Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: MLTrGtBHewc1EposheHZO2GUJ0P3fZhGoQVmH2VFwIc=
Subject key identifier: 8B:1F:08:27:1D:14:6A:62:25:B3:3B:7C:C3:CC:E7:32:06:57:69:3B
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 018F3DE91BBCF23991D7EDF39B4BC4BB12D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 10E5
Signing time: Fri 03 May 2024 10:03:58 +0000
Manifest this update: Fri 03 May 2024 10:03:58 +0000
Manifest next update: Sat 04 May 2024 10:03:58 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: yaMgUB7vt7UXoOaS7C8XaEWuFn7QJizKZEfJ+a3eh4M=)
2: MF7gUqV1bP0pZdGtgxnh_eyO6I8.roa (hash: 0JqiX5mWGDDw7xsSYSWlOWQFsyBT7AR0VxFuLt/fLTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:e9:1b:bc:f2:39:91:d7:ed:f3:9b:4b:c4:bb:12:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: May 3 10:03:58 2024 GMT
Not After : May 4 10:03:58 2024 GMT
Subject: CN=8b1f08271d146a6225b33b7cc3cce7320657693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:13:76:c1:14:64:e7:fb:bc:6c:47:ba:53:
ff:74:d0:a0:fe:1f:35:8c:20:55:66:9e:22:32:9f:
4d:cc:8a:22:aa:ce:e5:72:e3:6c:c9:0a:a6:7b:ef:
84:0c:ba:1e:68:55:35:04:2f:88:da:3c:e7:4f:93:
8d:1e:8f:1c:69:36:80:b7:a1:a9:8a:d7:27:d3:b1:
74:15:b7:69:ba:4a:bc:d3:a3:cb:df:7e:12:b3:72:
f5:85:a2:e2:6b:c3:55:f6:dc:1c:40:ac:e1:89:72:
fe:bf:d7:d0:af:81:79:cb:48:2c:6f:19:25:76:da:
f6:3c:25:ee:0f:07:18:1e:c4:b1:55:33:99:f6:c4:
34:d9:6f:b1:ff:24:b7:b6:99:bb:42:1e:d0:5b:35:
3c:3f:53:4f:ab:f7:a8:8f:f2:87:d5:3e:8e:f9:8a:
d8:43:77:b2:b7:0f:c3:14:4e:d8:82:06:56:6d:be:
7a:96:65:30:f2:32:5f:a9:a7:6e:ef:49:de:c8:4d:
a7:71:0b:ec:b5:c7:ef:39:d4:30:75:b1:1c:b5:d5:
dc:c3:5e:2d:88:b0:cb:e7:41:6a:de:28:72:d5:ef:
fe:46:4a:ea:c5:73:bc:24:00:98:0c:a1:bb:9e:5a:
c4:9d:16:cd:c5:92:86:f6:96:2f:af:ae:34:6f:37:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1F:08:27:1D:14:6A:62:25:B3:3B:7C:C3:CC:E7:32:06:57:69:3B
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:69:e5:7e:f6:d1:b3:8e:39:fe:af:18:a0:b4:a2:ee:9b:
6f:9e:7e:d4:eb:17:65:29:88:c1:fa:01:13:ff:a9:4f:1f:7c:
a5:35:57:83:70:98:e6:3a:a7:34:58:2a:4f:f7:7b:f8:bd:e8:
af:dc:e8:bf:6a:fc:84:2b:b0:5b:72:7b:d2:8c:c8:4f:16:50:
2d:77:46:2d:1e:64:01:da:38:08:a9:f3:66:74:72:d3:c4:7e:
8b:a2:c9:09:7b:f0:1e:6c:41:d3:7e:87:48:e2:4c:ea:56:70:
f5:79:6e:76:d9:81:6f:80:6a:79:75:d7:5e:d7:39:cb:7a:d5:
e1:67:31:a1:8a:e1:28:f6:a6:be:93:40:5d:dc:c4:2f:e8:d0:
d9:96:0e:e5:6b:4f:97:20:92:82:9c:40:75:5d:bf:b0:46:65:
7f:c1:4c:7b:2f:9b:3e:52:c3:29:02:6b:6c:e2:9b:b3:6c:82:
da:bf:4a:7d:be:94:a4:98:c5:ac:f2:9e:06:7f:1e:8c:ce:5f:
34:e6:a8:3e:d2:84:f7:04:bf:77:76:83:9e:99:ce:e3:14:5a:
89:e9:c8:3e:13:c9:36:05:a9:fa:41:25:69:ff:39:3c:fc:7e:
df:df:d5:79:70:88:8f:5e:c6:18:35:07:eb:30:16:7f:3c:b4:
f7:c4:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:36:05 2024 by rpki-client on console-fra.rpki-client.org