Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
File: aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft (raw, json)
Hash identifier: FWvi4+qK72yR6fOGtruzLDVSmRDY5TXYxbrslrv0PHQ=
Subject key identifier: 38:EB:3E:82:33:EC:FF:18:A9:83:DD:DD:9F:8E:F5:1F:2B:E1:94:04
Authority key identifier: 69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
Certificate issuer: /CN=695dce5e37a862538a0f66883de206ffb7c93b69
Certificate serial: 018F874AB54352E9C40D6F8DBD5B8F6094FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
Manifest number: 01B5
Signing time: Fri 17 May 2024 16:02:51 +0000
Manifest this update: Fri 17 May 2024 16:02:51 +0000
Manifest next update: Sat 18 May 2024 16:02:51 +0000
Files and hashes: 1: T-boIdoUmAHWvcfqBZ6YwVgoFzY.roa (hash: I+PVY53VuuJ/AkvPCPl4sBbNVKS9AyVOok3xkUhP/f0=)
2: aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl (hash: xHz+pfpmyxfbIGQQQW9hl3e0U3s9JwM9WwvAIU/L81Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:b5:43:52:e9:c4:0d:6f:8d:bd:5b:8f:60:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695dce5e37a862538a0f66883de206ffb7c93b69
Validity
Not Before: May 17 16:02:51 2024 GMT
Not After : May 18 16:02:51 2024 GMT
Subject: CN=38eb3e8233ecff18a983dddd9f8ef51f2be19404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:74:7e:e3:d8:d6:06:d1:ed:29:fb:51:9f:
8f:45:50:5a:db:f1:2d:8b:87:62:f9:3f:30:69:c3:
44:84:24:ea:c0:d7:a2:1f:84:f8:09:8c:da:0e:1c:
e4:d2:38:a7:e1:ad:b4:bb:5b:5e:1c:c5:08:de:ac:
60:61:3d:65:6e:0a:85:18:1c:8f:ad:51:04:a8:0b:
7b:08:0b:0a:8b:ee:cb:f7:c8:43:06:1f:8b:b6:7b:
b9:bc:72:02:bd:93:68:25:c8:19:dc:81:9f:c6:0d:
ff:c0:75:48:64:b8:3f:2e:c1:21:b6:fe:73:4b:9b:
12:52:ba:c4:a0:1e:bc:4c:bc:35:2d:35:6f:8d:2e:
33:bc:e6:4c:66:ce:4b:f1:b6:ad:b2:4c:cf:1e:8e:
72:f8:8b:1c:ca:74:95:bf:31:a4:b5:84:97:c0:d5:
74:e5:e9:a4:94:71:d5:90:85:10:87:56:7c:32:a2:
65:ed:99:25:59:34:41:a8:74:b9:30:bf:f2:94:c9:
f1:f9:54:37:f2:ce:71:53:ef:31:36:92:e4:b9:bb:
23:b7:7a:03:7e:d5:d0:70:a9:a8:e2:a8:9b:d5:e6:
72:63:6b:c8:ed:d1:be:11:17:df:05:79:11:88:3d:
83:2b:70:e4:f3:57:32:37:ad:15:85:34:e7:7f:35:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:3E:82:33:EC:FF:18:A9:83:DD:DD:9F:8E:F5:1F:2B:E1:94:04
X509v3 Authority Key Identifier:
keyid:69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b4:3c:93:c5:6a:0b:30:47:1b:84:d2:8f:6f:76:94:9d:91:
99:2c:c6:8d:9d:fe:6a:f4:f7:31:fb:28:56:7f:32:86:b6:02:
87:d9:df:24:07:77:07:00:e8:11:3e:74:61:a0:d7:58:15:39:
58:10:b2:21:7a:2d:a1:ce:3a:35:af:e1:fb:11:f6:5b:d7:fd:
c6:7d:53:ee:6b:83:aa:70:bc:21:d6:c5:c9:54:46:5b:67:f9:
54:f0:26:2c:cf:8a:6a:06:08:8d:b8:b5:27:f5:60:ef:00:3a:
bf:2d:8b:3b:97:6c:28:f0:12:46:73:f7:51:44:f8:70:17:2c:
c3:cb:cd:b7:94:7f:db:d5:83:ce:fd:fa:12:36:7e:7e:a5:35:
cd:9b:5e:ad:bb:e4:05:4f:36:8b:a1:21:bd:74:bd:bf:0e:be:
40:a9:56:8a:11:a0:3c:e9:e2:da:d0:a2:33:af:e2:fc:bc:47:
d5:04:e7:e4:68:9d:9e:b3:e5:2f:1a:28:c7:23:b8:05:9d:dc:
9c:4f:11:81:9d:6d:da:ac:07:c4:9a:dd:41:f2:2f:83:79:fb:
3e:1a:dc:ec:4d:79:3c:fc:9a:e3:bb:ba:76:e1:99:cd:1c:bc:
47:68:f9:ab:2d:32:6b:ed:fe:0a:d8:96:fb:79:5d:4b:7e:d7:
3a:bf:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:25:42 2024 by rpki-client on console-fra.rpki-client.org