Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier: X59bybPNtcuw2F+iNeXw7YxtOITvWY0Dw+LJbLeu+Rw=
Subject key identifier: 5C:5E:56:FC:B5:48:D5:09:12:56:C9:D4:8D:EE:BE:78:4B:86:00:EC
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 018F874999C8E2BD6156C84828E76F9FD38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number: 1067
Signing time: Fri 17 May 2024 16:01:38 +0000
Manifest this update: Fri 17 May 2024 16:01:38 +0000
Manifest next update: Sat 18 May 2024 16:01:38 +0000
Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: pGaU7FC0muMMysDue0WRHnar5iLBmuXWrpZeM9C8C9M=)
2: Y6Dt40G1DBswykKSQU7my8WjqNY.roa (hash: 6ZtfJrpFQPmN2YlO6yx/f4FUkarMv+WlQ3wrEJYs+PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:99:c8:e2:bd:61:56:c8:48:28:e7:6f:9f:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: May 17 16:01:38 2024 GMT
Not After : May 18 16:01:38 2024 GMT
Subject: CN=5c5e56fcb548d5091256c9d48deebe784b8600ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:a9:f1:02:1a:1d:e5:9a:64:4b:e4:b5:e7:
34:18:00:a8:fd:cf:52:b3:5d:3b:99:9e:99:26:6a:
5b:69:6b:59:53:46:5d:e3:4a:28:18:4b:2e:17:95:
4e:fd:33:99:9a:9e:6c:33:ac:ad:a7:d9:09:44:e4:
a0:80:f5:a1:e9:4e:68:8e:bb:14:a3:f1:65:9c:58:
75:52:05:70:da:56:ea:a6:dc:26:54:99:86:bf:92:
e4:39:63:56:e6:89:2a:e8:0f:10:fd:80:70:73:70:
ae:c3:f4:ed:38:0d:ec:3c:c2:e4:2d:45:ef:e1:d0:
4d:3f:70:1e:72:ae:13:10:24:38:c3:99:85:aa:ce:
16:53:ce:5e:95:ef:72:01:38:81:63:25:db:f5:14:
cd:67:96:d3:79:81:d0:4c:4c:5b:19:0f:6a:7f:eb:
ee:0c:fa:bb:3f:53:2e:0f:7c:3f:fc:b0:c3:59:1e:
2b:3b:1b:f9:57:81:0d:c5:a9:dd:9b:95:88:4b:97:
63:f0:01:35:52:e2:82:8d:67:db:d8:54:3f:c5:1b:
7c:78:ae:2a:61:c5:6c:3f:69:d7:0e:0c:6e:00:9d:
a3:bb:5a:a0:db:27:2e:59:46:51:05:dd:0b:07:9c:
c3:b0:12:c5:81:db:8b:51:44:ec:ab:4c:3a:83:4c:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:56:FC:B5:48:D5:09:12:56:C9:D4:8D:EE:BE:78:4B:86:00:EC
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:e0:07:d0:1c:d2:a3:68:1f:8f:d2:30:67:7d:5c:ef:17:
33:70:dc:5d:b4:74:dd:5f:e7:fb:a4:fe:6a:58:a5:7c:e8:99:
ae:40:ec:5d:91:88:56:6f:df:e7:8d:28:64:d1:a4:6e:68:b0:
15:56:8c:29:8e:6c:59:f7:d4:4a:0f:10:57:9d:d0:7b:62:6f:
2a:5d:f5:c7:96:73:ba:dc:65:7e:aa:af:6b:e6:4e:cf:9d:a0:
28:7f:ff:1d:ec:8a:5c:03:13:82:58:82:19:f6:b1:ed:8a:96:
46:62:bf:a1:ec:4b:d1:1e:ac:d3:39:ad:f3:00:0b:c1:59:d7:
e1:42:86:32:6f:76:6a:39:cb:36:c7:8d:57:b8:72:85:4c:8f:
86:c2:72:86:8d:ea:2d:3b:53:98:7e:a7:90:37:69:bb:93:20:
8a:86:8b:64:5a:09:7a:ab:af:ce:d5:f3:17:85:0a:73:f4:2f:
1b:d4:52:7f:be:ee:e6:a5:8c:fe:18:12:33:24:d1:13:36:ec:
ce:45:7e:39:6b:fc:83:0a:59:df:4e:44:cc:ec:bb:1d:ff:04:
3c:16:82:85:0d:98:66:32:95:c7:08:a0:d3:b7:a7:7a:41:c9:
a8:66:14:94:bd:a2:7a:96:5c:0f:59:d4:32:bb:f1:a3:d2:79:
eb:68:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:14 2024 by rpki-client on console-fra.rpki-client.org