Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: /EtVrCcI0Lx1459irJwEKYkcFftkRHqJZ83Apx+tNv0=
Subject key identifier: C5:CD:34:C8:7D:C4:32:2C:82:B2:DC:FD:0D:D2:ED:EF:95:B1:EE:64
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 018F874A00D22C7DB63900D61D82AB9D14BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 0CDA
Signing time: Fri 17 May 2024 16:02:04 +0000
Manifest this update: Fri 17 May 2024 16:02:04 +0000
Manifest next update: Sat 18 May 2024 16:02:04 +0000
Files and hashes: 1: 7V3pjwwfxri4MUk8yrLc0GXJRN8.roa (hash: vOIrEz79Q90iIWL26Y3mzooo2OgyL1FaNv46STXMkcg=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: seR3zSFju/RClX4eQ7iB2ZE35mLXhGIVRKWvOZgkukc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:00:d2:2c:7d:b6:39:00:d6:1d:82:ab:9d:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: May 17 16:02:04 2024 GMT
Not After : May 18 16:02:04 2024 GMT
Subject: CN=c5cd34c87dc4322c82b2dcfd0dd2edef95b1ee64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:2e:f3:a3:5a:02:6c:33:bb:e6:58:fb:9d:
4f:37:d1:58:05:bf:94:c1:44:71:59:67:81:0e:6f:
8c:03:d4:c6:fe:d4:2e:58:7f:da:b8:82:a6:c3:01:
6f:51:7c:5f:44:74:7e:70:7d:ed:2f:9c:41:dc:45:
de:92:bf:4f:e4:b6:61:ef:06:d9:e9:18:e6:40:7b:
21:0a:da:04:0c:de:ff:ca:0d:2a:cc:79:a9:36:54:
09:e7:c5:3f:9f:f4:d8:d1:bb:ce:0d:f5:30:2f:c1:
19:9a:dd:b9:b4:ae:63:23:fb:34:b2:79:5d:d5:d2:
d1:e6:5e:75:1d:44:71:fe:8a:fc:04:77:59:89:68:
53:ef:94:33:86:2f:6c:7a:b1:fa:20:d6:1e:0e:59:
24:51:f4:9b:bc:9b:58:f9:f5:c2:1c:f3:d1:e9:21:
c2:6c:e7:a2:ae:24:0a:17:6b:c0:a6:3a:bc:76:9d:
d9:de:cf:e1:1e:65:f2:4f:f7:59:04:fd:d8:d4:b9:
e3:46:65:e8:4f:2a:a0:e2:8b:b5:57:c1:cc:3d:30:
0c:ee:a4:74:00:f9:05:bc:42:dd:49:61:dc:6b:10:
c1:d7:c0:1e:9d:f1:12:b4:18:0c:69:1d:54:d7:e0:
c1:4e:1d:01:0e:f3:22:84:bb:e2:b6:d9:99:45:c0:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:34:C8:7D:C4:32:2C:82:B2:DC:FD:0D:D2:ED:EF:95:B1:EE:64
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b8:84:f7:98:a3:e8:81:3d:28:fb:51:09:49:4e:14:24:55:
dc:c5:fb:4d:47:d2:0b:7e:4c:fb:0e:00:51:3a:9e:eb:99:84:
9d:ee:b2:a3:e5:93:4e:b3:8e:bb:50:bc:19:f6:46:c6:6a:67:
da:c0:a6:5b:90:6d:53:a0:08:7c:7b:ed:54:ca:78:24:93:4e:
78:a1:11:08:81:10:13:9d:58:99:87:e5:b2:d7:bf:9d:cc:4c:
c0:43:b9:71:d0:70:33:90:ce:27:59:ea:4e:cf:f4:df:24:90:
bb:2a:28:64:46:2e:8e:9b:a3:b7:ac:f5:65:77:be:4b:de:f8:
f1:c3:81:69:20:41:3e:f9:f8:d7:38:18:ef:b8:e8:ca:9c:b9:
87:ee:e7:f7:fc:eb:5a:69:eb:c6:cb:e8:e6:d7:e1:1b:f1:ab:
eb:1d:01:f9:5e:41:86:db:b3:f2:a9:10:00:e1:5a:03:69:06:
82:40:8d:03:14:aa:59:61:a3:c1:b2:ff:90:4a:b3:91:a5:80:
26:18:e1:ed:b6:eb:a5:75:07:50:84:bf:fd:8f:65:2e:93:e0:
bf:2d:87:18:db:47:db:77:7b:f0:41:f8:10:40:a7:e7:fc:7b:
36:28:23:3a:08:9c:bd:9d:b2:b2:a2:11:da:a3:b1:c1:d1:cb:
65:8e:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:22 2024 by rpki-client on console-ams.rpki-client.org