Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: cC1P8zTK/nvcSRXWqlGU+BVbDTMW1mc6nXA3C3apHf4=
Subject key identifier: 59:5A:13:5F:A4:6D:F6:C2:5A:5E:F8:45:E3:F0:77:F2:F8:D9:36:2A
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 018F8824537385EF890B884918AA89C44044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 98
Signing time: Fri 17 May 2024 20:00:32 +0000
Manifest this update: Fri 17 May 2024 20:00:32 +0000
Manifest next update: Sat 18 May 2024 20:00:32 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: jqjT1KPULbzSCEGquu0wDGvY2QYNptskAhpAuyQIhGw=)
2: PmxA-hRmVnPg-n1blpcraycVnOE.roa (hash: bYAKl1ZVm7V9IFPA/5gWuq8P0kAitknVPX6TJUI+No8=)
3: w3CgoF7l6g6nY6myE4jfmWURNe8.roa (hash: QQ2Y4XksmHFCCOhDUdNxNBn6+ux8H258WAIhCJS010Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:53:73:85:ef:89:0b:88:49:18:aa:89:c4:40:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: May 17 20:00:32 2024 GMT
Not After : May 18 20:00:32 2024 GMT
Subject: CN=595a135fa46df6c25a5ef845e3f077f2f8d9362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:0f:e1:f1:a3:ef:b6:cd:87:46:fb:d8:7f:
b5:30:78:78:27:ce:e5:64:c0:03:4e:cd:75:c4:36:
ec:9a:78:7e:2f:63:ce:27:c9:05:ae:63:9f:f0:2d:
50:49:19:87:7e:85:17:da:5e:03:8d:58:cc:5a:0e:
48:42:b2:31:83:c0:80:88:50:08:82:72:68:38:f0:
ce:89:ef:b0:a5:b6:17:fe:64:80:30:02:af:a1:0a:
54:b6:c7:77:85:e0:73:a5:1a:96:d5:13:54:91:c5:
02:77:e4:04:d3:2e:e7:52:de:a9:b8:f8:59:df:00:
39:f8:aa:9d:40:92:c0:90:5e:32:ee:bc:17:77:e9:
d4:44:c6:6a:77:bc:a0:de:10:14:b6:2f:de:66:97:
94:68:6f:a3:c9:89:bb:a1:8e:23:a9:10:0e:a7:4d:
04:46:92:cb:41:66:03:ff:19:7d:59:00:99:fe:8f:
24:b3:ed:b0:8c:ef:e1:a1:a1:19:82:fb:43:80:8e:
bb:09:3e:65:14:ee:ae:17:cc:78:0b:0f:65:2b:16:
b5:46:9a:6c:de:77:d6:9e:08:6a:13:ef:16:2f:f4:
33:50:28:a4:1b:73:52:5d:fb:5e:47:3c:7f:59:cb:
0e:64:de:a5:78:e0:91:ff:69:8d:55:ef:49:89:c7:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:13:5F:A4:6D:F6:C2:5A:5E:F8:45:E3:F0:77:F2:F8:D9:36:2A
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4b:ed:2b:8b:4f:09:d3:de:82:17:24:d0:ea:55:b1:a6:2f:
97:ec:8d:1f:1f:1e:76:06:41:ff:25:e3:73:04:07:2d:1b:32:
13:83:9f:aa:8c:f5:e3:18:c7:6c:64:1a:8a:ea:2f:b6:26:cd:
3b:fd:e8:49:64:d7:a7:26:af:c1:ed:86:8f:5d:60:dc:f6:e7:
3c:91:c2:56:80:02:d5:43:c9:28:61:38:36:46:0c:d3:99:8a:
ec:d0:3c:11:da:61:cf:3e:e3:e7:8d:da:fa:2e:f8:d0:cb:1e:
bd:1e:5d:d7:e8:05:e3:a7:fe:7b:46:c6:93:f0:94:9c:1b:63:
2c:19:ba:aa:e9:de:41:e9:98:cb:ca:19:3c:10:8c:a1:d4:bb:
8d:8e:c1:75:01:1d:f8:c4:17:5b:15:30:f3:00:b3:97:76:05:
ff:20:fd:91:c4:25:86:44:48:a4:1d:e0:fb:37:6b:92:72:dc:
c2:3d:00:d9:b6:a5:7d:1f:2d:24:ba:62:6a:c0:cc:d8:f8:96:
cf:4f:fe:a2:6e:21:07:1d:06:93:13:04:fc:09:66:64:5e:5d:
49:b4:f6:7f:c0:c5:33:a7:23:f9:6d:b0:c1:41:71:ae:7c:ec:
66:68:ec:8a:a4:73:23:02:93:cd:8d:c9:66:7e:da:aa:3b:d0:
53:bf:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:35 2024 by rpki-client on console-fra.rpki-client.org