Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: ERz8srv+mTUU8D1iRB2Wba/LbdTQVqa7lzGsNDundE4=
Subject key identifier: 59:2D:5D:52:9C:20:5B:2B:F2:BB:A4:7F:BA:CA:87:27:25:11:62:36
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 018F4231740A78686FAEB7E92D1DDE4A2C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 10E6
Signing time: Sat 04 May 2024 06:01:28 +0000
Manifest this update: Sat 04 May 2024 06:01:28 +0000
Manifest next update: Sun 05 May 2024 06:01:28 +0000
Files and hashes: 1: 7tJMLAYiBsNIOgcgwiQ8xJqSWQ0.roa (hash: 63zmTKJ6GKt1z9NK9tTAmpRTH5K08kwrovo/E+7DsAU=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: TMjB9Rf1nq/3aFhWVi+cUi5v4EETx7bRQDnOGIQR0FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:31:74:0a:78:68:6f:ae:b7:e9:2d:1d:de:4a:2c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: May 4 06:01:28 2024 GMT
Not After : May 5 06:01:28 2024 GMT
Subject: CN=592d5d529c205b2bf2bba47fbaca872725116236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:c8:08:e8:d4:06:22:1f:ad:a4:c6:ce:76:
54:a3:1f:d9:f7:d8:6e:e0:c5:10:ac:4c:ee:68:3e:
41:ce:58:d2:76:4a:2e:80:6b:a1:cb:0e:fb:a1:02:
39:29:fd:30:fd:5a:99:3e:bd:3b:cb:95:0e:e8:6c:
93:9f:5f:d9:63:01:5c:b1:89:6a:7f:08:fe:03:ba:
c4:7c:b6:ce:b8:f8:3b:2f:b9:70:f8:3b:44:91:01:
85:b5:cf:b6:64:44:cc:45:91:d8:68:28:b4:aa:e0:
72:ad:48:e9:8b:1e:81:fa:38:de:bc:ab:e4:d2:9a:
fd:3f:bf:96:8c:fc:25:e4:f9:d3:fa:5c:bd:4e:08:
69:8b:87:fd:d1:81:f5:7e:2f:12:4a:fb:29:7f:9c:
e8:5a:05:06:be:77:a5:df:01:cc:e2:a8:88:c0:96:
d6:c0:a2:75:41:f5:41:ff:34:6c:52:54:18:37:6c:
3e:a3:5a:90:b3:c3:ef:dd:7d:54:9f:31:d8:09:f2:
72:b2:32:3f:a3:17:06:b8:ac:ee:0d:28:a5:c1:49:
9f:67:64:ad:14:b2:25:5a:ca:c7:94:2e:3b:49:f3:
78:ee:81:b5:4b:d0:f1:7e:bc:17:59:bc:08:48:47:
cc:77:d4:e3:b4:b8:16:2e:68:74:25:37:8d:0c:d1:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:5D:52:9C:20:5B:2B:F2:BB:A4:7F:BA:CA:87:27:25:11:62:36
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:f2:6f:1a:cb:ea:b5:b8:62:68:bc:2a:3b:98:be:aa:10:
ab:f3:ad:7d:e5:f6:35:fc:f7:19:82:7b:52:49:e4:59:4b:1c:
6a:5f:de:6c:fb:34:6d:a2:75:d9:db:18:2d:90:ca:fc:8e:42:
5e:19:bb:52:f7:61:ad:bd:73:c3:85:32:ee:7b:b3:2e:a3:72:
ab:a7:69:b9:8e:f6:69:c9:ab:0b:66:b5:1b:c1:a7:f2:09:f8:
84:29:c2:6e:d3:2f:e6:e3:21:da:e2:31:32:c4:6d:77:56:30:
f6:7e:8a:ba:fe:82:07:49:16:1d:10:71:a3:b1:06:c3:a7:ab:
05:1c:0b:53:ab:fd:f5:04:54:d2:b2:4b:81:f0:8b:3b:fe:9a:
a0:f3:a8:4a:99:18:95:8a:a4:78:27:10:66:c3:25:5e:5d:d9:
91:69:2c:72:e7:be:79:b9:10:e9:b8:3f:5b:e4:d8:18:0b:f6:
fe:4d:cc:c6:f9:32:0c:df:da:08:cf:18:cc:e3:ee:18:a4:e9:
13:48:8f:20:07:2f:a5:99:d8:6b:b3:4b:fe:47:f4:2e:35:1b:
50:79:59:a0:04:eb:4d:8f:7a:60:db:e3:4b:63:ed:39:28:b8:
bf:bb:50:c1:57:c4:3b:00:1c:04:69:c9:0f:99:31:bb:60:9f:
6d:f9:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:51:35 2024 by rpki-client on console-fra.rpki-client.org