Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: dLULnQqsDO0l4O+nZDMLXDogZkk6LpsTYbOcGIMxVgo=
Subject key identifier: 9F:D5:17:43:2E:D9:FA:57:AA:85:D2:BB:3F:9E:4F:10:09:EA:29:8C
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 018F99F3CAD6B827F82A6AAB394D5B746575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 05AC
Signing time: Tue 21 May 2024 07:00:42 +0000
Manifest this update: Tue 21 May 2024 07:00:42 +0000
Manifest next update: Wed 22 May 2024 07:00:42 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: oQXeIg9b8ziFgdvBb6GDVNFqN9aDMM2IPJ1eGB8g11o=)
2: hGU3cTQfIKQ8TLaBZwMYiephGmI.roa (hash: 9hKYiIu7j7IYPCm/G4xPaw3TKV5XvEg0MxE3C89wM/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:f3:ca:d6:b8:27:f8:2a:6a:ab:39:4d:5b:74:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: May 21 07:00:42 2024 GMT
Not After : May 22 07:00:42 2024 GMT
Subject: CN=9fd517432ed9fa57aa85d2bb3f9e4f1009ea298c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:e7:2a:27:92:bb:22:e1:bf:17:0d:51:47:
b3:41:9b:7e:90:a0:5e:62:9e:c0:f9:f9:86:70:1b:
6b:33:71:33:54:d3:c6:74:78:16:21:09:ac:4a:56:
91:bc:65:2c:da:6b:0f:52:74:7e:5d:e4:06:a8:46:
7d:80:82:66:b8:26:8d:5d:8f:b5:c4:81:b7:19:c7:
11:28:32:b5:6d:f0:94:e0:14:2a:0e:d3:0d:58:cf:
7c:a3:7d:66:3a:42:36:b4:f8:43:b3:6e:ee:de:0b:
a2:cd:c4:a4:63:0d:e3:cb:ef:0d:9a:b2:6d:92:6f:
de:fd:ca:7f:65:c5:78:44:f1:dc:32:27:70:90:db:
18:48:dc:aa:e3:92:b3:ef:f9:dc:de:4e:27:a3:65:
6f:ca:60:11:48:ac:14:56:db:fc:85:04:8c:d7:41:
69:a7:c9:0b:99:c3:04:71:51:ef:e6:6e:1c:e6:5e:
72:e0:b6:9d:00:dd:89:60:cc:6e:ca:d4:f5:68:e9:
d1:87:3c:e6:28:f7:d0:83:57:f8:56:bd:e0:b9:8c:
c9:fb:59:56:00:2a:30:b6:46:62:0d:d9:97:88:54:
a6:97:71:7d:3c:9a:39:16:79:d8:69:23:15:44:7c:
18:1f:b9:36:63:84:22:60:c2:b1:30:22:72:fa:53:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D5:17:43:2E:D9:FA:57:AA:85:D2:BB:3F:9E:4F:10:09:EA:29:8C
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:d0:fd:14:5a:dd:70:a9:cd:ca:bd:a7:dc:20:a3:46:21:
01:26:82:87:9e:f0:c0:65:27:5e:05:c4:55:e7:20:f3:af:19:
d3:69:8b:27:7e:2f:a5:d6:e5:31:66:69:d3:e8:dd:c7:6d:c7:
9f:83:de:61:c0:5e:20:02:b6:01:92:74:4e:c5:dd:78:32:52:
1a:dd:7a:32:ac:80:44:d8:a0:cd:ca:c6:4f:29:2a:3e:21:a3:
6c:5b:9b:10:90:2c:d9:51:36:4c:d2:1e:cd:fa:fe:32:56:85:
42:49:14:fa:e9:96:5b:07:9d:c4:d0:a2:42:bb:0f:09:85:bb:
54:e9:6c:87:9c:89:6e:ea:6c:56:8b:a9:bc:d9:3f:e6:78:23:
1a:e5:da:9d:43:c5:55:74:8e:53:13:64:0e:d5:ae:1b:ef:76:
e8:d1:fb:44:ea:6f:19:75:c0:8c:1f:3a:f3:53:5b:d3:31:97:
7e:5f:1b:36:50:29:3f:c6:cc:4a:3b:8f:bf:6c:8c:fe:b1:82:
73:ad:8f:05:e8:2b:ab:3d:a8:c0:ac:96:97:99:a2:ae:1d:d9:
a8:70:be:3c:0d:f7:45:7d:8d:97:f4:77:f6:2b:2f:2e:1f:79:
ea:1b:fe:9a:0e:dd:3a:98:a0:80:cc:e3:ba:82:6e:10:7a:a2:
8c:6f:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:50:25 2024 by rpki-client on console-ams.rpki-client.org