Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: Z4jKqr6dzqY0KGxY/rI/SR3zLkQmjGhzVciUFYfkb8E=
Subject key identifier: FA:EE:13:14:7B:61:6A:AC:0E:0D:5F:18:86:0F:02:96:C6:33:35:BE
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 018F2C85AC55845E64AECD9FD38C03E7304E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 10DB
Signing time: Tue 30 Apr 2024 01:01:48 +0000
Manifest this update: Tue 30 Apr 2024 01:01:48 +0000
Manifest next update: Wed 01 May 2024 01:01:48 +0000
Files and hashes: 1: 9fpAJyJU7G4LtmgpCCq7DMKyVQk.roa (hash: chFLywLNzX0pLe8MTyYEnc2ZHkL5IPeKZlx3UMt6MnE=)
2: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: SuNzvc39lR9pi7OQ4is/5kjRIBF/eo3bbuqoxp0ijQI=)
3: l-i1WGHiFl28Rr2s9UOxJGklFKg.roa (hash: fhf07/86yALBPWTTFS97CPX+nSQwnlIf7P3y45JZ0NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:85:ac:55:84:5e:64:ae:cd:9f:d3:8c:03:e7:30:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Apr 30 01:01:48 2024 GMT
Not After : May 1 01:01:48 2024 GMT
Subject: CN=faee13147b616aac0e0d5f18860f0296c63335be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:53:b6:fc:c9:18:f3:c2:15:9c:d8:72:e0:
52:be:92:26:7c:55:64:19:38:9c:ee:9e:2c:1e:84:
7e:d4:12:ed:ee:75:d2:97:8f:8f:79:05:e5:34:c5:
c4:6d:19:f9:b9:ad:10:6e:94:9e:3d:a0:4f:73:bd:
80:02:b2:7b:b7:84:fb:28:28:60:eb:c1:b3:0f:27:
30:c1:be:39:6e:c2:5a:c6:f6:9a:e1:19:b6:3f:1e:
5b:f8:97:17:5e:73:01:6c:f7:70:8d:2d:85:ba:19:
5a:d1:f5:16:f6:16:b4:2b:54:a0:0e:c8:24:61:d7:
d8:68:59:cd:34:16:fc:bd:44:af:3f:b3:24:95:02:
ac:7d:a2:43:86:80:d8:0d:5f:db:de:92:9e:fb:19:
5a:13:54:d0:59:2a:86:af:22:ea:3a:26:76:47:35:
a9:f0:82:d4:42:a8:cb:ea:4b:bb:d4:51:56:63:ee:
67:04:82:5c:f3:dd:d2:96:91:5f:ab:00:6a:eb:9a:
39:9b:56:5f:67:e8:62:82:f5:e9:55:b6:ee:0a:5d:
ea:e1:3a:74:7d:0b:15:be:f9:e1:c9:af:24:22:03:
76:63:63:4e:17:5b:ab:58:87:fa:f1:34:1b:33:14:
67:57:d2:ae:2e:6d:17:b9:8c:d0:f7:a0:36:14:61:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:13:14:7B:61:6A:AC:0E:0D:5F:18:86:0F:02:96:C6:33:35:BE
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:d2:da:d6:60:6e:d3:85:50:72:30:92:fd:d7:23:cf:f4:
a3:df:af:e9:18:bd:38:f1:02:31:24:6f:d5:7b:41:35:65:f3:
d4:e2:c6:3d:d0:46:fa:df:09:81:f5:a1:8c:8f:2e:71:d2:8f:
f1:90:19:98:49:83:2c:da:ec:6e:fb:c7:3c:2d:92:6e:81:fe:
5c:ef:76:79:8c:be:f3:11:67:4d:64:d8:ee:0b:91:f5:c2:2c:
9a:55:5c:43:85:bb:6c:e2:d3:76:32:cd:06:13:76:70:04:50:
3e:70:7d:b0:89:d6:dc:f8:bf:b1:18:bd:e0:d3:fe:30:c8:1a:
ef:3c:32:97:af:13:ff:3a:46:57:79:28:52:fa:24:84:08:6c:
84:b7:8c:3a:8e:ae:78:28:5d:7b:4c:c9:97:1d:96:e8:87:8c:
28:40:e9:6f:aa:91:96:77:37:4b:0a:6a:5e:13:63:72:2b:c7:
c8:e2:25:25:69:14:07:ba:0d:67:99:32:4a:b5:31:3f:ff:4a:
ae:f8:a1:38:da:f1:98:f1:48:30:14:ae:04:5c:ba:6a:75:ed:
50:d7:41:95:bc:bf:92:b8:c6:fe:79:ca:40:fe:0c:6b:d5:f4:
f1:9b:00:e2:ec:ed:6f:a1:c1:1e:fc:f4:24:e4:aa:c3:a6:46:
69:cd:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:54:30 2024 by rpki-client on console-fra.rpki-client.org