Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: PI12a0n2m+4TvldOuLvuwz07FwkezEfUYmL8duChKn4=
Subject key identifier: E9:AC:69:42:BA:4A:14:C9:0D:CB:CF:A5:FB:98:74:C3:28:1A:F6:4D
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 018F83D9AB0C86D1DECFB4A7D33D43F51EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0665
Signing time: Fri 17 May 2024 00:00:31 +0000
Manifest this update: Fri 17 May 2024 00:00:31 +0000
Manifest next update: Sat 18 May 2024 00:00:31 +0000
Files and hashes: 1: RYEAi9yX0N1Rfnxw8nMNMvh6wBY.roa (hash: HrPV+eRePLA4H3X8CNiCJlNUqhrweTXjnqnhLh9jVsg=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: pA+AlceKBs8FMeAGGHFcgHN9rMUMwXT83qBRiKH4u7s=)
3: dGhbZhRYpGgZU3lKXYyBi8GOt9Y.roa (hash: pDrp53JEt67GFJ8hEo43iCRgCUtt1FEigGzlUKtOYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:d9:ab:0c:86:d1:de:cf:b4:a7:d3:3d:43:f5:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: May 17 00:00:31 2024 GMT
Not After : May 18 00:00:31 2024 GMT
Subject: CN=e9ac6942ba4a14c90dcbcfa5fb9874c3281af64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:3f:7d:13:6e:b9:9f:0c:63:c8:a7:36:d9:
b3:34:08:0d:bd:d9:eb:d7:ca:92:a2:d7:64:db:7f:
cf:ef:cf:13:91:d4:09:4d:15:f4:1e:c6:ef:ce:64:
d8:49:c3:3d:01:5e:b4:f5:b6:f0:75:c4:86:c6:cf:
bd:d5:15:4a:3e:3d:5d:6d:83:13:6c:d1:dc:2d:fa:
a1:0c:7c:e1:37:5f:b2:86:53:93:6f:f1:88:30:6b:
9e:51:dd:6c:5b:fe:0b:66:b5:b2:1a:10:f9:d0:48:
68:7c:62:a5:61:a9:39:bc:96:e9:89:ea:f5:30:e1:
3f:21:a6:ed:0a:a9:b4:ca:53:cb:5b:2d:e1:8a:74:
ca:d3:99:82:2a:ec:43:e3:a3:05:4d:44:a1:ea:65:
8d:a9:a3:e9:c8:35:ee:eb:d4:46:40:ad:0a:1b:65:
33:b8:f2:93:68:85:b2:e5:a8:b7:b9:76:96:fc:b4:
08:40:b6:73:49:d6:2f:68:d5:0e:ed:1b:88:5a:b1:
68:a9:0c:8b:2d:94:10:c0:fe:d8:f8:a4:f2:10:bc:
ce:1d:a3:22:74:c8:7e:95:2f:ec:f3:5b:89:97:89:
56:99:19:10:86:1a:dd:63:97:47:66:a1:cd:97:05:
75:43:6c:55:62:60:33:40:e9:22:78:62:5b:27:a2:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:69:42:BA:4A:14:C9:0D:CB:CF:A5:FB:98:74:C3:28:1A:F6:4D
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:60:7d:18:88:c1:04:ac:45:5a:b6:77:10:b8:ea:0c:42:c0:
4a:bb:60:4d:94:40:ae:99:ba:72:fa:ea:92:b1:65:41:9d:00:
09:08:5e:40:e3:da:50:25:ba:30:b7:c9:21:82:5b:e5:2b:8b:
9c:7c:c2:8d:f2:ca:f2:e6:04:d1:d7:61:54:bb:c6:1f:fa:1a:
95:f0:40:57:84:57:54:a1:a4:84:02:86:49:ba:b5:41:33:6a:
2a:8e:10:6c:55:3b:10:fb:7a:a4:fb:81:2a:82:92:8d:f9:13:
9c:39:e9:84:3d:c4:a5:f0:17:db:fc:8b:70:f5:ae:a6:3b:8c:
fe:17:8b:1e:93:11:8d:ca:81:3e:d1:0f:dd:dc:2a:aa:52:bb:
43:f0:31:9e:a1:40:f4:25:f4:dc:f8:c6:60:fe:2a:dd:49:39:
36:4d:27:59:5e:7f:ae:57:78:06:f8:7a:6b:53:03:41:b4:d1:
ed:1f:8b:2e:f1:9c:f6:2d:a0:e2:18:cd:08:87:8d:04:75:36:
c6:17:20:0c:4c:75:a5:e5:8f:f7:7b:35:03:d9:28:18:5f:d5:
c6:9f:4e:6f:e2:cb:20:7e:d5:0a:f2:d4:86:67:29:44:9a:af:
35:07:e6:fe:fe:bc:53:e2:b9:f1:81:e5:9f:2f:ae:5f:4d:a1:
5e:08:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:41:42 2024 by rpki-client on console-fra.rpki-client.org