Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 9kYzuyII+JN5z7kMXniu4aIMUTeIxURwlE/wJzDW4Is=
Subject key identifier: C6:2E:2E:B3:A5:C9:C0:EC:92:59:53:56:5B:A8:AF:4E:71:9A:62:70
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 018F4BD9A352E2303F1AE6D8569F2341146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1157
Signing time: Mon 06 May 2024 03:01:45 +0000
Manifest this update: Mon 06 May 2024 03:01:45 +0000
Manifest next update: Tue 07 May 2024 03:01:45 +0000
Files and hashes: 1: 5O7EGZ-YPGS7LViYdkAWD94aKAo.roa (hash: yhe5yjeQiEWOuuL/WG8FI6Qh7BiD146+ixWJuLj8P9I=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: B2xuzzqNDrgzFz4idInwfzwMH27ZEBfWr3Qfivu1SzI=)
3: nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa (hash: 3Q/jn3FHXZUVQEH27wPd7CkcjgJ+DjfHku5Vp2ZgSk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:d9:a3:52:e2:30:3f:1a:e6:d8:56:9f:23:41:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: May 6 03:01:45 2024 GMT
Not After : May 7 03:01:45 2024 GMT
Subject: CN=c62e2eb3a5c9c0ec925953565ba8af4e719a6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:0f:2f:79:14:10:24:d8:ce:99:e1:94:3d:
23:ed:c3:6c:e9:99:f6:03:be:34:a9:22:5d:5b:57:
f8:8d:0b:db:ce:1a:49:69:09:6a:d0:a6:36:6b:e5:
f3:90:b1:5f:1b:df:9a:e4:8c:94:b1:96:ee:c4:53:
d7:8a:7b:1a:04:a4:7d:b3:e5:b6:20:8b:55:35:8b:
53:fb:b4:9d:15:ea:68:7a:46:2a:3a:cb:7d:28:46:
48:65:d8:2c:02:a0:8d:71:47:da:ab:c5:23:3b:54:
c3:91:57:50:b4:e3:99:07:8e:03:76:cb:3c:38:c1:
53:0f:84:f5:c7:4c:7c:94:4c:7d:53:86:c7:0e:48:
30:61:cf:83:fd:87:d6:2e:9f:bf:6f:a3:84:00:c2:
10:e7:01:b7:f4:19:f4:1f:07:3e:b7:ae:fa:e1:ba:
d0:5d:4a:2a:f6:e6:e3:d2:fe:3e:08:ca:8b:47:7b:
40:41:d3:03:7c:38:ad:c6:df:a1:32:ae:c1:9b:7c:
75:42:25:e8:ed:4c:87:69:04:e8:34:8f:0d:f0:99:
7b:25:30:80:1e:27:f7:8c:c5:45:01:8e:03:0f:a1:
de:a0:4d:68:f2:24:57:00:f0:ef:63:43:6b:6b:09:
6b:19:ad:5e:fe:1f:aa:08:ba:98:6f:46:ed:1e:43:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:2E:B3:A5:C9:C0:EC:92:59:53:56:5B:A8:AF:4E:71:9A:62:70
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:4a:e6:5f:aa:ed:97:0f:1f:78:c8:80:c5:fa:b7:e0:d7:
3b:12:7f:90:2c:61:0e:b2:7a:d8:b4:69:2c:24:b0:f7:3b:85:
1d:f6:12:99:af:3b:70:e2:8a:7d:70:fc:60:00:de:04:1a:a1:
2f:4f:5e:2d:9a:64:c2:5d:dd:02:9a:44:fc:66:a4:6f:c0:45:
48:21:16:5e:94:e4:a2:ed:b3:52:a8:65:68:c1:cf:12:92:ba:
e3:35:e3:9f:7b:8f:16:f4:26:82:44:49:a4:af:b4:1f:df:fb:
0c:e6:19:aa:17:c0:67:8d:2e:3f:fd:e0:f7:30:d1:25:22:0e:
06:07:7e:ff:89:fd:d5:b3:1a:28:03:eb:f2:59:e9:be:3f:16:
3e:00:e9:06:d9:de:ad:7a:f8:2d:15:4a:13:30:ee:53:1e:c3:
ac:3f:6d:5b:51:43:57:da:ab:67:b5:42:1e:1e:91:c1:89:1d:
bc:1c:2c:ef:7b:e9:32:da:a0:64:e8:b5:d6:09:e9:83:16:10:
86:82:56:0e:86:e3:b8:bd:d6:80:13:ba:60:21:01:b3:4a:2f:
76:56:77:b0:bb:76:c4:2d:59:60:26:3d:d3:6d:7c:c4:99:24:
5e:8b:4d:a1:7d:c1:6b:1d:ba:04:4e:12:f4:14:9a:e4:51:fe:
ec:44:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:07:51 2024 by rpki-client on console-ams.rpki-client.org