Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: Du8XAuu3T/sAnz/TYwvJErdWUyU6Bn0MSP3EK2RurTw=
Subject key identifier: 82:45:61:9A:F5:BF:B8:B4:C0:AF:BD:D2:58:98:67:D5:5D:04:DA:D3
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 018F5138D91808242AE55663E03D7BE5C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 0D60
Signing time: Tue 07 May 2024 04:03:51 +0000
Manifest this update: Tue 07 May 2024 04:03:51 +0000
Manifest next update: Wed 08 May 2024 04:03:51 +0000
Files and hashes: 1: 0F4Iz2bBZpzI7P8viD6JfDopoA8.roa (hash: axu5M+9YwSxSfnQqY4kxm7IUlN4wLDEb2hGebzksNlw=)
2: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 1OXutqqTmDkR6KAiVb9cKA7hgj99ktWS3DzU2yr6ztY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:38:d9:18:08:24:2a:e5:56:63:e0:3d:7b:e5:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: May 7 04:03:51 2024 GMT
Not After : May 8 04:03:51 2024 GMT
Subject: CN=8245619af5bfb8b4c0afbdd2589867d55d04dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:00:a2:81:2c:03:6a:06:79:90:a6:93:eb:
42:a8:28:ef:a9:f9:c5:41:99:91:31:84:c8:15:88:
b4:24:67:0c:50:b2:1c:db:53:29:bf:9a:8f:b2:5b:
35:25:24:e1:9e:40:01:09:6d:cc:5c:37:47:37:58:
1b:71:00:76:84:1c:ba:a8:37:be:80:a2:19:f9:bb:
21:d5:20:99:d7:00:d1:93:ed:88:f5:1c:8f:d6:68:
6b:fe:c3:07:bd:6b:e2:14:e2:63:00:66:92:e8:3e:
87:bc:d4:ff:2d:93:df:3e:01:8f:e5:63:08:b8:40:
c5:45:1b:f8:b8:fc:49:85:e1:f5:b0:7f:48:18:2f:
c6:4e:b9:67:53:d5:6e:27:9c:4d:50:c9:d9:24:19:
4a:5a:d4:6f:da:f6:60:4f:39:9c:de:09:6f:9a:0a:
3c:ac:0f:be:4e:12:9d:81:70:33:4f:8e:af:50:bf:
a6:d1:68:e8:ec:21:f9:e2:d0:70:9d:b4:27:9b:2f:
38:b9:ee:a4:60:e4:bc:c9:e1:1f:36:7c:bf:5f:34:
95:08:81:93:37:39:48:05:99:fa:97:38:94:5f:31:
a7:ac:db:f4:0b:3c:92:34:d9:96:ab:18:c1:a9:11:
84:6a:74:1b:0d:6d:63:a9:b1:31:8b:a5:8a:5e:3a:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:61:9A:F5:BF:B8:B4:C0:AF:BD:D2:58:98:67:D5:5D:04:DA:D3
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cd:f7:59:44:a4:55:d7:54:85:0f:b5:20:f6:ab:13:ed:99:
04:e5:66:d1:01:7b:67:a7:91:00:41:ba:9c:f8:f3:23:9b:54:
41:20:ce:f6:0c:e4:37:00:b5:d4:ed:f1:4d:af:fe:3f:f2:ab:
92:a3:a5:12:43:c2:25:d9:01:67:f0:ac:41:e7:90:a7:30:29:
5b:00:9f:58:d3:5d:ba:29:79:44:5a:9b:0d:d6:0b:fd:c2:e1:
82:78:da:be:81:c4:b6:54:eb:6e:bb:17:be:5b:10:17:75:3b:
00:cd:5f:9a:85:66:33:94:9d:41:71:d7:82:97:32:ed:01:6b:
04:1c:ce:30:c4:5f:ce:d6:7c:d2:bd:6e:9c:d5:c7:f5:7b:85:
d5:46:e3:ff:a0:73:f4:81:ab:87:f2:00:20:69:ec:eb:35:11:
e1:62:6d:d2:ad:47:ff:e1:cc:39:b7:3c:24:a3:e8:5b:f9:b0:
3e:41:fd:32:bd:49:d0:5a:03:21:c5:96:5a:46:44:c6:55:2a:
bd:0e:4d:4f:b9:3d:a2:48:ce:7f:be:3e:b8:d0:f8:62:09:ec:
5f:8d:64:10:c8:0b:76:fd:7c:fc:cd:35:c1:27:6e:e0:a6:c9:
89:89:f5:ba:b2:07:87:be:6b:c8:28:38:e8:5a:1a:ac:ba:70:
da:16:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:09:52 2024 by rpki-client on console-ams.rpki-client.org