Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: JhI54/7///J83rBcTcOp5HLf0VgE30HCOf9hLeRTxqY=
Subject key identifier: FD:8D:D9:73:C4:35:BB:E7:F9:12:32:CA:DF:1A:2F:33:F7:2B:64:94
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 018F57DDD53766BCE6F9683939F4965E35C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 0DA6
Signing time: Wed 08 May 2024 11:01:46 +0000
Manifest this update: Wed 08 May 2024 11:01:46 +0000
Manifest next update: Thu 09 May 2024 11:01:46 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: 9PkqO/tNPOg4WWsg+h7Z1z8N4GVTtoFknRs8gBnbD/Y=)
2: KSbfT1ONWW_HMUDTAX-obz0PFXI.roa (hash: VzleBWGAw+yd4HzAbG7MAE5SuTRuSnGo7F8GgskNvPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:dd:d5:37:66:bc:e6:f9:68:39:39:f4:96:5e:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: May 8 11:01:46 2024 GMT
Not After : May 9 11:01:46 2024 GMT
Subject: CN=fd8dd973c435bbe7f91232cadf1a2f33f72b6494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:34:69:9e:06:16:35:79:5a:08:20:d3:ac:
fa:31:d9:4a:b6:3c:49:e6:c2:be:4e:35:08:05:e6:
cc:2f:f2:4b:c4:02:3c:4a:1e:7d:05:f4:d8:f7:76:
61:fa:47:04:6c:27:29:dc:af:9d:60:bf:cc:bc:d2:
dd:8e:ea:0a:32:db:df:73:5f:b9:f4:0a:60:12:73:
b2:72:5d:a1:f6:e8:f9:32:60:dc:dc:5d:a3:ea:16:
fa:8c:4e:6f:14:71:75:7a:a3:30:f1:c5:83:46:4d:
b4:f3:fc:92:87:07:c7:e8:e3:40:8a:de:6c:70:82:
4d:eb:77:6b:f3:c5:a7:ac:66:17:fd:e3:c7:ec:90:
5a:62:d2:47:49:27:80:e4:d2:8f:ca:0a:d9:d7:a3:
4b:44:5f:13:d3:94:1f:96:e9:1c:20:90:5e:34:56:
5c:e3:4e:25:2d:41:6c:d1:05:32:fb:56:3b:2c:9c:
df:f6:cc:b5:4f:47:ff:79:67:00:eb:f9:14:60:af:
28:88:44:19:75:2f:65:46:f1:c3:02:bb:d8:76:0f:
46:cb:18:96:7c:71:2e:0e:31:80:e6:e1:22:c4:ab:
cb:01:30:41:01:84:21:c6:7d:42:d0:11:64:71:f7:
31:20:34:5f:7d:7b:25:a5:3e:8d:3d:12:c6:7a:0d:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:D9:73:C4:35:BB:E7:F9:12:32:CA:DF:1A:2F:33:F7:2B:64:94
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:9d:53:d8:83:9e:ec:8f:34:dc:1d:f8:bc:95:36:68:3c:e7:
74:21:6d:d4:8f:66:32:28:0a:b7:04:81:1b:60:7c:8d:a0:ee:
52:df:2c:ce:db:1b:2e:dc:15:c1:7d:8e:47:cb:39:c4:7f:7d:
b4:a6:7c:39:21:01:31:46:ac:68:0b:24:01:bd:f0:f8:6e:ee:
b5:30:4f:80:45:14:55:6d:01:a3:c9:bd:22:cf:2e:b1:ab:db:
d4:66:73:f4:e3:3f:0d:23:01:fd:46:c7:bd:8c:b5:a8:24:00:
bf:c3:f5:a0:75:48:d8:84:ca:48:83:6d:55:8b:74:27:8b:83:
17:eb:7c:4e:0d:5a:d1:59:c5:13:da:c7:64:ba:42:01:e7:cc:
27:90:81:ce:03:a0:1c:9b:73:01:d9:ba:f4:61:e6:e9:71:52:
bf:47:56:99:12:03:7f:cf:fb:f8:95:af:c2:22:5e:0a:31:82:
22:2d:72:d7:0f:c8:eb:d9:57:3e:7e:fb:1c:17:12:85:a8:7d:
52:50:46:16:e0:90:35:94:41:20:ab:f8:d5:65:5c:f1:2f:2c:
0d:31:d3:00:a5:fb:5b:58:5b:76:ce:41:a7:f0:ec:82:5d:22:
3e:e7:eb:13:a3:d3:c7:7a:c0:e0:ef:03:71:d2:71:08:9b:25:
06:45:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:48:41 2024 by rpki-client on console-fra.rpki-client.org