Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: aJWs4TU0LGSnlD8POLij8MwyhS14tzHeG0OQs95sK94=
Subject key identifier: AE:34:97:02:65:A2:A5:3D:B6:FC:C6:47:3B:1D:71:56:02:3E:CD:3C
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 018F874ADB5B2F980DAA37F24C7C74479C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 16:03:00 +0000
Manifest this update: Fri 17 May 2024 16:03:00 +0000
Manifest next update: Sat 18 May 2024 16:03:00 +0000
Files and hashes: 1: amNJceS9RA1i7xLcKD_-pfWbmi4.roa (hash: m/LfSJTN5kR2Lr2fL2RXjYW3sBAa5XbSgprSB39VH88=)
2: dCnxtv8ZqZAMgXEO1gkn2xaUQ68.roa (hash: Bf5wW7Hg4hDBFYB0fIOot5YKOwdX6kHMLXYkAOu5Fow=)
3: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 9EGVlvXSE5RqgceUqJK/TRye7K3EPTUeaGiwkHEbESA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:db:5b:2f:98:0d:aa:37:f2:4c:7c:74:47:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: May 17 16:03:00 2024 GMT
Not After : May 18 16:03:00 2024 GMT
Subject: CN=ae34970265a2a53db6fcc6473b1d7156023ecd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:c6:d1:43:0b:11:75:e9:36:50:8b:40:e1:
ef:11:58:07:b6:3b:6b:12:87:04:4d:86:be:75:ad:
bb:ff:49:e8:39:11:e7:30:f6:76:84:0f:4b:47:01:
d5:ac:8d:da:f5:69:99:49:c6:d6:e0:8c:ba:55:88:
d1:dc:79:a1:8f:bc:9c:13:5b:da:ad:ce:36:a1:7e:
67:ec:6b:01:79:4f:15:07:16:9a:04:77:fa:08:66:
2a:b1:1a:58:6f:18:5b:40:f4:b8:12:7f:9e:09:64:
79:6f:0f:58:6d:44:11:d8:63:46:c9:e5:23:e8:98:
27:55:d9:be:24:6b:8c:06:10:2f:7c:9d:30:7d:32:
c8:1e:b4:63:a3:36:c1:eb:8b:7e:d8:63:40:c6:74:
0b:be:66:4f:9c:9f:1b:92:e1:77:17:8a:00:b5:1e:
79:18:d9:a6:15:35:74:c7:75:c8:54:65:da:78:4d:
cf:14:e4:e1:18:f5:96:ac:ca:0a:36:1a:e1:61:2e:
e9:a2:01:bb:30:b5:2d:46:7e:89:66:8c:59:2e:db:
42:1c:5b:7e:6c:6c:4a:9d:9a:09:ff:07:80:95:4d:
93:70:86:9c:4d:6a:ba:c3:d4:16:d1:ae:bc:17:e7:
3d:26:b4:e4:f2:9a:e6:24:7b:93:72:94:9f:4d:05:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:97:02:65:A2:A5:3D:B6:FC:C6:47:3B:1D:71:56:02:3E:CD:3C
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:9a:c0:03:db:22:f9:b3:70:41:91:0c:89:28:37:04:1b:
f5:08:45:a1:dd:a3:a2:c3:02:fc:5e:4d:69:cd:93:bb:2e:43:
5f:25:1f:ff:2b:2f:d3:40:df:02:e4:71:ec:92:47:ef:9e:82:
4b:14:e9:1b:1d:9b:a2:28:d2:62:4d:f0:a3:11:5c:e2:98:ed:
3f:05:c4:a9:75:be:ee:1f:b0:7a:2a:b7:70:91:ad:50:57:3b:
a8:67:2b:45:2e:00:bb:4f:f4:2d:04:de:aa:83:0b:81:3b:25:
0e:85:1b:f9:04:c6:be:eb:48:33:c3:8f:e7:24:d5:4f:d3:14:
ea:ca:22:b8:41:4f:7c:dd:32:48:73:5d:41:05:6d:d2:89:45:
7f:61:79:9c:87:da:69:91:9c:0a:2e:f0:e4:aa:ff:69:42:8b:
f9:42:44:41:9d:17:eb:7c:71:27:45:6e:94:18:51:55:73:19:
1c:d4:11:ee:78:d5:c4:91:d6:69:1e:7b:ce:16:73:90:ac:02:
d9:33:89:be:46:c0:25:0d:ab:b8:ab:4e:83:0b:fc:62:d8:db:
9b:f4:73:cc:7c:d6:a8:2d:f4:a3:bf:74:ad:0e:9c:fd:29:50:
34:ca:79:12:ed:0f:a4:6d:81:04:61:ac:30:a5:af:fa:80:86:
5e:20:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:40 2024 by rpki-client on console-fra.rpki-client.org