Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: cMXM1tOaiLVuZPDTk4yRVWGmimzOCU0oa0B6PwLlzgM=
Subject key identifier: D0:E4:41:5D:02:6A:19:47:23:99:7A:F3:2E:B5:F6:CC:F2:67:FD:0C
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 018F3C9D24F270AB49426E84249E9608FAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1151
Signing time: Fri 03 May 2024 04:01:22 +0000
Manifest this update: Fri 03 May 2024 04:01:22 +0000
Manifest next update: Sat 04 May 2024 04:01:22 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: L5BuaPGdaWMC18ah/rUla+1lMTVw0VmT7iroWK//eCY=)
2: 6zDkIYin6hjNU93HYidbnnmjxAA.roa (hash: B87pCBhSwO+AAWSCGxZWpM6NZCv5K0VELB5p5h+UiLY=)
3: Z4UlxfpxDDJeeCZ4NXFupGhZ4VI.roa (hash: SP/VmFJNcsbYvNxARfyNNSyTIXE1Ln/1yY0CDeHYCSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9d:24:f2:70:ab:49:42:6e:84:24:9e:96:08:fa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: May 3 04:01:22 2024 GMT
Not After : May 4 04:01:22 2024 GMT
Subject: CN=d0e4415d026a194723997af32eb5f6ccf267fd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:8a:54:0d:7b:75:6f:45:61:38:3f:de:f0:
22:f3:c9:ce:79:f3:9a:9d:dc:90:d1:2b:26:ae:e6:
64:32:1f:83:e8:c8:54:d0:8e:01:7c:d6:87:f3:70:
aa:58:6b:14:5a:8b:d9:f7:c2:ab:0f:2a:dc:3a:92:
da:b3:3e:7f:85:8f:aa:e3:3b:cd:b0:2b:d2:75:b2:
37:0b:fe:11:09:c4:c8:05:6c:2a:f0:79:76:62:97:
66:59:1e:0d:9e:45:5f:df:1d:34:5b:64:aa:b4:df:
5c:f1:82:e7:42:b5:46:ad:95:1c:3a:a9:df:39:9e:
fe:0d:aa:15:78:4e:ee:f5:16:d1:ab:f2:55:c6:38:
1e:9e:4b:8c:f6:9b:5f:42:4e:7b:60:5c:29:f0:10:
d9:46:5a:a1:ed:89:00:01:50:dc:37:9e:c8:83:f4:
e8:1f:be:70:23:59:fc:10:e5:c5:7b:e1:67:57:47:
78:c6:5c:ed:f6:d3:86:23:e3:eb:70:7f:9c:f8:27:
62:27:e5:df:ee:50:fc:c5:ed:9d:67:35:6e:b9:7f:
ea:fd:68:3b:55:73:72:ea:4f:ad:59:53:e7:9a:de:
26:2d:dc:6d:7d:4e:c1:bf:a9:c9:c6:ab:cf:df:5b:
e4:99:f7:3d:5d:58:43:57:d5:2e:bb:62:a1:f5:df:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:41:5D:02:6A:19:47:23:99:7A:F3:2E:B5:F6:CC:F2:67:FD:0C
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:62:4d:9c:f5:44:79:f1:45:42:a3:c0:27:4b:64:04:91:
4c:12:f1:42:3f:2a:c6:7d:3a:94:12:03:51:bb:4b:60:03:0d:
bf:85:33:37:cd:f6:00:55:1e:55:68:3a:bb:7f:87:54:0b:c9:
7a:11:08:eb:9b:cd:ec:ea:fa:87:1e:88:74:68:25:a0:76:bf:
92:33:e9:61:11:5f:ea:9d:df:2e:b5:33:14:c8:e6:25:c4:d9:
45:72:5b:a2:f9:f3:d9:11:d6:42:ee:52:aa:8e:a1:78:dc:7d:
c2:10:51:9f:38:0b:10:a8:6d:86:0d:18:ff:85:d0:5f:c1:22:
d9:a2:e7:62:5b:71:c2:33:d4:0a:fb:a8:8c:a9:4b:da:be:c3:
50:ad:8a:9b:db:ca:8c:db:80:47:47:f9:e8:a1:e7:5a:b6:8a:
7d:8c:0e:86:45:41:d5:0f:bf:ac:85:46:22:1a:45:2b:ac:20:
96:c3:31:93:de:03:f9:15:a5:c1:5a:60:ce:2e:7e:d9:89:71:
6d:98:bb:78:61:aa:08:dc:28:8f:da:4e:b4:9a:f7:3f:1f:5b:
a3:ee:6e:90:61:93:5d:f7:e3:63:53:6c:09:17:7f:2c:37:08:
20:5b:c0:c6:25:39:0d:43:4f:41:09:3e:4c:b4:1a:47:f0:08:
d3:92:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:57:02 2024 by rpki-client on console-fra.rpki-client.org