Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: NpdaMHvQQQmT/6ZTkXXXSy/8DmyoTvlag4OktNnujNg=
Subject key identifier: AA:E1:C5:58:BC:D5:C1:72:5C:7F:33:3B:88:DD:3F:88:B8:17:6D:EB
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 018F3A09CC0AEE54D58C9BB695C665CEEF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 041B
Signing time: Thu 02 May 2024 16:01:11 +0000
Manifest this update: Thu 02 May 2024 16:01:11 +0000
Manifest next update: Fri 03 May 2024 16:01:11 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: bxf+nC5TXlcRWpFgHiQw47fc+BCj05vh2GrWrsVcqss=)
2: hFmHzXMJgZgK9WVgdRaeWFTrANM.roa (hash: V+Vns+ygFzxMFigQRDTZn8aSlWZhkRAAObqRC6Pp+YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3a:09:cc:0a:ee:54:d5:8c:9b:b6:95:c6:65:ce:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: May 2 16:01:11 2024 GMT
Not After : May 3 16:01:11 2024 GMT
Subject: CN=aae1c558bcd5c1725c7f333b88dd3f88b8176deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:50:50:10:13:3c:e0:53:d1:54:2c:f4:f3:
44:09:58:c6:e4:a2:10:2d:fb:4e:0d:f3:2f:5c:fd:
60:80:49:e2:9c:b2:c6:4f:58:f7:00:bc:85:46:8f:
0e:70:7e:4f:06:c3:66:94:2c:ab:3b:8e:f2:9d:38:
05:18:17:3d:e6:f5:df:db:9a:ca:5a:8a:9c:8b:da:
f0:4b:97:1f:fd:1e:87:15:ff:9a:2d:8b:7d:9b:98:
8e:5e:90:ba:c7:14:79:e0:6b:f3:7d:9f:f3:b1:30:
bf:02:f9:fa:45:3d:5a:07:ba:8f:53:e0:06:67:c6:
43:22:cd:13:24:f1:63:8b:8d:e8:61:19:69:ea:31:
7b:86:53:ab:ac:b0:f7:ba:2d:83:66:48:5b:63:0e:
cc:ae:7a:f5:87:db:ab:1d:c5:5e:ca:39:7f:4c:37:
13:b7:bb:87:c1:09:54:f6:43:b1:ed:09:10:7c:a0:
50:91:3e:bc:df:a9:a5:c0:39:51:e3:d4:3b:03:59:
b6:fd:6b:5a:1a:8b:28:79:10:36:d3:ee:da:7e:94:
78:7e:46:15:ac:0a:61:25:29:72:da:60:0e:fc:06:
30:fb:6d:f1:3a:54:66:cc:b8:9f:55:6d:3b:68:ac:
75:26:bd:44:94:32:51:dc:03:e4:7c:04:64:8f:e9:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:C5:58:BC:D5:C1:72:5C:7F:33:3B:88:DD:3F:88:B8:17:6D:EB
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:33:e4:98:19:7b:e3:b2:ba:e7:c7:7e:66:a4:68:08:5d:
ec:3d:2d:5a:29:89:0c:94:6e:5d:b0:f1:30:de:03:85:31:88:
b7:af:47:88:56:78:7e:9f:88:b2:d6:9f:9b:21:a4:5a:d6:de:
b2:92:a8:49:15:9f:8e:97:d3:f2:47:60:67:73:94:cb:83:4d:
17:52:08:0f:5c:e9:2c:cf:cf:f6:8a:3c:63:9a:4b:8f:ee:b7:
73:cf:4b:a0:89:52:04:43:a8:19:6e:fb:e4:07:e6:3a:d2:d2:
ea:96:92:0f:10:f7:68:e8:42:9d:cd:ea:25:72:7c:0b:7e:7c:
ee:f6:a2:07:08:0f:dd:7a:ea:bc:6c:f7:5b:2e:b5:a5:f6:96:
43:c4:ba:c7:11:79:c5:f8:77:0f:9a:a9:29:38:90:ec:90:93:
4c:0a:c0:42:49:c0:f9:b0:dc:75:6a:15:52:b4:54:7f:30:d9:
df:94:5b:a2:ee:4a:69:4a:53:7c:3b:cf:78:42:cd:93:fe:ae:
f2:96:c4:9b:e3:6d:00:17:8c:cf:62:1e:23:13:1b:f2:8a:6b:
7f:6c:da:0a:b5:2e:68:f1:5e:7f:34:c8:aa:9d:62:01:68:09:
59:c0:ff:bc:b2:bd:4c:63:0f:2c:ea:58:ed:0d:d9:11:b5:72:
eb:67:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:49:56 2024 by rpki-client on console-ams.rpki-client.org