Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: Aiv3sp+INDAfkgg5ic33hYi6olU8alNNI5wBXBKBSzo=
Subject key identifier: 7D:CD:B8:14:76:F5:4E:8B:85:A1:52:C5:CB:0A:78:ED:44:46:C4:8A
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 018F513645649D1637D4415CE5FD3548351B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 05BD
Signing time: Tue 07 May 2024 04:01:02 +0000
Manifest this update: Tue 07 May 2024 04:01:02 +0000
Manifest next update: Wed 08 May 2024 04:01:02 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: 9WrImqUpe9Locb6TNSDksvlJUZP0PxLY4juLG4xzKZA=)
2: o5TijbkYaovCYfcDFTeVH7t0gHI.roa (hash: huTRsDhd0NgKrgTrVo7FPzO81K+h0TXKefACWZUrTS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:36:45:64:9d:16:37:d4:41:5c:e5:fd:35:48:35:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: May 7 04:01:02 2024 GMT
Not After : May 8 04:01:02 2024 GMT
Subject: CN=7dcdb81476f54e8b85a152c5cb0a78ed4446c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:32:54:73:d7:84:0c:e6:03:b1:05:f2:3a:
82:52:a1:26:9d:19:bb:67:6c:c3:cd:75:b7:48:24:
bd:f9:5a:34:f3:aa:02:dc:75:9c:23:08:a6:7c:fc:
bb:01:83:53:27:47:ab:45:c8:2f:60:40:ef:69:eb:
5c:a7:4d:e2:52:c4:97:00:a1:2b:b3:04:51:ea:09:
06:04:97:9b:2a:21:14:19:df:12:6a:c3:b4:a5:b6:
25:7b:e5:31:8e:c9:78:8a:2f:62:e8:4d:e1:29:9f:
11:c3:ae:48:4c:1a:6f:38:a9:17:a2:be:b8:18:c5:
af:71:d0:37:9b:4c:a4:35:76:20:49:51:37:71:70:
38:db:43:64:07:b9:d3:b3:a8:a6:fb:d5:8f:5b:22:
df:54:02:7f:63:b0:40:f9:44:68:8d:22:9d:c8:ad:
3e:e6:a4:d0:39:0d:89:8d:47:6c:85:3d:fb:18:f2:
a4:4f:45:db:39:1b:98:02:ff:b9:22:19:33:3b:98:
39:8a:ad:dd:0d:21:b9:f1:f4:f6:e8:6d:e3:3c:29:
c3:1f:74:d5:78:6b:0d:8c:80:30:7e:58:b8:e7:f1:
a8:3c:eb:f5:11:a1:11:9f:3d:a8:e6:2b:55:83:9c:
a9:cb:9b:76:61:79:a3:52:80:a8:e1:28:ea:2e:ba:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CD:B8:14:76:F5:4E:8B:85:A1:52:C5:CB:0A:78:ED:44:46:C4:8A
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:cf:fd:2e:8c:35:ef:7b:6b:3b:c2:91:2e:0b:91:0e:87:
37:19:6d:08:14:e7:40:86:3a:36:42:aa:3f:90:03:98:35:47:
3e:95:f4:f4:86:b1:ea:e4:11:fa:1b:9f:75:c3:b6:ed:80:60:
b2:fc:4c:de:95:d0:f8:97:d3:d7:b6:7f:e6:68:f3:0c:06:7e:
fd:9e:c4:6e:21:00:50:b7:2a:c5:1e:00:1a:d3:6a:2f:28:39:
78:6a:62:63:f8:db:1d:35:4f:57:0c:ea:6d:26:a1:2d:52:e8:
09:1a:39:16:31:f5:7c:8a:85:92:80:a1:4b:29:57:97:42:fc:
b9:7a:30:e1:28:1e:e7:85:0d:14:e4:24:71:f1:28:dc:05:8d:
d4:f2:db:c6:49:df:b8:d4:26:34:fb:3f:5f:47:5a:f6:2c:b2:
dc:66:ff:08:db:0d:f1:7d:e1:ab:07:0d:6e:98:be:b7:5e:d4:
80:e8:16:09:ab:6b:cc:22:97:af:1c:2c:a5:4e:7e:2b:5c:fc:
fc:fe:e4:98:1f:04:e4:57:2a:62:53:23:f6:73:bc:22:62:80:
3e:e0:cf:54:85:55:78:83:43:58:d6:10:14:f1:dc:63:04:91:
40:7c:5f:9e:b4:12:d6:97:84:f3:ac:bb:35:f1:9c:f2:81:c1:
94:e9:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:09:13 2024 by rpki-client on console-fra.rpki-client.org