Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: ikMcVL2mUxXJKPpj916ruW8/bBq7jKhyRMTUrymNayk=
Subject key identifier: EA:CE:8B:A0:0A:2E:15:2A:5D:D0:66:4A:71:FA:3E:F0:AA:E7:17:9E
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 018F87496561472178DA17117CC28CD6AE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0AB0
Signing time: Fri 17 May 2024 16:01:25 +0000
Manifest this update: Fri 17 May 2024 16:01:25 +0000
Manifest next update: Sat 18 May 2024 16:01:25 +0000
Files and hashes: 1: 96WNGF0lo8pxZatzGSt5t9whnU8.roa (hash: WNsbFQ3aeHVtahsRn18uTY8XNG7zmE2Du0+QPgDBHJU=)
2: kwOs2JnZDH6TAqGMyxuGssogJVA.roa (hash: S4FNf1N7n6YX0EGnjOGWfeX2dt5Y9JobD5F35PtX27Q=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: Octtlpvpg5BsuVaDvddBBJ1A86F/7Oqk5F7tlLMs8i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:65:61:47:21:78:da:17:11:7c:c2:8c:d6:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: May 17 16:01:25 2024 GMT
Not After : May 18 16:01:25 2024 GMT
Subject: CN=eace8ba00a2e152a5dd0664a71fa3ef0aae7179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:6f:89:ee:e8:1b:89:b0:ed:bc:32:6c:6e:
f6:1c:fe:b5:6d:16:ce:47:3c:9c:49:e9:35:f1:14:
84:e3:83:65:28:43:00:2e:a1:2f:66:48:77:be:5d:
9c:ed:b8:47:36:1d:f9:92:48:32:c8:fe:b5:cc:1a:
fe:95:74:86:f7:40:40:ba:ec:6b:e2:e8:3a:69:d7:
74:95:24:3b:81:33:b7:14:6c:a4:49:a6:9b:9c:ee:
cb:dc:59:b9:e8:51:3c:96:d8:87:66:b0:ef:b4:90:
d0:21:ce:b2:99:72:3a:7d:c5:f7:db:fb:0e:0e:11:
3b:db:0d:10:df:e6:f3:ec:0a:74:cd:d4:57:69:31:
eb:fa:98:68:44:0d:2d:c2:81:67:1a:1e:5e:b5:fb:
7b:bd:89:15:e8:65:61:92:90:c5:65:f4:6f:a5:32:
a4:d4:27:7d:12:15:57:22:67:87:08:f0:bd:ac:18:
5f:a8:ee:49:fc:19:8a:ff:c7:3a:be:e8:36:ee:b0:
d5:f7:b1:4b:33:39:d5:a1:36:d5:d4:dc:ce:94:de:
d9:5a:26:9d:86:b2:7c:b3:5d:a6:9c:0e:92:a3:17:
ec:5b:99:b7:93:3b:3d:09:4e:e8:3c:dd:a2:ff:e3:
63:9e:09:eb:9a:af:f7:55:08:da:17:23:a4:5b:53:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:8B:A0:0A:2E:15:2A:5D:D0:66:4A:71:FA:3E:F0:AA:E7:17:9E
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:80:22:a3:50:62:eb:61:0a:75:85:87:48:65:38:66:4b:ac:
97:fd:ac:af:ba:a9:06:75:47:f2:ec:ad:71:91:6b:d8:45:4a:
5b:09:92:77:41:67:6d:41:52:a7:95:a7:e9:95:17:a5:07:0b:
01:72:cc:86:9a:fa:62:34:f3:49:0b:c0:37:11:34:9d:9a:7a:
72:db:ec:4f:44:22:b2:a5:8f:17:0a:91:19:2b:02:2d:d4:0b:
e7:00:28:be:f3:ac:6a:fc:17:95:38:ab:43:79:52:09:aa:4a:
b6:60:0b:55:07:9e:ae:bd:50:a4:4a:7e:65:1f:0a:31:06:04:
96:3e:2c:0f:00:e6:d8:c0:13:32:1b:b8:fc:6c:ba:df:1e:a1:
2b:1c:d3:a5:28:b0:c6:97:22:1f:1a:98:3b:36:f5:31:13:09:
7e:3e:5f:ae:02:71:30:68:a7:8f:30:f2:62:ea:aa:7e:3e:ff:
a9:c6:af:cb:f1:e3:49:4b:ac:a6:b1:38:c0:e7:fd:cb:1e:12:
50:63:5b:00:ad:ce:81:10:a1:b9:65:80:fe:be:d6:34:09:bf:
36:70:39:7f:96:52:a9:07:f2:80:ba:ca:a6:ac:14:c1:9f:9b:
04:95:09:95:25:7b:1f:56:bb:ee:0d:c7:97:82:08:a9:31:c0:
1b:da:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:30 2024 by rpki-client on console-fra.rpki-client.org