Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: 3F1Jiw/U1G02RNgbkEZPILdj60evX80wq0Z2WaWZ9To=
Subject key identifier: EE:24:45:D8:23:E9:62:81:AA:AA:7B:A5:E7:FF:00:09:92:02:BB:4A
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 018F6B9B69938ECACB11CA62F7A3D4ACB45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 0EA4
Signing time: Sun 12 May 2024 07:01:38 +0000
Manifest this update: Sun 12 May 2024 07:01:38 +0000
Manifest next update: Mon 13 May 2024 07:01:38 +0000
Files and hashes: 1: 07NWID6jL0m5jirJinvrrEJ4kNU.roa (hash: 9WZ9BexeSLxuwcQaPTctipRPoq8r5S6vpHcmIv4h3eg=)
2: BAOQzdYO52x5pHX4hBMM3XiCEcM.roa (hash: 2IOWLlDaPWkY3HIF7qq9PR5LxTzh41NtrMS4tChz3zM=)
3: DnnsgAS5y0LUX_6yAETNrAg5FjY.roa (hash: NrNAPqDPZQjIfbjbFOMBVEkPuLSBi/e3igCi8I65Qhs=)
4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: KwZi1+wsaOZpK/FLtWI1JBmyijkv4pcOWPVripx1fVk=)
5: P8iOL6sNbyT27rc5CMFHFJksCeg.roa (hash: lpEt2ZPxtqo4PRq5v3/kiJ3Zf3sZszL7ruxt2HHEMqo=)
6: PswHu72EXw-9uVwXFSkur3b8WUo.roa (hash: U1MGzETJsMRdLoLvQpIYrFdD62RfExlGvaak4z7I4Cg=)
7: Sbf_XS2_PTdkgRN73ERJ5kpCiBk.roa (hash: nnyt7doHD3rvbRLG4Y7ikSpWhPPEEDnQ/LAOOsa6brA=)
8: gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa (hash: xn5Qu6TrHpydk557pLufqdlLEgVHlgWw7N1ZzCJhZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:9b:69:93:8e:ca:cb:11:ca:62:f7:a3:d4:ac:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: May 12 07:01:38 2024 GMT
Not After : May 13 07:01:38 2024 GMT
Subject: CN=ee2445d823e96281aaaa7ba5e7ff00099202bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:6f:83:5c:e0:2a:ef:d0:d2:f9:10:60:00:
04:5f:a4:5a:4b:3f:fe:7e:1e:4e:5f:fc:b8:d4:c4:
d7:ca:6c:a8:3f:af:8c:ca:6e:36:6e:6f:82:e6:04:
70:b7:46:99:25:91:7b:e3:9d:f1:13:03:98:4a:ad:
78:d3:18:71:4c:dd:54:ae:c6:e1:f9:73:f1:00:2d:
36:af:67:7c:9e:47:ac:84:a1:0d:7e:28:61:6f:d5:
a4:50:58:8d:a8:81:1c:eb:95:a9:ac:77:76:7d:e2:
b0:f5:54:0c:1e:8f:cf:df:fd:7d:09:08:d9:3d:46:
9f:8e:fa:0d:ec:5b:5c:1d:b4:bf:0c:21:8a:85:fb:
bd:aa:96:ac:21:91:b4:8f:70:9c:06:30:81:73:c8:
8e:d8:b4:9a:74:c4:fa:3b:1b:24:2b:bf:bf:e6:8f:
20:4a:42:41:29:87:9c:84:f3:a7:8d:3f:a1:ae:6c:
c4:20:ec:8a:e3:8c:5f:88:d5:46:b9:93:9e:83:77:
48:23:cc:ef:6c:c2:25:06:0d:ca:41:91:c1:6e:56:
a0:25:f7:43:d7:d0:10:1e:8c:a3:c0:b4:1e:96:8a:
32:1d:7f:4f:38:8d:df:00:23:c8:5f:a5:b4:52:76:
df:74:7c:4f:18:48:8f:ea:c3:00:d6:44:b3:75:63:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:45:D8:23:E9:62:81:AA:AA:7B:A5:E7:FF:00:09:92:02:BB:4A
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:c7:93:64:5b:4a:59:5c:5c:f4:31:f4:cf:d4:80:1a:17:
d9:c9:49:29:85:73:dd:2a:2e:68:9d:00:27:dd:4d:3b:c5:7e:
d4:e1:95:4c:ba:91:64:cc:3a:31:9b:d5:a7:78:8b:4e:48:f3:
2a:86:7c:7f:56:be:17:ed:66:2f:df:2b:a1:f2:7d:83:c9:a7:
ce:9e:d5:41:ca:ca:05:94:8d:35:d5:91:c5:df:0c:15:ec:a2:
49:48:85:93:83:7e:28:db:6e:2d:eb:42:dd:96:84:90:9a:69:
06:3b:11:92:60:11:0f:35:e4:64:bc:49:71:4c:95:b8:cf:11:
ba:d1:90:f4:ff:94:44:99:fa:f2:c8:34:6c:de:cb:02:33:ef:
a1:02:6b:6a:01:6c:ad:ea:c7:38:05:8a:bd:da:35:7d:47:09:
f5:35:61:c8:98:7e:a6:bd:52:f9:60:70:17:ca:d5:7e:ec:17:
f2:8f:a3:73:c8:d1:64:0b:d1:b8:ba:5a:f4:3a:ab:b6:49:13:
03:cd:8a:ea:7d:4f:4f:ce:ee:9b:cd:14:ff:a3:03:f5:ce:2b:
7e:e0:e0:3b:26:32:38:2f:70:d2:dc:6e:03:4e:9d:5b:32:b1:
23:f1:f9:67:76:d2:70:fd:91:03:ba:26:c6:d8:9d:00:85:d4:
aa:e9:63:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 13:10:57 2024 by rpki-client on console-ams.rpki-client.org