Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: lpZveifB+mbE4NJfafDbn1VddJhAD53rk7ef4EsXmew=
Subject key identifier: B3:A4:83:A5:F0:0C:81:85:40:2D:32:7C:46:27:7C:B1:A0:EC:40:AD
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 018F38F6F93EBB13624ECFF52C7FC573E6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 1150
Signing time: Thu 02 May 2024 11:01:00 +0000
Manifest this update: Thu 02 May 2024 11:01:00 +0000
Manifest next update: Fri 03 May 2024 11:01:00 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: kFfoQ75NFeaUxwTpQ68nGWU4srTYpg1UKYx+wWDswIg=)
2: XR70_rooecfRATtAUuU86RsAGq8.roa (hash: jf+501BF/EhHmBPS5cfdqgvkpcdwXoKJlveN/cVnsR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:f6:f9:3e:bb:13:62:4e:cf:f5:2c:7f:c5:73:e6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: May 2 11:01:00 2024 GMT
Not After : May 3 11:01:00 2024 GMT
Subject: CN=b3a483a5f00c8185402d327c46277cb1a0ec40ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:3c:db:df:fa:b5:50:7c:b3:41:93:fc:02:
e5:f5:68:c0:b7:90:a7:d7:26:cd:4d:b7:b4:2f:55:
c5:58:7a:ad:b8:35:04:20:8a:3a:e4:92:ba:88:af:
ea:d5:72:43:0c:d4:bd:a2:87:4e:87:bc:e8:7e:f9:
68:91:fc:2c:f8:5a:ba:0e:5c:2b:9b:38:5e:75:98:
02:2e:3e:ad:f6:5c:ef:87:a3:51:7f:0a:5b:35:c8:
e6:b2:f0:b5:8f:42:0c:df:9d:fc:6f:8f:91:81:f8:
14:2d:e4:60:52:28:03:fc:76:13:91:fc:ad:03:44:
85:12:51:d1:83:c4:f3:c5:24:5d:ad:bb:34:c9:d5:
c8:24:9b:54:28:14:fd:10:a2:1f:f8:64:a3:f5:55:
8b:d2:9e:eb:cd:76:6e:66:b5:c1:16:52:e9:a5:e2:
84:51:84:79:8d:93:93:91:a9:55:8f:53:56:5e:ee:
e9:4c:a9:8f:42:29:7a:96:81:84:65:a1:34:67:c6:
d9:ee:3c:34:9c:dd:c5:0a:24:b4:a4:72:e6:8e:ef:
73:cf:b2:64:5c:7f:88:eb:ff:dc:5c:72:03:4a:01:
71:c0:83:52:21:3a:9b:32:53:70:01:a9:4a:c6:9d:
8b:4c:2b:51:09:35:3c:8f:36:ad:51:35:2b:95:7c:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:83:A5:F0:0C:81:85:40:2D:32:7C:46:27:7C:B1:A0:EC:40:AD
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:ad:29:07:a0:a7:3d:93:e5:56:62:98:e6:35:45:69:79:
ba:87:ad:b7:c2:d9:fa:f7:8c:c9:dc:44:cc:f8:a0:c2:2b:b7:
b1:ba:88:89:72:35:01:35:31:67:b5:bc:c9:b1:52:39:0d:7e:
10:8f:0d:56:15:4f:b4:fd:69:43:2c:18:96:64:9b:52:af:b3:
50:79:23:1a:c4:84:c1:53:6b:1d:37:76:b3:48:57:8f:84:93:
43:ef:d1:bb:a0:be:04:40:46:e6:d7:94:92:7f:e6:48:25:71:
60:e3:87:f2:1f:78:a9:85:ac:eb:14:99:ae:b5:d9:b0:10:a3:
25:ca:23:7b:ca:1e:f4:87:af:03:54:f1:ca:89:96:ef:21:cf:
f7:4a:55:35:e2:ef:47:9b:b2:3b:ab:91:9c:2d:c2:aa:40:ff:
e3:c2:79:50:a5:fb:d7:12:fc:13:91:a8:5c:f3:5d:27:18:5d:
47:35:8e:df:32:17:a8:84:10:52:90:8e:3e:9a:a1:82:d8:3a:
78:a7:9f:90:9a:19:81:38:de:2e:5f:e3:e2:fd:1f:dd:7e:80:
14:6d:3d:1e:39:61:94:f1:b9:23:8b:b3:49:0d:73:cd:a9:31:
ee:6b:df:0c:08:8a:b9:b1:a9:9d:86:b3:d9:48:7a:fd:fb:f9:
0f:58:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:14:40 2024 by rpki-client on console-ams.rpki-client.org