Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: eVZ5seTB31q9lPoB6hhy39MSi8fTqVgc8Hcx4Q5VGys=
Subject key identifier: 1F:79:39:D2:A7:EF:AD:69:2E:5C:63:F5:B9:07:D5:76:A2:C2:9D:C8
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 018F45A2511A47EEB74401F1D1FC15F8250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1163
Signing time: Sat 04 May 2024 22:03:36 +0000
Manifest this update: Sat 04 May 2024 22:03:36 +0000
Manifest next update: Sun 05 May 2024 22:03:36 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: Y8QK7Zv03ZfH8c3PU142xUXOH3Hq2FnG2C9bPnlxW98=)
2: XAtIzK6TJVw46-FxKN1gfXuaYZA.roa (hash: iKY7G7wX4GsdLAuWqbhbirJsb8o13YRChs74nwIrR9U=)
3: xM2WiQcPmi2xieicHHI5ljgl8Pw.roa (hash: FfZn5AYD8IG/RFIANCsv0UTVCodDAgWU5WBfvciwcRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:45:a2:51:1a:47:ee:b7:44:01:f1:d1:fc:15:f8:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: May 4 22:03:36 2024 GMT
Not After : May 5 22:03:36 2024 GMT
Subject: CN=1f7939d2a7efad692e5c63f5b907d576a2c29dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:cd:c9:39:75:62:65:dd:1d:28:a1:83:a5:
bb:37:70:44:1e:17:0a:7b:95:dd:7f:fb:d1:38:82:
39:4d:7e:49:54:c2:cc:5d:4d:e4:3e:c7:fb:bb:eb:
ca:89:48:6f:17:07:58:6a:57:cc:c9:b8:b7:e1:16:
fc:1e:0d:d9:c1:48:f8:28:fa:56:20:19:93:18:9d:
40:62:eb:a1:ca:89:55:62:a4:2e:e5:ad:15:5f:2e:
48:72:2b:56:e2:37:57:f7:24:8d:02:93:f5:88:e8:
68:78:6c:6a:4f:e2:ea:80:f2:75:c4:aa:42:64:88:
16:f0:f1:fb:ef:9f:ee:6b:39:66:5d:e6:c0:bf:83:
81:da:1a:47:69:74:0e:33:57:18:89:de:bd:19:db:
74:30:19:de:78:1b:2a:3c:05:8e:e9:45:20:a3:f6:
3e:4c:0e:36:f6:a7:db:7c:6e:5f:42:62:2d:dd:8d:
d6:f0:a7:ee:0f:31:02:fc:d4:eb:84:b0:21:b7:2c:
f5:37:0e:ff:f1:34:a2:a3:3b:38:18:bf:1c:8f:c0:
38:56:d7:25:24:95:97:d4:06:25:24:0e:39:7f:61:
b0:99:ef:a0:cf:fa:88:f0:95:94:9b:85:6f:1c:fe:
a6:64:e8:0e:a4:3c:e7:32:2e:8f:c7:b4:f8:10:2c:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:39:D2:A7:EF:AD:69:2E:5C:63:F5:B9:07:D5:76:A2:C2:9D:C8
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:59:6f:2d:30:82:25:b4:4c:b1:32:0a:19:80:6e:7e:4d:9d:
0a:ec:57:eb:b5:8c:ca:8b:07:61:f9:a5:7f:b1:71:9c:ac:cd:
09:49:85:83:24:d1:f9:5e:9e:8b:3b:ce:e9:5b:57:7a:88:18:
ae:78:fb:bf:d2:19:14:d5:25:0e:b8:e3:71:c3:a8:28:2c:82:
59:6f:67:9b:09:c3:0b:c8:4e:37:d0:6e:a1:34:3d:4d:f1:16:
42:4c:5c:2c:16:93:f9:73:8a:88:bd:a8:e5:9e:d2:11:98:a7:
45:3a:99:5a:bf:0f:52:fd:b7:e8:2b:37:f3:40:87:cd:e0:98:
8c:62:7e:e8:71:41:98:3c:b9:c4:23:6d:97:ed:79:dc:c5:46:
66:aa:de:bc:9f:68:0c:5f:7d:57:f0:c6:e3:e9:61:2d:6c:d9:
fb:ef:68:d3:14:81:94:1a:bf:b6:8a:e1:37:59:9c:ff:07:48:
52:54:e5:9e:ec:24:33:8f:ea:67:14:a6:08:b4:b2:5e:70:a8:
a3:0b:9b:bf:fb:5f:82:60:df:6d:5b:58:3c:38:00:14:3b:76:
3e:71:c8:25:07:61:df:1c:2b:d2:5a:df:99:e8:e3:0a:2f:5a:
d8:2f:ad:63:c6:cb:26:d4:14:c0:e0:8c:86:2d:92:bf:74:64:
09:82:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:27:01 2024 by rpki-client on console-fra.rpki-client.org