Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
File: ApeliZjwl0NHCBwX8l7t1l-tlmE.mft (raw, json)
Hash identifier: 44rmaq90NN9VV2XDc2pjpGRDoV0Rh0MXqc6wFR0+bzc=
Subject key identifier: DA:4E:2D:0C:FF:4F:EB:CC:BE:10:BB:9E:8F:59:91:3F:C7:7E:01:CD
Authority key identifier: 02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
Certificate issuer: /CN=0297a58998f0974347081c17f25eedd65fad9661
Certificate serial: 018F513663A991CAA5733AC6F341204B338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
Manifest number: 115B
Signing time: Tue 07 May 2024 04:01:09 +0000
Manifest this update: Tue 07 May 2024 04:01:09 +0000
Manifest next update: Wed 08 May 2024 04:01:09 +0000
Files and hashes: 1: ApeliZjwl0NHCBwX8l7t1l-tlmE.crl (hash: BCQ+XXNRoq7K0z6I8rF4Q1YeotTUds3O0b5awSsMim8=)
2: HaXkt_iXcDLSzXUQzQHcOheKnmQ.roa (hash: 7Mab3cZpcwKSJ+gVjA92+tciQTZGiNiriF1pEIsy5LY=)
3: NMzk_8Rl4BsvIDbu9hw1nlP7KpM.roa (hash: mxUfa27OB1TAAlmYm5x56nkknkDy+6wRzqfrAOl/Usc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:36:63:a9:91:ca:a5:73:3a:c6:f3:41:20:4b:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0297a58998f0974347081c17f25eedd65fad9661
Validity
Not Before: May 7 04:01:09 2024 GMT
Not After : May 8 04:01:09 2024 GMT
Subject: CN=da4e2d0cff4febccbe10bb9e8f59913fc77e01cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:ce:7b:05:f0:6d:99:9d:b9:1c:ae:01:94:
7d:f8:58:34:34:ed:fd:fe:f1:52:80:39:5f:32:4a:
cc:da:5a:b4:28:8d:ab:84:8d:8c:e8:d4:07:ae:c9:
91:34:28:78:d3:4c:4d:52:7b:df:08:aa:17:57:89:
de:8d:c3:70:9d:25:8f:56:02:f9:c1:d7:15:4e:fc:
04:87:f9:95:8e:15:07:eb:13:72:27:25:36:71:98:
0e:98:c2:80:fa:4c:d0:5c:98:7b:f3:86:c3:9b:d6:
5e:19:ee:30:d6:84:ed:42:24:e8:be:b5:f2:7f:75:
53:dc:87:94:6a:6d:a1:31:2c:a9:ec:b8:08:c7:d8:
df:aa:7c:ae:63:83:c0:ea:04:69:13:0c:c0:8b:84:
a2:f0:a4:5c:e9:91:ef:c6:5c:76:25:62:94:7d:47:
44:3e:ac:2a:69:13:2d:a8:cb:87:52:68:69:23:64:
f8:5f:d0:db:6b:4d:5c:96:ba:a6:13:45:5a:73:64:
fa:41:43:6d:50:c6:e7:3a:d3:0c:62:1e:a7:cd:19:
9a:34:58:d2:b3:42:ad:53:72:7f:4b:6d:49:05:ab:
d9:fe:d2:cc:a2:c8:0b:f3:b7:fa:d7:29:b4:3b:a9:
1b:dc:8f:66:23:6c:aa:68:fe:dd:38:5d:1d:bf:4a:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:2D:0C:FF:4F:EB:CC:BE:10:BB:9E:8F:59:91:3F:C7:7E:01:CD
X509v3 Authority Key Identifier:
keyid:02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:2b:b9:34:cd:b1:59:90:ed:e4:b8:3f:68:63:c2:2a:1f:
8f:2d:0a:1b:62:ba:93:e1:14:41:b1:3f:ae:ff:50:58:32:ae:
b9:5b:06:19:00:8f:2b:a5:f6:30:d2:6d:6d:a1:f4:b1:f5:76:
d9:18:8e:9d:9b:bf:8e:84:fa:6a:e7:93:d4:70:de:84:a5:b0:
02:4c:c1:4b:78:42:89:ed:42:1e:78:e8:78:29:37:40:f0:43:
38:02:58:c7:6c:8b:70:b8:c1:a3:15:16:8e:50:48:3c:55:88:
42:6b:09:32:f2:e3:ef:69:79:62:98:f7:e8:38:96:15:0b:9a:
bc:71:c4:96:d7:f8:5e:48:57:01:8a:58:f7:9e:eb:05:e3:e7:
21:3b:95:4c:08:40:0d:93:37:1c:ab:a9:d9:db:90:79:21:82:
c9:70:8d:a9:fe:68:d7:7d:b8:d6:23:f2:3a:7a:e4:3e:eb:fd:
53:16:30:12:37:58:25:30:31:03:71:93:d8:25:cf:45:2e:f5:
e3:ec:ed:a3:4f:3b:e9:28:19:3e:7f:98:cd:80:2a:64:2a:49:
15:97:e7:8c:95:8a:24:c1:ef:f2:9d:76:a9:db:04:41:01:af:
01:cc:35:c0:2e:40:b4:00:bc:85:51:af:ed:bf:14:b0:b8:a4:
f7:61:17:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:01:25 2024 by rpki-client on console-fra.rpki-client.org