Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: zfPyPymlyseceP0nyIoAT/NLsBOiycppTh6Bc5EA0wA=
Subject key identifier: BB:33:9E:B9:95:04:F9:23:F4:4B:CE:1B:EA:11:97:EC:80:E7:96:FD
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 018F426852D9E2CF335BE9811741F836AD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1154
Signing time: Sat 04 May 2024 07:01:24 +0000
Manifest this update: Sat 04 May 2024 07:01:24 +0000
Manifest next update: Sun 05 May 2024 07:01:24 +0000
Files and hashes: 1: BRPcTBL5x7I2MDH-kXM5kB1mCSc.roa (hash: kiORnNnUjV5m2K83OckqRDQw24DayHZBSxOV1P5qbCc=)
2: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: sb3/n3hx42Hf1ja9tSNIan3F9ITjCmFF20bm6oFszh8=)
3: djSLTfK9PO0enMJn0z3yCe4XjO4.roa (hash: p0jlIszfQYUDPXSbxFePnle5k85Oo9hQkK8F7tn92tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:68:52:d9:e2:cf:33:5b:e9:81:17:41:f8:36:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: May 4 07:01:24 2024 GMT
Not After : May 5 07:01:24 2024 GMT
Subject: CN=bb339eb99504f923f44bce1bea1197ec80e796fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:18:df:f4:b6:df:7a:94:7e:f8:51:87:d2:
45:4d:de:74:4e:67:2b:10:bf:d1:ef:85:84:9e:af:
fa:d1:a3:88:a9:b9:bb:49:08:28:e0:01:e4:48:8f:
f9:a7:22:34:33:2f:ef:d4:bf:15:5d:7b:af:87:e6:
2e:f0:ad:d5:79:0f:1f:57:8c:b3:14:c5:e7:67:3e:
e5:0b:e7:4b:03:9d:d1:63:f7:91:a5:0f:3f:59:11:
97:37:14:67:5c:87:74:09:61:45:5e:f0:7e:4f:ab:
95:2c:d1:09:e4:6b:c6:61:5e:94:4a:b3:6e:be:82:
45:0a:9e:df:ce:f3:a7:ab:c7:42:5b:13:61:83:f2:
5c:5b:6a:f0:36:5b:86:b1:a7:c2:77:2e:f3:9b:9d:
68:3b:01:ce:c3:94:3b:ab:cc:ae:fe:13:5c:1c:3e:
fc:05:9a:26:89:b5:b2:29:74:4d:9c:b2:e4:ac:f6:
1f:7a:7b:7c:f7:9c:e0:dd:42:1b:54:69:2b:5f:8e:
be:35:81:b8:9f:52:31:72:81:12:89:1a:a3:93:0e:
0a:18:db:82:b3:3b:fc:96:e4:d6:b2:d7:db:5d:b5:
0e:73:97:20:44:ef:6d:ef:f3:d4:10:01:56:e0:8f:
27:fd:4b:1d:1c:1a:1d:ec:a9:4d:ef:21:90:51:a3:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:9E:B9:95:04:F9:23:F4:4B:CE:1B:EA:11:97:EC:80:E7:96:FD
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:7c:d3:f5:30:aa:2a:f2:03:3a:a0:40:a0:31:b3:0a:ed:
82:d3:8a:51:78:c4:f5:1c:83:bb:ab:b1:e0:cf:7a:24:df:0b:
e1:89:e8:79:85:70:46:73:79:3a:30:f5:33:b0:f9:c4:26:62:
0d:b2:bd:80:c5:bf:0c:0e:f2:74:18:8c:c6:8e:58:88:05:6e:
31:34:31:ed:b9:fa:e1:70:e5:76:84:a5:dd:fa:65:c0:ef:6e:
1f:3f:05:75:8e:d5:db:c1:7f:42:6c:32:47:b7:d7:d6:0c:da:
4f:db:6a:59:f3:2b:c7:f9:c6:47:d0:22:a2:83:ad:fd:4a:48:
84:f9:a7:07:52:c4:b3:b2:98:75:00:4c:48:4e:d2:6d:aa:07:
93:d8:45:7a:36:23:ea:53:6f:ec:f6:5c:2b:69:78:a0:3b:09:
94:a2:f8:37:65:c9:4b:1b:e4:63:d7:6d:28:cd:db:37:22:91:
ed:85:4e:52:b9:09:d2:70:dc:86:25:4d:83:92:65:0f:dd:c6:
d0:44:b9:b5:ca:85:cf:aa:5e:96:ed:4e:f1:9f:d3:a8:8d:83:
11:2c:f8:40:f9:77:b8:f7:b2:67:ee:c9:b6:8c:ff:b7:dc:cd:
6e:64:f8:88:fa:00:1d:3a:39:97:ab:52:70:9e:38:76:c9:91:
0d:27:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:09:17 2024 by rpki-client on console-fra.rpki-client.org