Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: GDWV3AQkDxv3TY/NjiIujZ9+pZUHwuaPUjDHjaicCRo=
Subject key identifier: E2:57:D1:EA:AD:4B:6C:9B:2F:86:52:2C:1B:CC:5C:E8:BC:00:04:34
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 018FB26A1718F547153BD159A90301D147C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 01A7
Signing time: Sun 26 May 2024 01:00:48 +0000
Manifest this update: Sun 26 May 2024 01:00:48 +0000
Manifest next update: Mon 27 May 2024 01:00:48 +0000
Files and hashes: 1: 20GXTANrkWw7HA32B3sHGLw2mDw.roa (hash: roOnjyGlc+xGAQu7zfE28QHfURp5NiSDecKrNG0Aewc=)
2: LfUAeq4HoqluHslZzpNUz5HEhDc.roa (hash: y9gnbVVxIl48xMNvYwTjS72tAVL5JTRCMWMJoqC66Y4=)
3: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: Yp1A+wA4sTApiqbpiY1RGiCXpi1xfsCT/LXIfu9hf3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b2:6a:17:18:f5:47:15:3b:d1:59:a9:03:01:d1:47:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: May 26 01:00:48 2024 GMT
Not After : May 27 01:00:48 2024 GMT
Subject: CN=e257d1eaad4b6c9b2f86522c1bcc5ce8bc000434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:a9:71:e6:21:51:e9:06:e2:cf:87:41:20:
5f:5b:24:fd:1e:e0:56:46:41:33:8b:73:4f:a9:cc:
ac:ac:60:19:49:23:ae:58:1f:76:15:db:30:16:9a:
40:38:15:19:2f:88:13:50:8a:4f:2e:fc:be:92:2b:
aa:8e:38:03:1a:82:73:81:b4:26:b5:62:64:6b:95:
b1:95:0b:26:5f:d0:8f:55:b2:87:4d:53:69:c2:7a:
9d:80:ef:34:14:99:af:31:75:d5:44:bb:f0:d3:91:
d8:8c:8a:b9:3c:ca:7b:8a:2a:e8:76:b8:82:f0:e1:
f7:ec:c6:22:db:4e:f0:63:e7:57:ce:79:99:48:e9:
31:97:09:82:c8:b2:8c:62:53:69:49:95:f6:bd:3c:
7e:ba:f2:cf:04:ac:7a:d7:2f:44:79:60:ba:92:d8:
eb:51:d4:37:60:da:01:93:82:96:94:a1:94:3f:ce:
3d:b2:bf:32:13:39:60:81:c2:ac:4d:6f:d6:5d:b0:
9d:8d:0c:c1:02:be:e3:cc:4a:d0:cc:3b:36:c0:7c:
29:00:0d:b9:81:ac:83:c9:60:4c:ab:67:31:e6:3c:
5b:95:83:ea:40:93:0a:c7:96:77:0c:bb:97:92:24:
86:51:2f:d5:8d:8e:75:02:3e:6b:14:42:94:03:05:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:D1:EA:AD:4B:6C:9B:2F:86:52:2C:1B:CC:5C:E8:BC:00:04:34
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ec:82:4b:9f:08:cf:d8:00:dd:0a:fe:6c:fd:1a:23:26:59:
f7:b8:7c:98:eb:9d:06:ea:d1:da:ae:90:2e:33:d6:5e:75:30:
0a:5f:48:c3:f4:3d:a4:72:05:48:69:a3:c2:98:86:e9:1d:0f:
87:0e:a3:92:23:4c:b6:5c:9d:ea:e7:26:bd:6b:cb:f3:01:f0:
03:7e:8c:21:a6:93:37:29:85:21:c0:a6:93:de:da:24:30:75:
8d:6c:32:b8:88:cb:79:99:91:f6:48:92:6e:23:0a:30:5b:0a:
6f:5c:da:df:d4:a9:7c:50:7b:85:3d:36:dd:c0:f0:37:06:30:
8c:0f:9d:de:56:eb:fc:04:ff:4c:7a:e5:c2:ea:53:e0:78:26:
5f:3b:39:bb:ed:27:66:2c:eb:6f:c2:35:fc:a3:ba:79:16:7c:
22:73:54:a2:6c:b3:d2:b7:6e:e7:9e:3f:3e:24:29:7a:bb:85:
5c:46:99:0e:2f:9d:93:c5:50:73:f7:b7:09:a4:61:fa:88:cc:
fc:ae:83:e5:fc:46:ab:f8:e4:74:63:1d:e8:c6:f2:2a:42:32:
b0:1b:f5:43:1c:bb:4b:14:35:df:9f:76:67:26:9c:cd:cc:27:
09:a3:94:ad:22:df:57:7e:ef:69:18:5c:14:99:4c:af:9a:95:
5b:f6:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:53:50 2024 by rpki-client on console-fra.rpki-client.org