Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: z5gZ76ZEoIxpnSwIS8nscNSqfjEhNaykPkgEec6W/DA=
Subject key identifier: 9B:F9:BD:2E:35:B2:10:05:18:7F:AE:11:1B:5F:E9:E8:BB:DD:C7:F5
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 018F844731305C198C6DF0DBE3B181E67CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 02:00:09 +0000
Manifest this update: Fri 17 May 2024 02:00:09 +0000
Manifest next update: Sat 18 May 2024 02:00:09 +0000
Files and hashes: 1: KPoxh0k354BS6yLqVnyf36sV9k8.roa (hash: oXRJH2NwZDQPfhDUPNEH39U2W2l+IOabqv8ij6W50es=)
2: TE3cmJCNAO_NcAq1R6Quq6CmcCQ.roa (hash: o7ddhSb3rsha9ohbabzQ2f21vlRvSCRKgtkCi32aLPo=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: YdH12QtvHo8uuW7S2w2v1Tz3y57qiJbvRv7paiWM3aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:47:31:30:5c:19:8c:6d:f0:db:e3:b1:81:e6:7c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: May 17 02:00:09 2024 GMT
Not After : May 18 02:00:09 2024 GMT
Subject: CN=9bf9bd2e35b21005187fae111b5fe9e8bbddc7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:11:ec:f9:49:b6:5a:6b:81:07:85:65:92:
f7:82:9c:9e:06:32:57:33:ef:58:28:4f:75:1d:45:
70:41:6c:71:42:aa:fe:bb:ae:4a:cd:71:5f:6b:f4:
9b:0f:0c:93:e0:44:88:43:18:06:34:0f:f6:e3:39:
5d:ce:fa:24:86:7f:95:2b:47:88:d3:3e:ce:0a:d8:
5c:4e:67:28:c6:e9:8a:7f:f1:10:2c:e8:eb:db:e9:
cb:b1:6c:7f:40:ea:42:c6:24:76:50:28:f0:cd:9b:
6e:6f:01:80:d9:16:24:04:1f:f3:96:bd:89:eb:3c:
53:68:25:bb:ef:7c:a1:cf:ba:1b:81:a4:36:ad:8d:
45:2d:2a:7f:73:e5:7e:36:46:af:b5:d7:e1:74:69:
69:8b:6e:36:89:62:f9:de:ad:09:b4:9b:05:e2:6a:
27:8e:cb:c3:11:75:ff:0d:39:12:5e:69:cf:78:4c:
bf:0b:3c:72:a2:92:4b:2f:d2:ff:95:a2:00:19:4b:
ce:d5:19:46:d7:82:e8:4c:86:97:82:19:34:33:f6:
e3:6f:69:50:fe:48:3c:c4:cc:4d:e0:55:17:3f:01:
a3:fb:e3:ae:f5:52:ab:95:58:ab:f7:c3:e5:ee:19:
04:0c:b7:64:f1:bd:9a:22:cc:5c:7b:ba:35:b8:e4:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F9:BD:2E:35:B2:10:05:18:7F:AE:11:1B:5F:E9:E8:BB:DD:C7:F5
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1e:0e:20:5f:27:e5:fe:f6:6d:0e:bc:51:77:a7:0b:2a:33:
c9:96:76:b4:e7:f9:77:72:32:c2:f8:99:ee:b9:37:48:95:6a:
23:f3:7d:97:16:d6:39:d9:99:5a:ba:18:14:50:f8:b9:65:6a:
8e:88:88:6c:cc:15:cf:c5:bc:02:8b:4f:83:d8:9f:fe:9a:74:
30:ed:72:3b:a2:6c:05:70:13:d6:62:58:18:db:f9:84:d5:0f:
9d:3e:fc:c6:42:d3:0c:e9:9d:5e:bc:fe:76:31:d0:d0:b3:1f:
5a:52:00:79:1b:76:75:5b:0d:19:72:b0:2c:e0:c1:c6:d4:91:
ba:59:5d:2c:01:c3:6d:5e:7f:f3:89:74:5c:b6:5a:a7:44:80:
eb:db:a6:c1:92:55:43:15:c6:41:6d:a2:b5:46:77:a3:61:d0:
da:e9:39:71:6e:55:30:7a:06:4e:c4:69:a7:09:89:1c:8f:73:
c9:25:b6:dc:05:7a:fb:13:6c:8f:08:0f:bf:28:3c:85:15:79:
62:96:26:8a:21:db:a0:13:0f:eb:b0:b9:94:c5:d1:52:27:27:
b7:51:8d:4b:73:3c:27:62:30:13:30:f1:fd:6c:d3:51:36:b3:
9b:af:c9:c3:07:b6:22:65:19:35:6d:86:d5:11:76:78:d1:c0:
e8:dc:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:09:54 2024 by rpki-client on console-ams.rpki-client.org