Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: ZaegDlGMe1pS8NFT8J5T3lWcMUIwGip6Yhz/n+hU7KM=
Subject key identifier: 21:17:72:83:22:50:CB:4F:1C:3C:01:43:78:F4:71:7A:A0:DB:D3:9D
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 018F96BCC1B09A82B447F5619D5B2505ECE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1180
Signing time: Mon 20 May 2024 16:01:43 +0000
Manifest this update: Mon 20 May 2024 16:01:43 +0000
Manifest next update: Tue 21 May 2024 16:01:43 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: pCfbjGaylSmvqo+Pr/N1PGxRUZ/zxo8AjQlf4Vwc+mU=)
2: fs2fb9vyAdTJ_9vZHP12Zvq4Myw.roa (hash: H+v0AGTX9OPRrvx0El9sPJcT+c7zAT319O7GS7lreK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bc:c1:b0:9a:82:b4:47:f5:61:9d:5b:25:05:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: May 20 16:01:43 2024 GMT
Not After : May 21 16:01:43 2024 GMT
Subject: CN=211772832250cb4f1c3c014378f4717aa0dbd39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:b6:e4:cb:fe:f4:aa:46:bc:f8:a6:8a:cb:
e5:e8:f1:07:a1:bb:1d:6c:1f:e4:aa:57:dd:68:b4:
d0:d1:86:5a:c6:40:9e:be:2a:ec:a1:6d:c7:6b:b8:
76:a2:a5:7c:51:0a:7d:51:7d:3d:63:0a:50:a5:cd:
08:63:bf:4a:26:6b:f5:f8:78:40:ab:6c:5a:bc:6a:
25:44:51:de:5a:f7:db:7a:d8:e3:7b:77:d3:e4:dc:
55:af:01:b4:3b:e9:bf:66:b9:bb:59:f7:03:76:c1:
09:78:03:21:5d:77:0f:7c:60:9f:2c:72:28:9c:e6:
e2:de:36:dc:73:b4:16:64:46:fe:80:10:ed:ab:7b:
0f:9a:88:7e:bf:3f:5c:b9:2d:95:59:3a:98:c7:16:
78:35:15:b2:00:2c:01:0b:b3:82:71:ad:02:2f:a0:
fc:72:e0:23:ff:0a:e2:77:d6:70:8e:d7:d8:9b:0e:
96:42:1d:48:29:a4:2a:a9:3a:e4:45:18:cd:08:ba:
32:0f:95:65:11:a6:69:05:e2:69:21:2c:1b:7f:72:
ad:98:fd:02:de:c4:47:0a:93:f9:7a:9e:9d:1c:d2:
20:90:40:f1:c7:91:0e:45:ec:0e:76:88:2e:da:3e:
69:0e:d0:e2:c5:eb:1f:2c:cd:79:0c:39:0d:74:b7:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:72:83:22:50:CB:4F:1C:3C:01:43:78:F4:71:7A:A0:DB:D3:9D
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ef:5b:2a:7d:4f:f4:7d:86:1f:67:c2:da:ec:36:90:84:02:
d9:b5:06:11:d0:58:26:37:61:19:28:41:7c:57:83:fc:c9:34:
c9:fe:5d:f4:8b:d0:4d:35:e7:ef:b5:00:e4:83:64:e1:c9:7a:
c7:01:f7:68:ca:4c:8f:8c:52:03:6f:86:96:e7:ae:75:93:cb:
65:1f:48:ca:9c:48:23:c0:f5:ff:47:ec:7a:f1:c9:17:9d:6e:
4e:ba:e9:61:65:55:71:dc:9c:08:32:22:78:0a:a4:52:7a:a0:
69:e5:30:cd:6b:fc:ef:f5:40:fc:0a:42:f9:4c:e9:98:03:f6:
0f:c1:ff:38:bf:9f:6c:a4:71:1b:4b:37:6b:7d:dd:14:d9:8d:
23:36:c7:7b:30:57:0a:8c:21:18:64:38:9e:07:3e:08:7f:69:
37:a6:49:22:61:f0:1f:35:bc:94:b4:dd:51:00:20:36:99:ba:
7d:2d:a8:68:6d:55:72:31:59:32:06:ea:24:06:bf:78:60:ee:
52:1c:89:26:d9:a5:82:1c:38:46:d1:f4:a0:e7:36:d5:4c:4c:
e6:76:89:92:35:5d:3a:6e:7e:6c:50:c8:f8:55:f1:1d:8b:cd:
5d:51:42:47:84:03:03:43:d8:2c:f0:d1:bc:ae:7d:bb:6d:4f:
5c:22:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:45:54 2024 by rpki-client on console-fra.rpki-client.org