Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: wPjZFLTEuXw1XdydvIS/n2gam9YTZ0BU94I374Zj0Rg=
Subject key identifier: 71:08:FD:C9:72:8B:0B:92:1F:0E:1B:DC:22:90:26:3C:0A:88:9F:82
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 018F1F6E3F65956E2A74B9C4AAA1BDD5E350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1142
Signing time: Sat 27 Apr 2024 12:01:09 +0000
Manifest this update: Sat 27 Apr 2024 12:01:09 +0000
Manifest next update: Sun 28 Apr 2024 12:01:09 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: AZpGsQSTtG4XUorTxl00tGIgkbjo4KmEk+2z6e896S0=)
2: 8ohJ4IjifYZ9l7MvDbw5H-2qnDU.roa (hash: NqvYIOuqgZ6ATiny0l39sLqPbkHuRVcwi8PhsN6v5Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:6e:3f:65:95:6e:2a:74:b9:c4:aa:a1:bd:d5:e3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Apr 27 12:01:09 2024 GMT
Not After : Apr 28 12:01:09 2024 GMT
Subject: CN=7108fdc9728b0b921f0e1bdc2290263c0a889f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4b:35:99:7b:e2:2b:0c:71:2e:5c:57:4c:93:
0f:f9:76:70:f4:60:52:fa:de:9a:71:b8:48:68:ad:
98:78:5c:9e:5f:21:44:56:f7:5f:4c:56:af:2a:ee:
4c:1d:fb:a2:d9:55:71:47:3d:35:a6:32:53:4c:0a:
31:3e:8e:55:b9:cd:8f:5b:bf:c5:00:7c:50:21:7a:
b1:d3:58:66:64:a2:21:68:ac:ba:37:0c:1b:d0:e2:
98:91:77:18:bd:cd:7a:1c:99:dc:35:41:d7:7c:92:
23:6a:19:0a:6f:94:ba:d6:bf:06:df:46:fe:92:db:
40:3a:89:8c:55:cb:2a:9c:1f:72:66:f8:83:14:71:
ef:00:85:33:be:c2:ca:24:95:f9:9a:dc:1a:93:d8:
8b:2c:a7:c7:72:21:35:40:88:18:94:c6:d2:56:b9:
6b:f7:1f:94:c3:1b:15:86:09:61:a4:1b:e1:1d:11:
3f:65:fa:3d:9c:bc:6c:7d:46:fc:d9:f0:7a:fa:df:
6d:11:e8:b2:cd:5f:e0:e9:30:b1:b8:69:a6:6d:a4:
40:5f:46:99:8f:43:97:96:92:fb:d6:aa:ab:27:d2:
34:76:1d:2f:e5:a9:4b:ac:cf:a0:e2:35:f1:a6:50:
2f:07:0a:9e:5a:d6:a7:f6:91:b2:6c:7c:53:72:83:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:FD:C9:72:8B:0B:92:1F:0E:1B:DC:22:90:26:3C:0A:88:9F:82
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:7c:d5:b6:00:b7:fd:16:0d:24:ae:b1:cd:6d:31:2f:cd:
27:95:18:bd:aa:ee:e3:c7:d4:a2:6d:9d:53:06:e5:af:a4:1a:
87:4a:3d:aa:df:1a:6c:25:93:f9:2a:2f:de:37:37:c5:27:d1:
f3:65:91:15:84:72:84:80:51:19:fa:cc:45:9c:00:9e:8d:a8:
bc:33:f3:ec:89:82:58:b2:bd:8f:20:49:53:20:06:f3:6c:a6:
1a:24:01:fb:61:9c:5a:46:81:71:ad:84:e3:47:6c:9b:29:59:
aa:47:02:83:56:c0:32:68:d1:ae:0f:0d:3f:65:d4:f5:6b:e9:
a5:d6:05:c4:a7:66:8a:fb:b1:dd:53:44:a5:71:0e:75:90:a2:
41:9d:54:9a:c2:bf:cd:4b:e9:1d:fb:2b:73:88:99:88:cd:f4:
cd:b8:49:83:aa:57:07:e1:c1:50:9d:ec:8d:ea:9e:3f:2c:bd:
70:ed:f5:45:e4:2e:83:89:87:da:a7:a9:e8:09:16:ef:68:30:
e9:55:5f:7a:53:be:5c:5b:d1:da:20:fe:df:5e:e4:63:11:66:
fb:78:b0:fd:e0:0c:31:99:d8:88:7e:f2:55:4e:a3:16:47:01:
9d:3e:78:e2:4a:a5:5a:67:f2:32:8a:7e:3e:b4:27:bc:ba:cd:
31:cc:99:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:55:29 2024 by rpki-client on console-ams.rpki-client.org