Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: hthAlabHuGS6xk4qW/FWS3UuQDbaBAcQKaJmvCQtG9c=
Subject key identifier: 76:A3:DC:7C:9D:82:10:46:CE:97:D2:C1:09:5C:87:BB:DD:A0:A8:3A
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 018F53263E4D62D2846DD00880B2FA41AF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1166
Signing time: Tue 07 May 2024 13:02:46 +0000
Manifest this update: Tue 07 May 2024 13:02:46 +0000
Manifest next update: Wed 08 May 2024 13:02:46 +0000
Files and hashes: 1: FBo3rXSo4tn8EVRM21I5Ufp335o.roa (hash: D2os3Gt1IXQLAdh8NwkUbqgtfFwB4PcyhmDSUr8ZtMw=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: Rs2Nl/fZGwCibbhuTxfFl/UXfx338cZB5uM7D0HcVUs=)
3: SmVC_klti-gl_TIgkUw3U36PLq0.roa (hash: 5TDZkPUKsTMw0sf7aFQNqyeD3ES+nj6C5dwI60rbnw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:26:3e:4d:62:d2:84:6d:d0:08:80:b2:fa:41:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: May 7 13:02:46 2024 GMT
Not After : May 8 13:02:46 2024 GMT
Subject: CN=76a3dc7c9d821046ce97d2c1095c87bbdda0a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:50:e2:ca:ef:4f:c6:2c:0e:33:20:f0:bf:
e5:84:a5:ea:e5:51:2c:ec:1f:75:08:f7:33:d8:33:
58:be:2d:5e:39:c3:08:4e:af:7d:b2:b8:bd:14:ed:
1e:bd:b5:21:14:0e:85:e2:dc:cb:88:c4:02:60:ff:
89:2c:d6:f2:37:ca:90:88:0a:5e:c4:a5:b9:40:27:
f2:bd:49:f0:65:09:0a:93:f0:54:53:70:ba:6c:60:
af:0d:12:c4:b5:25:02:92:e6:3f:30:1f:a7:b0:30:
8f:c2:ca:be:bf:be:44:da:c0:e3:14:0d:27:9d:21:
3b:6c:8f:bb:c3:e3:82:7f:01:8f:a7:07:a3:bd:3e:
70:4f:9d:82:f3:77:ca:83:ce:c3:43:5a:03:4b:c9:
65:af:f1:0d:c2:0f:ff:fd:49:83:ca:5d:d5:42:03:
cd:4d:be:16:09:ed:86:5e:6d:b6:5b:b5:19:e2:93:
87:dc:f1:ca:2a:65:c5:45:ab:01:c3:78:09:3f:e4:
bf:4c:41:a7:35:b0:1d:90:1f:33:9a:da:51:28:d2:
ce:90:b5:11:1f:fb:ad:38:c8:94:52:fd:a3:87:8c:
28:63:38:d1:b6:8e:69:21:83:77:73:4e:d9:cf:c0:
0d:fe:6e:b8:3c:65:8d:b1:db:5d:20:90:38:9d:d5:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:DC:7C:9D:82:10:46:CE:97:D2:C1:09:5C:87:BB:DD:A0:A8:3A
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:a9:7d:da:37:d1:91:48:13:cb:22:50:02:2a:21:80:ec:
7e:dd:9f:26:90:47:f7:36:a2:40:2c:70:f9:c5:3e:2a:e5:49:
01:ec:40:82:e2:c3:6a:e1:49:38:b2:7f:18:80:50:18:6a:42:
8c:24:99:fe:54:54:e5:15:eb:70:62:9a:ea:59:f1:c4:5e:28:
7d:ce:96:ad:f0:6c:ba:f4:a1:f4:74:fc:06:e6:c5:12:00:69:
3e:41:b0:c8:bd:dd:86:e7:b5:d5:59:78:a3:a6:e4:99:13:77:
c1:1d:f3:22:67:d8:dd:af:ca:cf:34:04:7a:60:7d:a4:7c:2d:
9e:b8:37:65:f2:5a:0f:e6:fe:d1:d4:65:7f:43:64:24:89:80:
ca:8e:43:0e:63:0d:40:c7:42:03:f7:ab:2b:4b:77:ba:67:52:
44:4d:f5:cf:a9:0e:77:23:dc:54:1d:d4:1c:73:ed:88:22:56:
5b:d5:99:4e:ce:f8:1b:18:18:07:49:52:04:23:7b:e7:6b:c0:
52:aa:fd:ae:ca:7b:6a:ee:ba:d4:5b:de:ae:f4:be:61:3a:6f:
f9:1e:1f:26:37:c6:d5:f6:89:3f:fa:dc:b7:06:70:22:ae:20:
18:8b:15:1b:f8:2d:73:f4:e1:74:a9:5e:08:5c:da:b9:f4:84:
32:b2:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:23:10 2024 by rpki-client on console-ams.rpki-client.org