Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: xD3zAH8sl6jAR9uT58HtavERD6eKyhWnXmzE+2dlVc0=
Subject key identifier: 57:63:4E:D2:88:48:46:C7:98:C2:E8:B2:3A:39:4E:08:57:B6:EE:42
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 018F336261E290E34782780F5FD53792C00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 08D3
Signing time: Wed 01 May 2024 09:00:36 +0000
Manifest this update: Wed 01 May 2024 09:00:36 +0000
Manifest next update: Thu 02 May 2024 09:00:36 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: 3gXlLPktNXEx4AHaa19diu+ldypvd9rr4TTIHu8CST4=)
2: nqGPJ3KOHuG6vTy-l1jmx1ni0Dw.roa (hash: tovGSS/dJ0UP45b0338Un3zlrMaBzhV46AkI2eD2Bjc=)
3: o5cStNsLTTFzaVWhI4boa6SLtX4.roa (hash: SeimYrls3m4EGtBEol0YV7g69oL6k6bgo882cSvS69U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:62:61:e2:90:e3:47:82:78:0f:5f:d5:37:92:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: May 1 09:00:36 2024 GMT
Not After : May 2 09:00:36 2024 GMT
Subject: CN=57634ed2884846c798c2e8b23a394e0857b6ee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:60:03:9e:f3:0b:ea:0e:e8:4c:08:52:0c:
51:80:3a:c2:36:76:48:85:59:ca:dd:19:27:f1:5c:
19:4c:b5:5d:0e:d1:aa:e0:00:2e:79:69:a6:c8:15:
fb:9f:2e:48:c9:ab:9a:6f:67:b7:1a:d9:f5:8c:28:
b3:da:de:34:ce:cc:e0:1d:18:bf:76:d1:75:8e:b4:
80:ca:73:70:52:7c:57:5b:2a:fb:16:42:84:c6:5e:
b0:66:b0:cd:9b:2e:d5:aa:b6:2b:c0:0e:f6:6d:c7:
1d:4a:e1:34:dd:0e:3a:92:97:50:70:11:16:e9:4a:
94:09:75:62:03:45:2d:9c:f3:25:34:17:52:92:3e:
f6:32:6a:6a:55:55:fb:03:04:9c:0e:99:e6:7f:20:
1b:ed:f5:26:97:87:39:bf:bf:0a:ce:8d:8e:f6:cf:
1b:08:f0:81:8a:79:35:3e:d0:05:c4:09:46:e7:c4:
97:c6:7e:55:e7:ec:d4:ea:a7:fb:3b:6c:03:a6:cb:
0e:cd:58:5e:54:99:8c:44:7c:68:c1:95:87:e0:36:
cd:33:e0:55:54:b1:73:ce:23:ca:26:c3:89:cf:4d:
54:ec:32:7d:2e:14:4f:08:ab:98:b1:bd:1f:ba:51:
0b:c4:e2:eb:13:41:ca:9e:73:62:1c:40:0c:fc:92:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:4E:D2:88:48:46:C7:98:C2:E8:B2:3A:39:4E:08:57:B6:EE:42
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f6:e5:5d:f3:fd:1c:78:9c:6b:2f:bd:32:d0:e8:a0:32:31:
da:69:1f:ac:02:1e:d2:7a:e3:39:52:1b:5e:90:bc:ae:f6:13:
5d:be:18:57:f5:a1:03:f5:bc:de:fd:7d:61:b3:4a:57:fa:42:
85:c8:97:8a:11:35:e4:ab:80:a9:73:50:bb:88:56:66:37:93:
ca:eb:ec:fb:5a:07:ae:0f:d0:ec:e0:2b:c8:5b:1a:fe:59:17:
a7:0d:c5:4d:b3:08:20:9f:0c:50:03:6b:39:8e:1f:80:de:31:
1f:d5:6d:5c:43:77:ce:96:be:cc:ad:8b:26:dc:70:6d:d9:a9:
92:f2:c7:cd:ed:f3:47:91:d0:9f:bd:96:0a:ff:f5:d4:ea:f1:
f8:2e:10:c9:41:89:31:3d:7f:65:50:ae:dc:2a:3c:bf:7d:cf:
1a:a5:f1:5f:3f:ef:0b:1a:78:fb:b6:5d:ee:fe:5e:46:d1:2c:
68:f9:73:6a:c1:87:de:41:d1:47:72:dc:f6:f6:86:6f:36:96:
22:a0:38:75:82:c1:4f:6c:68:5f:3b:fe:db:36:e2:94:d7:24:
1b:f2:49:cc:e7:79:4d:18:e7:43:96:20:79:92:64:19:b1:07:
07:35:b7:82:dd:f2:d0:cc:1b:49:ed:b1:f7:32:59:14:f0:9b:
e0:3a:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:37:46 2024 by rpki-client on console-ams.rpki-client.org