Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: y0Y2g7iXkoMaDX0g+R0C2IgURrFdl8SfxhnIeDUvmZU=
Subject key identifier: 9D:F5:44:81:26:5A:36:DA:60:00:7A:7F:E7:C3:DC:16:CA:85:41:F6
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 018F37E455EE271AC412420941F76446E3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0B18
Signing time: Thu 02 May 2024 06:01:02 +0000
Manifest this update: Thu 02 May 2024 06:01:02 +0000
Manifest next update: Fri 03 May 2024 06:01:02 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: 7rEKCENPcWBhltSli3uBXErTIQD2FuAIvcids+G/V3k=)
2: u1PYbPBOMe4lWms6YST3ps2jJ4c.roa (hash: nWnBb8PfkVpiRLhaOYdX12vupzuKiklw1vuwll30lLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:e4:55:ee:27:1a:c4:12:42:09:41:f7:64:46:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: May 2 06:01:02 2024 GMT
Not After : May 3 06:01:02 2024 GMT
Subject: CN=9df54481265a36da60007a7fe7c3dc16ca8541f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e3:e4:16:4b:cd:fa:55:b1:88:84:b1:e8:a3:
4d:56:d5:e4:2a:96:6e:09:7b:a1:73:d0:d6:08:ce:
99:db:84:ed:3f:d1:fd:dd:5e:0b:f2:2c:5d:3d:5d:
77:a4:65:64:67:2e:87:53:73:21:03:dd:f2:b4:51:
6f:5b:f7:2b:3c:f2:05:e5:ca:11:c7:ae:c8:a7:2e:
34:b2:a3:51:3f:8d:f1:05:33:94:70:68:88:46:2f:
dc:1a:8f:14:e1:d7:f1:50:47:d3:3f:06:6d:ce:73:
01:72:c7:cf:68:2c:7e:07:12:b8:c8:e5:89:bc:5d:
ec:a9:64:2b:70:5a:c1:4d:55:4b:3b:c8:f9:63:e8:
2b:bc:88:b6:7d:80:30:b1:c6:3f:ed:2a:da:79:88:
2e:d9:84:9a:2d:ad:0d:f8:47:4f:95:22:07:94:04:
ff:99:fc:5d:02:7b:bf:f3:3c:d9:b4:81:e3:dd:b9:
00:87:e0:b9:51:0d:e9:4c:80:e2:ef:5a:f6:93:07:
32:07:85:4b:7c:90:a3:1c:f2:01:bb:ac:81:9c:fe:
97:f6:26:fe:74:a6:4f:17:f2:16:67:eb:3d:f7:d4:
17:92:5d:e8:d2:f8:83:37:2d:29:cb:4f:9f:48:b1:
f0:b6:13:47:0e:65:0f:34:d3:d8:be:7e:eb:95:f3:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:44:81:26:5A:36:DA:60:00:7A:7F:E7:C3:DC:16:CA:85:41:F6
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:c4:2e:a5:16:28:a0:15:17:03:01:12:0d:4b:ad:2c:f7:
45:06:1c:78:9a:1f:2b:d9:7f:f1:19:4f:80:77:27:6c:14:85:
45:6e:60:1a:c4:33:24:bf:a3:46:fc:18:89:d8:a4:6b:ea:2f:
3f:3d:25:e8:55:c4:5b:f8:2a:6f:34:f6:a5:2e:da:9e:3c:e5:
2b:17:46:8e:c7:6a:1a:fd:db:74:c0:eb:ef:77:6a:26:70:e6:
b0:78:3c:8d:13:5b:b1:64:ee:be:f8:7a:14:42:4f:f3:0e:00:
99:32:82:e4:c7:a3:79:50:b2:6f:8a:76:51:54:eb:03:36:f2:
38:37:9a:7b:0e:1c:24:7b:47:dd:74:9d:5d:4d:00:a7:c7:4d:
77:5f:32:ab:50:c5:0e:6f:a5:c1:b6:3a:ae:27:6d:ae:c2:1e:
c0:12:45:13:24:8e:7d:95:6a:90:53:b3:15:97:9b:91:7c:fb:
0f:16:b7:58:f7:0c:25:cb:89:be:16:2b:1a:e4:40:08:e1:57:
4e:e1:f5:d9:e6:e9:ab:0c:15:35:25:75:70:8c:c0:77:07:b0:
3e:51:81:aa:ff:51:6f:2d:8e:c2:1b:4a:d0:49:3b:f5:b8:63:
30:64:ec:86:4e:ba:95:1c:0d:9f:27:68:6b:f9:e1:01:3e:af:
a4:b3:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:34:26 2024 by rpki-client on console-fra.rpki-client.org