Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.mft
File: z8pc0xF2-_NsUyk5fyJR1GpdHaU.mft (raw, json)
Hash identifier: msfpY4wJZhlDl8ICGND8S75bjWgu868gAXtqvGLFH7M=
Subject key identifier: 42:13:6D:A0:B1:39:C5:B0:A5:5A:79:9D:F5:1F:A3:C3:28:4D:61:7E
Authority key identifier: CF:CA:5C:D3:11:76:FB:F3:6C:53:29:39:7F:22:51:D4:6A:5D:1D:A5
Certificate issuer: /CN=cfca5cd31176fbf36c5329397f2251d46a5d1da5
Certificate serial: 018F8748DF920A3D3C621B5A9D5A4103C4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8pc0xF2-_NsUyk5fyJR1GpdHaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.mft
Manifest number: 08D8
Signing time: Fri 17 May 2024 16:00:51 +0000
Manifest this update: Fri 17 May 2024 16:00:51 +0000
Manifest next update: Sat 18 May 2024 16:00:51 +0000
Files and hashes: 1: z8pc0xF2-_NsUyk5fyJR1GpdHaU.crl (hash: XUQdhdsH3yAmB8kFcRZMJl8985FnbsaMZ6gBaoJ/xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8pc0xF2-_NsUyk5fyJR1GpdHaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:df:92:0a:3d:3c:62:1b:5a:9d:5a:41:03:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfca5cd31176fbf36c5329397f2251d46a5d1da5
Validity
Not Before: May 17 16:00:51 2024 GMT
Not After : May 18 16:00:51 2024 GMT
Subject: CN=42136da0b139c5b0a55a799df51fa3c3284d617e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:ff:d2:25:8d:66:bd:90:ea:e9:29:ee:0d:
db:23:17:0e:61:8b:6a:79:13:ac:5d:b0:6e:31:2f:
1e:2a:e9:c3:bd:b4:c6:5a:0d:1b:e9:b8:c0:78:35:
38:b5:4b:59:d3:cd:a9:04:d9:af:9e:65:2d:74:29:
fd:a2:a6:31:7a:9e:8b:73:c0:6b:60:8b:65:9d:46:
da:38:b1:ef:0c:df:ae:20:55:23:05:94:93:4b:09:
40:51:85:dc:95:d3:be:98:1b:4f:b3:f9:a9:7d:33:
67:1c:94:97:14:40:f1:83:65:25:8f:e5:57:a4:59:
bb:0a:1c:f4:a8:8e:47:0d:b3:80:4a:1e:52:f1:12:
60:ea:af:51:e6:e6:66:71:85:5e:6f:66:7e:fa:a8:
cb:06:22:db:16:ae:93:15:f6:a0:9a:17:e2:73:66:
82:a7:60:19:14:b2:54:15:a9:f0:02:b3:81:dd:f8:
21:88:f7:71:b7:6d:ba:bf:eb:55:fb:07:52:33:68:
29:00:ec:5f:e5:0b:eb:34:96:b1:28:ed:a6:05:2e:
5d:60:1d:2c:49:8f:e6:ed:5d:ac:59:71:c5:d5:78:
73:80:39:46:05:57:ba:8d:0f:3f:66:f2:e0:f8:6c:
21:78:ff:67:9c:1e:eb:fa:66:03:91:41:b9:98:02:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:6D:A0:B1:39:C5:B0:A5:5A:79:9D:F5:1F:A3:C3:28:4D:61:7E
X509v3 Authority Key Identifier:
keyid:CF:CA:5C:D3:11:76:FB:F3:6C:53:29:39:7F:22:51:D4:6A:5D:1D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8pc0xF2-_NsUyk5fyJR1GpdHaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/722367-603a-4490-8bf4-d1179ce015b1/1/z8pc0xF2-_NsUyk5fyJR1GpdHaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8a:a4:89:7d:e0:bc:f2:24:d8:1c:56:3e:a9:e7:cc:e0:fb:
5d:86:f0:22:d2:d0:2a:21:ec:dd:6b:47:f1:bf:7e:76:2c:b3:
cc:84:25:e0:af:78:04:d0:5a:e3:01:45:90:40:27:30:8f:e6:
09:33:fd:e5:c4:e1:07:1c:67:ec:a4:ac:bd:94:f5:06:4c:fb:
09:f8:54:50:57:28:0c:cf:1a:dc:66:7d:17:79:2d:78:6b:7f:
a6:a3:3a:d2:53:a6:b0:b0:5b:82:9c:dd:f9:34:35:ca:1b:d2:
37:22:5c:cf:63:a7:62:dd:72:36:35:cc:9d:6c:21:fd:54:81:
b9:9f:0d:53:7a:96:a0:58:93:9f:df:42:80:ae:5e:50:39:52:
40:36:b8:5f:d3:f0:76:83:bc:ba:86:8b:cc:b3:90:46:99:12:
b6:8a:36:9f:ad:84:54:76:89:20:58:dd:30:84:95:b4:f4:16:
2a:89:6a:4e:d7:08:90:a4:5f:07:0a:b3:35:cd:7e:b4:bf:e8:
b2:df:2f:63:70:16:1a:31:be:5a:a4:87:89:29:bf:6d:4f:5a:
7a:94:19:2b:fd:41:91:89:7b:67:a2:9c:c7:24:81:4b:01:64:
ec:28:2e:93:a3:d6:11:fb:1f:5a:b0:a1:d4:97:7d:48:99:31:
5f:ad:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:07 2024 by rpki-client on console-fra.rpki-client.org