Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: Zf6XmGwV4jTdYLvsINfCKkO88cz3SbLl9jVf3wKm36A=
Subject key identifier: 84:76:3A:92:15:BC:09:94:D9:49:5E:45:71:84:14:11:88:0A:62:34
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 018F9571F1B9E7BCCBA67C537427F8ECBF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0688
Signing time: Mon 20 May 2024 10:00:23 +0000
Manifest this update: Mon 20 May 2024 10:00:23 +0000
Manifest next update: Tue 21 May 2024 10:00:23 +0000
Files and hashes: 1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: sZIM3u7VHyFubpYjOubFJsNqhDLWLS2gV1Ckg3d2IKE=)
2: oCfvhXjH4NipzDIBFh4KQdLb3Tw.roa (hash: y4A6ffLbn2IvP4SwmojmM/K9THbMyw6pUCNLlcfgujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:71:f1:b9:e7:bc:cb:a6:7c:53:74:27:f8:ec:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: May 20 10:00:23 2024 GMT
Not After : May 21 10:00:23 2024 GMT
Subject: CN=84763a9215bc0994d9495e4571841411880a6234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:54:63:0d:37:af:f1:a9:79:e2:a2:6a:7a:
9a:e9:0f:67:07:6f:b6:74:07:3b:55:d3:90:be:7f:
fb:4b:e1:79:15:14:3f:82:cc:a7:b3:83:d6:ac:7e:
49:b1:e9:88:bf:65:21:f5:a9:f6:30:d0:bf:fc:53:
64:9b:90:ad:dd:c8:7b:55:0e:b2:62:d9:d6:d1:65:
43:8a:ae:96:27:19:e6:88:48:df:94:c5:5c:df:81:
57:3d:70:69:dd:3b:7c:45:45:ab:d7:ec:6e:d8:6f:
f9:94:bf:bd:9a:95:1b:73:d6:d2:d0:75:0a:96:a4:
51:7d:cf:4a:60:24:a3:3d:7e:95:f3:51:9c:32:1b:
6d:11:92:8a:72:f5:33:5b:f4:eb:52:ef:c4:b1:97:
27:dd:bd:7b:7a:7c:d9:b8:86:1e:b3:f7:94:82:7a:
e8:d8:a6:d2:29:27:49:d3:4d:42:59:55:1a:fa:72:
50:9a:37:f3:5f:8c:5a:a8:dc:4a:8d:b4:62:8c:b0:
04:7b:09:91:ca:47:1a:06:c1:20:36:2b:3c:7b:b6:
7f:33:60:d8:5b:69:45:2c:17:1d:39:b8:c3:34:18:
54:d4:81:39:22:ee:06:5a:5c:bf:6d:80:a3:53:59:
42:40:d9:47:0e:83:c4:9a:f0:23:d8:79:46:b4:d0:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:3A:92:15:BC:09:94:D9:49:5E:45:71:84:14:11:88:0A:62:34
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:37:59:08:63:9f:60:62:fd:9b:76:ec:0f:cf:04:3a:0a:
29:43:68:2a:40:29:5a:3b:d4:5e:03:a4:1f:dd:cd:5e:dd:c2:
74:5f:eb:ad:cd:32:92:a6:ab:3c:65:dd:b2:87:c9:c9:d5:0f:
3a:c7:87:0e:a5:2d:51:cb:ea:6e:d6:d7:1c:16:d4:23:e0:6a:
32:fe:c9:f7:ba:41:4e:b8:77:a9:f3:43:8c:d0:21:ea:0e:fd:
ae:41:2e:dd:00:1d:c0:28:08:12:35:78:a9:f0:b9:1f:ef:59:
fd:c5:94:ba:d0:c6:1b:7f:dd:13:27:01:95:bb:eb:51:61:79:
e5:d1:78:9b:06:5f:b2:2c:ac:5b:b0:e6:b5:0a:3e:d1:df:ea:
ef:76:a6:e1:50:0d:f8:77:c4:94:53:ef:b1:7f:2d:8c:cf:07:
13:f7:68:db:cd:4b:f2:38:a8:e3:81:be:34:35:6b:aa:d4:ae:
90:df:5f:f3:8f:75:97:76:a1:cb:4a:af:a2:dc:c9:93:d0:5c:
4e:9e:4e:8a:1c:f7:7c:71:49:56:74:94:8f:67:12:0e:44:94:
05:6b:5e:9e:de:44:f5:ed:b0:14:73:79:e1:f8:71:d1:0e:00:
59:d5:01:e3:40:7a:61:6b:94:28:d6:be:e7:cb:f3:f8:49:58:
b4:fc:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:22:28 2024 by rpki-client on console-ams.rpki-client.org