Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
File: suECSE9zlyeGzMLfHEfCaCuLhco.mft (raw, json)
Hash identifier: oQ1bIFY6PyBjHxa5rJof7SVDTobOOphwjwnDog/AyE8=
Subject key identifier: DD:67:07:C0:B0:67:A5:E7:B7:EF:8D:19:23:5D:FA:8C:16:E4:10:04
Authority key identifier: B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
Certificate issuer: /CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Certificate serial: 018F874A62915BDEE372EE08199875503899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
Manifest number: 0469
Signing time: Fri 17 May 2024 16:02:30 +0000
Manifest this update: Fri 17 May 2024 16:02:30 +0000
Manifest next update: Sat 18 May 2024 16:02:30 +0000
Files and hashes: 1: Ria73zQGELBNwwHOA9OJEt0o8EY.roa (hash: HtxAf41dbXBX0JzL39EZFMNEbag9XlRGkEzoEsFD+mI=)
2: suECSE9zlyeGzMLfHEfCaCuLhco.crl (hash: xbJuYWmj/GjPt85WyjzQl/2cRWGVcSROYK2al8DOVeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:62:91:5b:de:e3:72:ee:08:19:98:75:50:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e102484f73972786ccc2df1c47c2682b8b85ca
Validity
Not Before: May 17 16:02:30 2024 GMT
Not After : May 18 16:02:30 2024 GMT
Subject: CN=dd6707c0b067a5e7b7ef8d19235dfa8c16e41004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:6a:0c:ed:06:56:13:e9:88:eb:ae:b2:b5:
18:a2:e1:21:5a:6e:cb:43:56:60:59:b4:3b:07:4e:
5c:11:42:b9:89:94:74:c8:57:71:98:4e:33:2e:d8:
61:7b:a7:21:6b:66:3a:d4:48:5b:dd:86:a7:21:62:
3b:c9:60:f0:6f:91:8e:27:73:a5:6b:b0:11:76:e8:
ff:2e:0b:01:29:7b:d1:da:9c:32:8b:80:da:06:6b:
06:29:50:66:00:3a:66:88:65:b4:ba:4d:40:2a:60:
a5:44:76:83:06:01:c2:f9:79:d2:cb:38:10:e8:fb:
10:40:22:74:99:08:ea:b7:51:56:fa:17:43:b5:80:
af:57:0c:40:14:88:5f:ef:89:a8:1a:2d:6c:ac:26:
e4:32:52:50:ee:e9:39:fd:c0:92:7c:c5:60:10:a9:
8b:ed:fe:fd:5f:f8:1b:35:4e:b9:bb:fa:fa:73:ea:
66:7a:03:88:35:45:2d:72:36:27:b6:52:32:95:5d:
74:8c:8c:89:fa:10:01:03:a3:56:8f:96:5e:60:ba:
9b:9c:4c:b5:9b:41:a7:98:21:90:1d:a2:e2:ee:85:
d0:74:b6:1c:ad:96:32:0e:6e:5d:f2:02:ad:ba:2b:
68:cb:d4:f3:75:40:0d:a0:ad:34:08:e3:21:6c:da:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:07:C0:B0:67:A5:E7:B7:EF:8D:19:23:5D:FA:8C:16:E4:10:04
X509v3 Authority Key Identifier:
keyid:B2:E1:02:48:4F:73:97:27:86:CC:C2:DF:1C:47:C2:68:2B:8B:85:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suECSE9zlyeGzMLfHEfCaCuLhco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5b18b5-da02-4e97-b013-4597e147c140/1/suECSE9zlyeGzMLfHEfCaCuLhco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:81:9b:01:b6:50:c9:86:a5:0a:0c:3a:9a:62:8e:b1:3f:
3e:5a:7f:ed:28:41:14:0e:9f:3a:21:b8:08:cc:83:9c:c9:cf:
44:7b:05:f9:2a:3f:9e:52:cc:5e:f2:1b:7e:3a:4e:4c:07:05:
06:62:3f:61:7c:42:7d:78:d4:4e:6a:d6:3e:eb:14:b7:4b:fb:
74:2f:0f:e0:1f:35:b7:31:ff:5d:87:0b:cc:5f:ff:30:a2:30:
22:5c:5e:b7:80:88:14:17:4e:5f:d6:ed:6f:ff:99:fe:68:9e:
22:b3:24:1b:7b:21:c2:d6:5c:87:00:b5:6f:f5:a9:39:ac:74:
2c:29:67:58:b0:aa:d5:87:f9:eb:47:8e:42:de:23:b1:76:59:
34:7a:93:9f:15:36:ef:28:dd:33:69:8b:39:9d:ed:94:e3:43:
a1:a4:d4:f1:f2:16:ef:2a:78:83:00:4d:0e:fa:ae:de:87:33:
8c:ef:d3:6d:90:6c:2e:15:cc:76:c6:f3:45:2a:50:42:82:b8:
7c:c2:9a:e3:31:07:ed:d6:18:20:d9:a8:7f:45:c6:29:5e:e0:
4f:45:ef:ee:12:17:78:c5:eb:8b:5d:58:fb:ec:ec:64:61:42:
68:78:27:b4:b1:b3:f8:fa:88:c2:84:e1:5d:a6:8f:6d:d8:77:
7f:82:90:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:52 2024 by rpki-client on console-ams.rpki-client.org