Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File: EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier: 9MppqlXB+wLCuWLXres5vlLNH3S9/tT+02b4DPc0Oqc=
Subject key identifier: CE:36:4A:C2:7C:A7:B1:B7:08:FD:75:8E:88:4B:B5:A3:40:E6:95:83
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 018F38F72ACFF513ED6F89811921593F240B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number: 1151
Signing time: Thu 02 May 2024 11:01:13 +0000
Manifest this update: Thu 02 May 2024 11:01:13 +0000
Manifest next update: Fri 03 May 2024 11:01:13 +0000
Files and hashes: 1: CGFxUoUCUUKulAuH1jlz6pSIneo.roa (hash: V+uFU7SV+yFi3Dq3vLVVMW43axwdRwlxJ+kR7PwTokY=)
2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: MMbeTCWFTPQjP50pop3giC/LK1ApxBg3qCAksjldGB0=)
3: KetnJPcly7KJEEjjIpTR7ctirt4.roa (hash: jvLXXo4gDNrRDg0pPfKBQ7ZczQjGnSJNs4aZRD9fcek=)
4: duVTPl2B9U-0HD8-5FWkz77JR2M.roa (hash: wYlhUmfFuV5NUuO25Ro/2GMeYD1vfB8fJmcXezKn0yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:f7:2a:cf:f5:13:ed:6f:89:81:19:21:59:3f:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: May 2 11:01:13 2024 GMT
Not After : May 3 11:01:13 2024 GMT
Subject: CN=ce364ac27ca7b1b708fd758e884bb5a340e69583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:c0:8c:75:ca:ec:42:3f:77:0c:b6:28:8d:
6c:a7:8c:a0:70:8e:13:fc:ed:2f:41:1e:fd:ed:66:
8b:49:c3:e2:bb:60:c6:83:bc:9e:7d:3a:80:3c:a4:
78:8b:ba:a0:11:f1:a5:ed:64:ae:5c:99:8b:23:8a:
00:80:3f:c2:85:2f:35:69:f1:01:88:4b:c5:fb:b1:
24:40:c7:36:8f:39:34:64:8b:81:41:9d:16:0e:08:
6a:9c:c6:14:7c:bd:f4:9a:37:af:86:43:81:d4:d0:
66:bd:19:16:9b:dd:95:e2:68:8a:21:9e:4d:7f:59:
a9:4f:7e:5e:e0:79:29:61:b7:b9:cf:69:3a:f0:dd:
22:40:6a:c7:da:4e:0b:9e:93:f7:a5:24:60:2e:e1:
ad:6b:8a:38:2b:f6:59:d7:5f:aa:77:ec:72:9b:c4:
08:7a:78:88:4b:0d:16:8d:ef:28:0c:ed:7c:7d:3b:
d4:ed:30:ad:41:e6:96:bf:b6:fb:e9:0c:87:6c:0f:
06:7d:17:21:46:48:c6:8d:f0:c5:4f:45:11:e0:8a:
29:15:8a:03:62:7c:61:cb:06:25:34:b0:0e:bb:57:
7b:13:90:ad:4e:4f:a7:6f:54:e7:39:ba:9f:f5:ae:
34:4f:7a:6a:bc:9a:b9:d7:98:9c:88:28:27:62:7b:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:4A:C2:7C:A7:B1:B7:08:FD:75:8E:88:4B:B5:A3:40:E6:95:83
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c8:45:26:91:8d:cf:71:83:5b:4e:24:9b:32:de:ee:46:7f:
df:4b:52:c3:a4:6c:60:c5:6b:75:07:1c:5d:48:9e:9d:23:81:
9d:9b:16:e9:88:16:1d:4d:fe:a0:76:3d:85:92:51:bc:97:c2:
30:ef:11:a8:40:c2:24:64:f6:3f:54:5a:d3:cf:85:69:dc:61:
e4:dc:06:04:0b:af:c1:2e:1f:b6:df:fa:69:e8:8f:11:ba:16:
61:d4:99:d6:7c:6f:99:0c:f9:66:19:25:f8:2c:fc:ab:9a:fe:
9a:d1:fa:d8:5b:c7:23:57:9c:f8:5b:b4:46:fc:9b:66:98:dc:
55:76:6f:4e:29:40:d3:33:98:30:ea:60:f8:2a:8b:d6:05:13:
3d:3c:70:80:70:ca:9b:14:9e:30:e5:59:a8:06:55:8c:eb:c8:
41:f6:9e:01:23:19:8b:48:9a:f9:a9:cd:e2:46:84:6b:34:d1:
e6:11:24:7c:f1:cb:bd:bc:49:ee:b7:8d:e2:d0:31:48:d4:a4:
9f:f7:f9:5e:e9:f2:3e:f6:f6:82:43:bd:6b:b9:ed:a3:1f:f4:
63:89:1d:3f:09:f2:e6:24:2b:fe:90:25:f6:09:9b:08:96:9e:
ff:77:d7:2d:9d:3d:83:35:c3:7f:60:8f:da:bd:1a:c9:6a:56:
b9:51:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:33:27 2024 by rpki-client on console-fra.rpki-client.org