Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: eWwy7h+e6ONHZK4UmqS5Y0wyJxCT+jTOHDgvMQSGYAY=
Subject key identifier: 60:34:A1:E8:18:95:A0:4A:E7:86:48:AD:BD:5B:C4:47:DE:01:31:E9
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 018F4042FA11DBB71F8EEA3542CB505629F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1157
Signing time: Fri 03 May 2024 21:01:22 +0000
Manifest this update: Fri 03 May 2024 21:01:22 +0000
Manifest next update: Sat 04 May 2024 21:01:22 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: lRx/ftXsD5HNHyJeeoAIig4qirI/uDxMdExWrdS5yTY=)
2: DlX59XsIUIai9wQofbYDru5CmHk.roa (hash: f47lnrvZMOrEv56gE3l3qgZAIEGZNfHyhHcL2BnQyyw=)
3: WltnPJDTi_b71-u8z4B-0bIux28.roa (hash: MdIiClOQZ8gF98kC5M44YiUJlw1w3xgozAZYj1M4UI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:42:fa:11:db:b7:1f:8e:ea:35:42:cb:50:56:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: May 3 21:01:22 2024 GMT
Not After : May 4 21:01:22 2024 GMT
Subject: CN=6034a1e81895a04ae78648adbd5bc447de0131e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:51:10:ef:50:99:92:05:c1:31:4a:95:5d:
3b:5a:dc:88:0b:23:57:b4:3a:53:dd:fd:0d:cc:30:
ec:47:26:46:e4:ee:34:09:ae:29:dd:a9:80:08:68:
de:7f:8a:27:f0:65:4b:66:4b:ba:3d:bb:ab:ae:81:
86:c8:2e:1d:a8:72:4c:c2:6e:78:a1:7e:62:77:fe:
0c:09:4b:1a:44:91:1b:7e:7a:ee:13:28:f6:f1:29:
99:50:53:80:9e:67:6a:11:fa:c9:17:bc:d2:41:ea:
6e:32:e6:6c:02:07:fa:cb:2e:16:2a:81:8c:f5:05:
0d:f9:73:ed:b3:9e:8b:85:34:0f:25:44:41:e9:30:
d1:50:f8:6a:77:5b:d4:b4:c5:1a:6f:92:f2:bb:d6:
9c:6a:18:59:51:7f:02:17:16:8f:c2:33:0e:5f:ea:
8a:84:c0:35:da:eb:d6:3e:5c:c3:bc:b9:e9:b5:87:
fa:88:86:60:07:eb:89:05:65:4d:59:1c:87:4e:1c:
7c:a4:7b:89:42:9e:0d:df:9d:4f:f2:e4:7f:25:41:
ab:5c:b1:c3:66:45:ff:da:c2:49:7a:52:de:77:32:
fd:91:cb:43:3d:1a:ce:fb:9d:a5:11:8d:cf:e0:40:
02:fd:60:20:70:cc:ae:0f:f0:48:88:2b:67:aa:4c:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:A1:E8:18:95:A0:4A:E7:86:48:AD:BD:5B:C4:47:DE:01:31:E9
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:93:45:69:cd:11:06:de:76:dc:ca:69:7f:33:ba:b3:8d:
2d:b7:c7:10:7e:ea:1a:8f:5c:fd:31:da:24:2a:ab:2c:9b:a3:
36:3c:28:d7:05:8d:a5:c8:67:96:c2:b4:a6:66:eb:d9:00:c5:
0e:42:9c:24:3f:f1:55:c3:35:3e:d0:19:87:ea:42:49:9f:c5:
47:06:74:e5:4f:93:f8:a3:36:ea:e3:c2:a8:21:84:ed:b2:d1:
e8:61:13:9e:e1:a6:54:39:7a:85:c5:1e:81:c0:87:88:55:a1:
3e:57:6c:6e:c5:e5:19:5a:e4:c2:96:43:84:03:8e:63:1a:b1:
cd:7e:a0:62:76:7d:82:23:08:9b:00:da:e2:d7:9c:56:21:df:
b5:0a:19:2b:fd:11:40:6e:29:42:59:30:d2:53:ca:f6:5b:db:
da:9a:f2:d6:c5:c0:03:ce:24:1f:fb:3c:86:91:21:7c:e4:29:
d4:99:24:08:91:7e:0f:83:f3:25:84:7a:04:f0:b7:8d:95:c4:
66:a7:66:82:35:c0:bf:62:eb:0b:ba:82:71:ea:17:06:6d:d8:
a4:4f:19:d3:7e:6e:8e:f5:f9:92:65:7e:19:2d:ed:ee:85:90:
f2:35:0a:98:80:16:e6:b2:be:4f:c8:e5:a4:6e:73:2e:e8:60:
fe:76:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:34:23 2024 by rpki-client on console-fra.rpki-client.org