Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: 8Ui6RBAhCIwOJRuHOGNyeaidR4f7M8Y5wI5PLQBx1Kw=
Subject key identifier: 9B:D1:40:F2:CB:F0:A0:23:BF:50:1E:AB:25:35:C9:DC:5A:AD:14:2D
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 018F84473D4559F08BFA9D4AD8A1A319C82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 027D
Signing time: Fri 17 May 2024 02:00:12 +0000
Manifest this update: Fri 17 May 2024 02:00:12 +0000
Manifest next update: Sat 18 May 2024 02:00:12 +0000
Files and hashes: 1: OutjT0tfDG3D4Z419UN077RX0s4.roa (hash: MtR6gwYg/VeRmJlPHAfWQj6+WaOkz76BoJM8IZlY9Qk=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: 4te6vag7V0QLnotfEbbqCkTCg7zlX6tBM0kyWDYCZxM=)
3: nYUf1Bpqqw81PIYMP7zHI8LPCbE.roa (hash: uJVn/a2pRVY++zObgnKFP8ShblwX/c0Fyji2zoPxzak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:47:3d:45:59:f0:8b:fa:9d:4a:d8:a1:a3:19:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: May 17 02:00:12 2024 GMT
Not After : May 18 02:00:12 2024 GMT
Subject: CN=9bd140f2cbf0a023bf501eab2535c9dc5aad142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:45:cc:a4:11:fd:05:ae:0d:1a:2f:a6:76:
28:a0:59:a7:f8:06:b2:48:57:bb:47:7b:33:93:e7:
f6:a9:0c:28:e0:07:ad:2e:3c:80:85:82:f0:09:7c:
c0:bf:0e:45:92:db:70:9f:ea:4b:2e:df:f2:dd:8e:
9b:f9:f5:9d:e6:a2:a0:42:9f:0f:8b:b8:47:b4:fd:
c9:f7:fe:bc:38:4b:77:73:ae:04:91:7b:64:18:31:
26:dd:d5:b3:d9:d8:15:8f:8e:f7:bd:ea:70:db:c9:
60:db:d6:0e:f4:dd:dc:74:8e:dd:67:fd:75:15:be:
b3:a5:0b:77:38:dd:17:84:c0:2f:05:3c:38:c7:54:
5a:c3:18:2c:e8:ce:b5:44:3f:6b:cf:1b:05:8d:ad:
4a:7c:70:34:dc:2d:15:6d:2f:8d:46:2f:61:49:37:
b7:4b:9b:c9:3d:99:6d:6c:4c:08:f5:e5:58:aa:15:
2e:68:0c:86:fb:a6:0d:df:94:8c:b4:4f:b7:f3:68:
b6:02:81:46:bb:a1:59:7f:f4:56:63:ce:4e:1e:55:
53:57:8c:e7:40:cb:4d:51:f1:fd:14:75:fa:53:7c:
ee:60:1e:5f:56:55:55:03:53:0d:0b:4d:b5:47:5a:
3e:39:90:8d:ee:80:f3:15:b9:92:f4:70:25:56:b5:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:40:F2:CB:F0:A0:23:BF:50:1E:AB:25:35:C9:DC:5A:AD:14:2D
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3a:35:0a:49:f0:26:a9:7b:c0:a9:f7:58:4c:5c:9b:0d:7b:
32:9e:e2:e2:af:cf:ea:af:d1:b6:a9:9f:d7:49:80:fd:b4:14:
22:f3:9c:1e:a5:ee:10:5d:31:51:fe:2f:41:45:15:2a:16:bf:
a6:a2:76:61:d4:61:69:9e:06:e4:39:32:76:e9:31:a4:43:b2:
37:95:ba:b8:c7:b5:86:dd:9e:1f:d2:c9:c5:86:26:d7:e9:02:
f9:05:34:cf:9c:77:1b:67:3b:61:87:aa:49:65:54:f2:4c:10:
df:96:e6:de:a0:ee:b1:6f:50:1e:d9:3e:9f:2c:41:0b:52:0e:
94:3c:e1:2a:ef:a8:17:3c:90:be:9c:a0:ca:8c:f2:0d:0d:1b:
ea:1d:1b:b1:ed:c3:f6:2b:45:86:9b:99:1f:45:bc:ef:01:ee:
55:f4:d2:1b:d2:bf:59:39:8a:d8:18:00:b6:1a:c6:5d:2c:16:
ab:85:09:ba:23:b5:1a:8c:d9:6f:4f:99:6a:df:0a:87:66:21:
8d:05:8a:0f:79:5d:6a:a9:e6:72:47:ed:29:16:17:14:87:7a:
2f:f8:53:10:2b:e5:25:41:78:ae:5f:00:d5:cd:91:80:1f:c3:
61:33:75:df:db:cc:f9:bf:9c:78:70:f0:38:ac:00:12:6d:97:
65:9e:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:09:31 2024 by rpki-client on console-ams.rpki-client.org