:82:B6:65:A9:C3:2F:71:2B:A0:D1:A3:4F:7C:FE:D6
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 018F5437C18BDA7FECC14209C934F18AB1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 03F2
Signing time: Tue 07 May 2024 18:01:31 +0000
Manifest this update: Tue 07 May 2024 18:01:31 +0000
Manifest next update: Wed 08 May 2024 18:01:31 +0000
Files and hashes: 1: 8QqmzEO7vYfnHLmMLPzdmH9FTJ0.roa (hash: XlQynvhRYKcMUlnvxvN1+31wOiifMCH6uW8vtrcf09U=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: DeYYRLN0fGumvfyxYEmK5LEj3OETMo+1o3UsUKH6S90=)
3: LxUJraHQ0a79AGMur_39NGDLHto.roa (hash: 7Y01Ex9qq5/2XvmoAHoPlRFRDU/snFWoUOxXnxcFAGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:37:c1:8b:da:7f:ec:c1:42:09:c9:34:f1:8a:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: May 7 18:01:31 2024 GMT
Not After : May 8 18:01:31 2024 GMT
Subject: CN=c1f0ebfca782b665a9c32f712ba0d1a34f7cfed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:cb:c0:06:b8:78:c4:58:e1:1b:f2:ba:62:
2e:ea:0e:d4:34:dd:60:88:fb:12:a3:78:1d:f3:5c:
f8:b0:46:c8:4c:1b:08:b4:29:81:cf:9c:44:a6:6e:
a1:5c:c8:29:5e:d9:ad:eb:70:62:a4:2f:fd:3e:d4:
63:ad:37:bc:72:35:4b:b9:9e:d6:cf:ea:e3:67:1e:
70:3f:5a:7f:23:bf:17:1a:2c:9d:6e:59:6f:ca:43:
33:0e:30:75:67:d6:be:3f:25:2b:76:27:df:e3:5c:
25:cb:02:22:b0:9e:48:3a:95:d0:0d:d6:46:4a:01:
95:9e:ce:cf:25:82:85:a6:c3:f6:be:ee:e2:0e:63:
c0:c3:a0:06:0d:35:6f:16:2d:4f:00:b3:79:15:2c:
f6:13:c3:d7:45:60:6a:48:cf:30:6d:80:67:ef:e9:
b3:12:68:78:ee:02:95:a3:4a:e3:d5:58:7c:94:fc:
1e:53:f3:39:af:b5:c7:c0:59:b8:a6:0f:31:e1:2d:
40:29:f8:75:c8:7f:b7:ce:7f:e2:68:5d:28:36:6f:
0f:68:77:34:96:1b:f6:91:aa:d7:35:c8:85:fa:74:
50:38:26:3d:e2:ed:50:b3:e3:10:00:53:a4:5c:d4:
7e:89:9e:09:4f:29:17:5b:fe:f7:18:7d:24:b2:55:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:EB:FC:A7:82:B6:65:A9:C3:2F:71:2B:A0:D1:A3:4F:7C:FE:D6
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:14:96:dc:32:17:85:79:b9:69:ba:17:59:08:40:4d:96:9f:
42:0f:bd:d7:1e:64:e3:e6:1c:f5:89:a5:49:fc:70:5e:6f:92:
31:b7:7c:8b:aa:aa:2d:0f:5b:6c:bb:fb:ce:1e:6a:49:99:35:
1e:85:26:52:3e:58:96:ee:26:b8:f6:d8:01:8f:f5:41:c1:57:
43:67:56:c6:5d:9d:c7:0b:05:b0:04:0b:2b:3d:e2:f7:a8:92:
b3:e0:6d:c9:dd:58:94:fb:80:ce:19:d4:f0:12:a4:b2:b2:07:
4e:06:8b:84:db:3c:37:85:62:94:fa:ca:82:23:d3:dc:36:93:
3e:c8:1a:dc:83:7e:6e:c9:38:91:d6:2b:be:7f:6b:27:63:23:
d4:23:02:27:af:02:da:84:47:9b:2e:02:e1:ab:42:84:7d:f0:
c0:6c:04:bf:ca:10:76:18:73:65:01:1d:9c:0c:e7:ca:a6:f2:
08:e6:9c:7d:b3:b8:c8:8f:f3:9e:dd:90:d0:1f:87:0e:aa:f0:
91:f4:9f:8b:c4:86:15:d1:32:35:21:1c:c2:27:8c:1c:55:b0:
00:98:1b:24:97:74:38:36:7d:ce:db:f5:7a:50:02:87:bd:8e:
a5:42:a2:e9:2c:b4:35:75:06:54:05:4f:a9:93:9b:6a:fa:59:
9a:4c:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:54:08 2024 by rpki-client on console-fra.rpki-client.org