Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: 7SbwOEDvG4d/JhPB5S6wlxYXpCOCfvXB1L6VrRSujeo=
Subject key identifier: AE:F0:8A:CC:BB:A1:E9:07:C2:0A:9E:61:35:DB:F2:13:5F:3A:37:98
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 018F36D1B87BB64A6C7C9C13D12EE26488E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 114E
Signing time: Thu 02 May 2024 01:01:04 +0000
Manifest this update: Thu 02 May 2024 01:01:04 +0000
Manifest next update: Fri 03 May 2024 01:01:04 +0000
Files and hashes: 1: 7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa (hash: SDzGA3Q2FNgDauQKmW2Jv8qW/avp6qEtixhOMX8zOc4=)
2: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: 8p7QXnhkKA4XAjnQAUCoI866Y5RSlbItP7BHmzKFdug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:d1:b8:7b:b6:4a:6c:7c:9c:13:d1:2e:e2:64:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: May 2 01:01:04 2024 GMT
Not After : May 3 01:01:04 2024 GMT
Subject: CN=aef08accbba1e907c20a9e6135dbf2135f3a3798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:c0:2b:ce:e3:46:d3:29:c8:5b:78:2e:c7:
7d:11:27:d6:38:ef:40:f2:0c:04:89:7f:91:17:56:
cf:6f:f9:c4:7e:15:53:12:31:e5:a3:57:b0:94:dc:
89:07:d8:ca:0e:56:aa:f4:0d:d4:de:8d:18:c1:df:
ad:55:41:ad:55:d7:24:78:7a:7a:b5:86:84:04:34:
be:04:9f:e9:fd:e9:96:8c:75:18:88:eb:8b:d6:8a:
71:31:60:48:74:a1:29:63:64:87:4a:15:3d:15:db:
6b:50:ac:33:28:fd:ca:92:da:6f:79:8d:b9:80:62:
a9:d4:86:f2:bd:2d:64:9c:11:45:c4:1d:51:78:c8:
ca:89:a6:51:14:12:69:39:d9:37:6d:16:39:88:4b:
2d:0c:41:c3:a8:1c:2c:b5:e4:a4:97:a0:5d:a7:56:
ce:c1:ff:06:a7:f5:f5:63:9b:a1:99:ea:eb:df:e9:
e6:47:71:29:ca:d0:c0:6c:fc:3f:9e:bd:7c:0f:b3:
e7:4f:60:1b:ce:30:f0:26:dd:e3:4e:c2:27:45:b4:
fd:bc:de:8e:5d:d9:d0:56:60:05:8d:ca:04:c8:4b:
a4:5a:b4:cb:52:58:1c:28:fe:70:4d:e4:de:6d:cd:
f4:e9:46:75:7e:69:3d:55:d5:a8:6a:11:2c:29:0b:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F0:8A:CC:BB:A1:E9:07:C2:0A:9E:61:35:DB:F2:13:5F:3A:37:98
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:7b:d4:fc:55:c2:62:95:71:cd:ea:af:16:92:0d:3b:b6:
28:c3:7e:5a:53:9d:ec:9a:50:af:6a:4e:7f:e6:74:11:58:b6:
4e:17:b8:af:58:e1:f0:53:90:9f:23:e6:35:a3:1b:cd:2e:51:
ea:64:31:a7:1d:53:68:19:91:98:c3:ba:57:cb:b5:74:64:0f:
62:7a:21:6e:38:a7:9f:d5:40:d6:7f:24:5d:66:2c:34:10:f0:
26:b5:33:fc:09:ad:44:26:ed:31:52:87:25:49:21:4c:57:f0:
18:1c:26:14:4e:93:82:e9:6e:9c:c2:0e:72:15:6f:16:af:ee:
71:db:dd:78:9d:0d:0e:65:ed:06:e9:4b:0e:f7:bc:75:8e:72:
1b:83:0f:17:b0:a2:ad:f1:72:2f:48:af:7d:a0:c8:6a:4b:d4:
f6:17:87:15:51:18:44:bc:51:2f:12:6a:00:f5:62:cc:97:2d:
a5:d7:ae:5e:82:fd:04:0e:33:6c:a5:3c:fe:2e:31:37:37:b0:
23:73:f8:85:df:24:b2:64:21:0d:2e:68:b2:e5:6a:47:3b:70:
48:29:55:c0:d0:50:c7:d7:6a:11:53:89:94:58:46:f6:ea:77:
e2:ee:31:59:96:62:da:21:de:77:84:63:09:53:75:5c:e0:30:
06:d0:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:33:01 2024 by rpki-client on console-fra.rpki-client.org