Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: OrovDF8Kef0XJncnof5/aw4sPWGKiL7vW6p+jTeT32k=
Subject key identifier: 4D:C4:51:DB:2A:F4:B5:22:AB:28:9F:21:5B:69:41:CA:B9:C4:97:5C
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 018F86358E9FCDC6CD8A47F67B53B598E082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 0CFF
Signing time: Fri 17 May 2024 11:00:07 +0000
Manifest this update: Fri 17 May 2024 11:00:07 +0000
Manifest next update: Sat 18 May 2024 11:00:07 +0000
Files and hashes: 1: XVG9h0xBViuBGvpEX5G5oV8a2Ug.roa (hash: vHVdCDvmZpYQx6BMfbdZa54cr9pns6thg245xosJlnY=)
2: c0DwEvcIyI7cnls3-MXTi8ek6_g.roa (hash: tH0FDLwW9Wyz6nnDh1vntDf8LaKx+ZwWLP6zZ2YS4eE=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: OwaGlfmVjkVmYF04CJG+xzbvhWpSkldY6aPtrvpQ5rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:35:8e:9f:cd:c6:cd:8a:47:f6:7b:53:b5:98:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: May 17 11:00:07 2024 GMT
Not After : May 18 11:00:07 2024 GMT
Subject: CN=4dc451db2af4b522ab289f215b6941cab9c4975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:d6:f0:fd:55:9d:40:a4:8c:c1:f4:75:e5:
6a:54:3f:31:08:c6:9b:7d:78:0c:7e:79:7a:8a:bf:
ed:3d:a3:d0:bd:40:a5:42:c5:ab:10:53:83:60:4c:
b9:23:ea:b2:41:84:91:ea:46:47:f3:15:db:88:c8:
a9:54:1c:e1:11:d4:ad:23:9c:30:95:9c:6c:77:95:
4d:2c:e8:e4:74:8c:20:8e:a8:b8:17:43:8d:97:74:
29:84:9b:35:76:2e:48:7c:52:ad:1c:66:08:06:6e:
4d:dc:79:56:8b:af:e4:10:1c:5b:7a:96:16:11:b6:
5e:7b:c2:d4:1c:9e:fe:61:17:7f:0c:d9:f7:53:c3:
a5:71:99:9c:81:9a:81:e9:e8:25:39:17:3a:08:f8:
b9:da:b5:4d:e5:a7:09:f8:17:f0:30:73:84:0f:a4:
6a:11:4c:2b:d4:18:2e:01:5e:28:be:66:a6:d6:45:
f8:82:41:c8:1d:1f:17:ca:d2:7c:61:46:c0:71:0e:
73:1e:cd:c7:7d:cc:be:63:3a:f5:a0:a7:ee:e2:2d:
9d:1c:5f:e3:bb:c1:fb:91:9c:9f:ba:22:af:39:f5:
ac:9b:75:05:3b:33:3b:65:7d:fb:75:9a:02:4e:93:
0a:ba:73:6d:fd:c4:3f:93:ca:53:1b:c2:b4:20:fe:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C4:51:DB:2A:F4:B5:22:AB:28:9F:21:5B:69:41:CA:B9:C4:97:5C
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:a0:22:16:06:54:ec:37:ac:64:99:d2:8e:ef:ed:60:97:
70:b7:0b:22:92:91:86:0f:4f:35:64:f6:6b:fc:95:95:ab:f8:
b4:1e:cd:74:9f:2e:b4:1b:fd:1d:29:88:02:cd:cd:72:fa:69:
ce:60:22:5c:8b:9f:98:65:02:f1:87:a4:c1:77:54:d4:e2:27:
00:67:70:35:c5:89:4e:6a:35:26:dc:eb:01:a9:11:29:4b:48:
8d:fb:99:fc:95:2e:59:a4:06:4e:b7:95:59:0e:07:4f:08:2f:
12:06:25:d0:8a:99:39:82:5a:69:12:3d:b6:a6:89:a3:4b:fb:
73:f8:f0:a5:f0:3e:ff:88:d2:0e:df:f0:ed:cc:20:c0:9a:a8:
6d:eb:66:45:a3:d9:4e:ae:a5:c7:a9:1a:ef:f8:ad:35:04:4b:
33:15:0f:b3:5f:5e:10:ec:81:00:af:92:84:45:33:f1:47:13:
48:09:e7:1c:ac:cf:99:fb:d7:a0:6c:e1:21:fd:3d:72:fe:e0:
43:17:dc:62:3d:eb:c1:20:71:a4:73:72:45:2e:27:e0:ec:b2:
45:f3:16:3a:36:ad:53:1b:cb:4a:ab:14:c7:ad:ca:ce:91:db:
6e:d2:19:22:ef:b5:7c:aa:2c:a1:40:4c:fc:ce:91:d2:05:cf:
c8:08:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:10 2024 by rpki-client on console-fra.rpki-client.org