Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
File: 2LogEg7G3ID9NRpTPSyFyg2YMpk.mft (raw, json)
Hash identifier: Scfm39TEPrSFUv9U7i0zNNY2uSfbd49SHMr16ec+PAY=
Subject key identifier: CA:83:BD:A9:F3:B3:90:51:44:83:B6:9A:89:AC:9A:23:29:EE:E5:E1
Authority key identifier: D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99
Certificate issuer: /CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
Certificate serial: 018F53258712E46498E77046B7BE4D8FAACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
Manifest number: 0C43
Signing time: Tue 07 May 2024 13:01:59 +0000
Manifest this update: Tue 07 May 2024 13:01:59 +0000
Manifest next update: Wed 08 May 2024 13:01:59 +0000
Files and hashes: 1: 2LogEg7G3ID9NRpTPSyFyg2YMpk.crl (hash: Mq+pg3hL0PTLj2gkDhcFRhVrYQj4wmLyXxSDtWCRWis=)
2: 9V2BKnKBMK0VJ7PFnAdXsUMYNqo.roa (hash: 0FjCfTTIm1iCsgiAhyU8h37USdk2WAUxdtXx4UpG5E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:25:87:12:e4:64:98:e7:70:46:b7:be:4d:8f:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
Validity
Not Before: May 7 13:01:59 2024 GMT
Not After : May 8 13:01:59 2024 GMT
Subject: CN=ca83bda9f3b390514483b69a89ac9a2329eee5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:6d:6e:5a:74:29:b4:02:e8:84:c0:53:7b:
d1:b1:52:e4:d9:5d:6a:46:e3:86:41:57:12:a8:7a:
e3:50:b7:e7:0c:ef:47:7e:b4:8b:e0:b1:f5:55:36:
9b:6c:db:3a:f4:5d:04:73:31:8c:57:3b:91:33:46:
4a:ec:47:96:da:3c:45:7c:6e:e9:77:e7:07:55:3d:
b4:41:5f:c5:c0:0d:cc:ee:5a:c1:e8:8a:77:fc:a9:
1c:06:59:24:04:7e:1f:de:a8:4a:d4:5d:3e:d6:26:
0c:04:a6:55:21:cd:71:34:24:64:c3:7e:0d:70:50:
d3:a8:5b:2a:09:58:30:c8:06:a8:8a:c4:3a:be:38:
b4:f4:87:a7:dd:bb:e1:82:78:67:a0:90:10:5c:e8:
b1:83:5b:8b:bf:10:66:60:a7:b1:97:3b:89:fd:65:
6e:bc:cd:28:11:37:63:ca:14:21:c8:45:1c:11:bd:
8e:e8:ae:84:56:88:2d:c8:01:f5:75:b6:80:3b:49:
97:19:a2:ff:5a:32:ff:00:dc:0a:94:26:16:65:7e:
9b:66:77:16:60:47:bd:4d:2c:08:e6:3a:36:26:4f:
6a:09:4d:a7:1c:cd:5d:ba:05:10:f2:01:eb:73:c8:
ad:2d:c5:f7:da:bb:a7:b4:71:ee:8c:5c:d2:20:46:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:BD:A9:F3:B3:90:51:44:83:B6:9A:89:AC:9A:23:29:EE:E5:E1
X509v3 Authority Key Identifier:
keyid:D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:20:63:e5:dc:f6:8a:ad:d3:34:b4:77:2a:1e:e2:53:51:31:
b3:9f:a3:b8:06:86:0f:ce:df:22:93:9c:75:da:f3:cf:cc:c1:
75:3a:f2:e4:5d:32:8f:ea:46:a6:2e:71:18:91:8b:cb:6d:63:
76:14:31:ab:7c:0e:df:02:f0:ef:e3:ac:41:e4:9a:df:36:5a:
3f:ba:8c:25:86:a1:5e:6f:be:73:49:e3:34:2e:2e:29:9c:b1:
bd:81:0a:05:1b:e9:da:55:aa:24:5e:ad:45:dc:2d:d6:f4:50:
ea:46:08:c5:c6:06:f7:84:5c:82:c4:5b:67:9c:c1:48:22:d0:
f4:5c:d9:26:7f:61:26:ff:f0:22:09:3c:23:98:7b:79:dc:b5:
35:5d:27:e9:72:a9:20:ce:44:a5:a2:65:2d:7b:c4:9c:72:6d:
68:43:db:84:e8:32:0a:59:c9:b4:7b:21:45:e0:d4:d6:ad:8e:
c5:ed:6a:b3:19:25:6b:8f:92:ad:96:39:79:f2:ad:72:e2:a6:
51:06:c1:0d:83:31:85:fc:8c:c0:26:26:69:76:b0:14:97:70:
5f:d1:8d:83:3d:d9:3a:59:ca:8b:7e:67:af:09:b2:f6:2c:df:
8e:6f:2b:70:6a:fc:95:82:6b:46:16:71:8c:fe:d2:4d:f9:9c:
98:8f:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:24:31 2024 by rpki-client on console-ams.rpki-client.org