Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: Amre2am3ySJIbasxSx+kLSS371HD4c1D2GkOIzBMUdU=
Subject key identifier: 62:58:2A:69:B3:A0:79:8C:16:0E:0E:F7:B0:0A:B2:64:F5:2A:FF:07
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 018F3A77A16534E9D119520BC82146BD3EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 0D2C
Signing time: Thu 02 May 2024 18:01:09 +0000
Manifest this update: Thu 02 May 2024 18:01:09 +0000
Manifest next update: Fri 03 May 2024 18:01:09 +0000
Files and hashes: 1: Acqnnd00TIzsA2D45mcVF8C2SLY.roa (hash: 1yamboXtYyvNRrh9/fsF/L3JmTj/fAmtsr5iW8cPfdM=)
2: FN6BPeqVocLJ5_5Pi7_E4na0SoA.roa (hash: jjcLkmJzj80u1Ff9IMYefV2DSCaYSvUoIlNARnDrkkE=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: kbIn5adREHQHwf4WZVNVWmvfoOoQx08M1NEXGzyV7MQ=)
4: UfU8wNCKIeir-Xv392JTVmYcxIM.roa (hash: Sp/RcOrqJydwVweo85DmY3Z1nZV2Dxm4HHkrdCEddHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:77:a1:65:34:e9:d1:19:52:0b:c8:21:46:bd:3e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: May 2 18:01:09 2024 GMT
Not After : May 3 18:01:09 2024 GMT
Subject: CN=62582a69b3a0798c160e0ef7b00ab264f52aff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:50:06:d1:10:26:59:07:33:b0:53:e0:69:
53:da:0a:05:3d:c3:d7:f3:b6:16:ec:5b:a4:e9:be:
fb:79:0f:f3:bb:c1:d5:54:02:73:a6:c7:11:79:d8:
79:c0:a1:a4:83:9e:4d:62:87:96:34:cf:74:f9:54:
86:9d:75:7d:51:3b:b6:79:26:93:04:19:7a:b4:e6:
e9:31:88:2f:be:a9:96:2c:06:ee:dc:f4:c0:43:22:
ab:96:6d:bb:8c:86:68:26:8d:26:7d:fb:b3:4e:47:
14:3f:bc:e5:a5:dc:fe:40:7e:5e:26:cd:8b:53:a2:
16:a1:90:be:99:9b:21:69:60:0f:3d:88:79:53:92:
3c:c0:f0:c4:17:ac:0a:4b:94:42:55:4c:a3:d7:0f:
a4:51:ea:07:71:8b:10:d5:d1:4b:af:0d:5d:4e:ea:
a2:03:48:a3:ce:0c:39:43:60:a7:0e:8b:94:95:fb:
b3:99:cb:e9:e6:b6:30:42:2c:1d:30:62:f4:00:8b:
aa:bd:ff:60:5d:7f:41:7b:17:10:8a:30:75:f9:cd:
8a:a6:b0:f5:a0:8a:5d:c6:5a:9a:73:e7:82:db:dd:
f1:ae:1b:dd:2c:71:1a:4f:f9:8b:3b:92:30:39:a2:
1d:a0:34:d6:f2:68:d0:8f:7d:b1:5c:9f:1f:58:6a:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:58:2A:69:B3:A0:79:8C:16:0E:0E:F7:B0:0A:B2:64:F5:2A:FF:07
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bc:0b:34:8a:af:a0:69:a2:f6:54:18:51:62:b1:00:55:cd:
44:72:c9:11:30:58:9a:00:6a:8b:70:a0:8c:cd:4e:3a:e7:74:
a0:db:94:71:bb:da:d3:c4:8a:97:b9:ba:9b:be:b8:53:b7:3e:
43:98:9b:b8:6f:5d:8e:7c:63:8a:6c:03:23:14:51:34:b3:b3:
96:25:89:60:54:b0:e0:72:94:7a:c2:c1:12:35:0f:e5:ac:29:
03:0c:bb:14:68:0c:e0:65:b7:7e:12:cd:6e:03:7e:3f:16:75:
23:78:f6:98:cd:be:d1:8d:9a:d9:48:dc:99:d6:14:7e:5f:5c:
a8:b5:2c:c9:40:b2:a9:ae:3d:bd:8d:1a:57:bf:be:2c:78:b5:
23:d4:62:14:61:af:74:76:43:94:4f:cb:c4:66:00:d6:27:7c:
53:2c:d4:0f:aa:fb:49:70:2f:d0:01:c7:42:67:ab:6d:8f:08:
52:5e:c0:a2:a8:af:24:2b:7e:ae:68:ce:34:5f:82:ba:17:5b:
87:82:d3:97:f5:ea:c8:3e:70:c1:f1:5e:8a:81:19:3c:44:c5:
a9:ea:65:24:35:bc:f0:a7:72:74:b4:1a:bc:17:17:16:63:27:
60:58:0f:d9:dd:63:af:a9:19:23:eb:0c:33:c6:64:d4:96:d0:
67:a9:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:40:44 2024 by rpki-client on console-ams.rpki-client.org