Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: P2Lp4EmUirpxmRMOPt2g9+4zvlBMFsCifCsxJDng6lw=
Subject key identifier: E2:FD:C7:1A:84:93:5B:1D:62:50:D1:5E:61:31:47:85:5F:EE:2E:95
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 018F343FA9E4330151E4748BBC3EAE8DD57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0666
Signing time: Wed 01 May 2024 13:02:18 +0000
Manifest this update: Wed 01 May 2024 13:02:18 +0000
Manifest next update: Thu 02 May 2024 13:02:18 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: IF043+w2uDVLIjY3GY/vrdzJK9i2aICAgEVQ0Y6w8Pk=)
2: 5cDmWPfkoHmK06mnQt-iX_w2L_s.roa (hash: xdxYdC5DFn57Hdouqu071GQsO9HjTuaNTDaYYMSHdvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:3f:a9:e4:33:01:51:e4:74:8b:bc:3e:ae:8d:d5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: May 1 13:02:18 2024 GMT
Not After : May 2 13:02:18 2024 GMT
Subject: CN=e2fdc71a84935b1d6250d15e613147855fee2e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:19:b3:46:da:1e:fc:a9:d3:d1:3c:ba:c0:
b5:5f:22:15:9c:30:13:83:18:51:dd:74:e4:28:46:
65:4c:b8:9a:17:a7:db:fa:b6:1f:32:b8:a4:aa:ce:
ed:6d:00:d9:5f:37:4f:ec:e9:7a:d2:83:02:29:2b:
3b:a2:c9:52:49:32:ea:e5:9e:0b:85:c5:de:8b:90:
21:d2:bd:b3:48:62:25:15:6d:81:a4:8c:47:9f:84:
98:88:ab:64:7c:61:f9:1c:11:e5:f2:64:7e:e0:85:
66:e0:78:21:2f:31:cf:9a:c2:db:ba:c3:84:7b:f0:
10:20:5b:e8:7b:8f:a2:e5:44:10:d8:bf:23:83:b9:
34:94:6c:94:b7:4c:90:90:34:99:7a:49:1d:a3:6b:
9f:5d:39:d6:f8:74:4a:82:b2:48:87:b5:22:e6:2f:
38:96:29:63:da:d9:cf:9a:0b:b4:ff:ae:bc:b1:7c:
9e:3d:9b:90:f4:39:80:f8:59:0b:3d:65:17:82:ef:
91:ee:5a:2f:e0:5a:da:ec:c4:e8:85:e7:23:68:12:
48:76:3b:7e:73:09:27:92:f5:31:1b:25:76:6f:0b:
16:cc:78:df:96:cc:f3:c9:4c:40:4a:07:51:20:6a:
ea:59:72:45:9b:17:e7:23:da:b7:00:1a:7f:11:8d:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:C7:1A:84:93:5B:1D:62:50:D1:5E:61:31:47:85:5F:EE:2E:95
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:23:f0:4c:ef:56:2e:b6:0f:ad:f6:57:59:ed:a6:30:1e:
7a:79:a7:0b:cf:8e:87:3e:0a:33:9b:9b:0c:74:fc:ed:e6:93:
a9:96:37:90:ba:a7:e2:be:68:74:a0:e8:74:35:40:0d:38:00:
03:b6:23:7b:67:64:26:3d:9b:8d:47:68:5d:85:23:93:1c:73:
26:ab:92:62:87:35:93:66:b3:0d:20:4f:81:45:bb:2d:22:cc:
5c:99:44:9b:9b:28:23:6e:e0:f1:c3:0b:80:d8:a1:9b:21:33:
2e:48:b2:c5:6a:b7:ba:8e:91:59:99:7a:b7:ae:1b:54:fd:bd:
76:0b:7e:ea:4f:f7:20:24:2f:ef:4f:e5:77:43:f4:e8:0b:5a:
70:ce:88:e2:cd:aa:41:da:22:38:13:1f:53:70:c6:67:c1:61:
e3:93:ad:10:b9:a4:19:b7:d0:2f:0d:15:5b:5b:d2:58:b0:02:
2d:be:31:91:9e:d6:3c:78:79:c5:1c:0e:79:cb:e8:ec:49:25:
18:de:08:dd:db:c4:4d:4e:cc:3a:ff:cc:49:7a:eb:b3:12:ef:
78:50:43:3d:a3:b6:41:32:8b:24:41:6e:c4:da:43:b2:da:33:
98:9c:f2:89:3c:b1:c8:2b:f9:3f:dc:b5:59:10:d5:e2:a4:6d:
6c:2b:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:50 2024 by rpki-client on console-fra.rpki-client.org