Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: PIkmyD7GXhWEkc+9dnlkg75f4N8BJ8SJlTnlip2uMuk=
Subject key identifier: 72:D2:A3:14:DF:4F:26:4A:91:CD:C1:F1:0D:47:36:74:25:1B:B5:76
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 018F88242A981B16575B4840B6EDB2DBC8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 0248
Signing time: Fri 17 May 2024 20:00:22 +0000
Manifest this update: Fri 17 May 2024 20:00:22 +0000
Manifest next update: Sat 18 May 2024 20:00:22 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: HLa7cXwQoD2RypFQBJku1eMQUOwTzqhaldxsistSEyc=)
2: qalPO8-g61yFH1RSbM0Legny5Ro.roa (hash: /9sR0Unj8Bg5UntMsZ3VIJaEgV9krObZ7Rqs4w6kqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:2a:98:1b:16:57:5b:48:40:b6:ed:b2:db:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: May 17 20:00:22 2024 GMT
Not After : May 18 20:00:22 2024 GMT
Subject: CN=72d2a314df4f264a91cdc1f10d473674251bb576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:61:ad:65:91:c3:f5:d9:9c:8f:c6:c0:c9:
38:72:82:4b:3d:fc:e5:8e:47:d6:6f:a7:f0:ff:1e:
00:0a:5c:a4:66:13:bb:59:e0:6a:a2:4e:dd:0a:61:
2a:92:80:47:26:b5:21:22:ed:cf:46:dc:38:77:83:
45:5f:7c:9e:f5:47:23:00:7b:09:a3:86:80:a1:03:
b0:b5:46:a6:34:1d:df:57:9c:dd:e3:31:61:9e:76:
cc:3a:05:6b:4a:35:cf:e1:ca:ce:ab:ad:04:fb:20:
93:aa:63:cc:e7:ad:e5:ae:82:a7:79:db:0f:0f:3a:
2f:c6:1e:2e:23:f0:22:9d:8d:13:6f:e6:52:15:45:
cb:85:38:03:fb:da:48:fb:f9:10:a3:ed:c9:34:9b:
34:6c:1f:2f:81:bd:22:58:0e:de:36:1e:6a:aa:77:
b5:aa:f1:77:0c:96:62:c6:4f:f1:c0:89:31:8f:f3:
d4:18:ce:9f:82:98:68:b8:d2:8e:54:08:72:ac:45:
9f:33:0e:19:74:70:9c:8c:7a:14:77:bd:62:73:8c:
36:3c:88:30:62:8c:e5:cc:bc:07:5f:c0:8c:ed:3e:
fc:1f:00:48:f5:cd:63:09:27:dd:e8:a0:db:e9:a2:
c3:1f:1b:b8:d5:cc:ae:34:b7:90:b7:1a:c7:7a:3e:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:A3:14:DF:4F:26:4A:91:CD:C1:F1:0D:47:36:74:25:1B:B5:76
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:62:4b:c5:1e:c8:fc:74:7c:8d:f4:fe:7c:e3:32:59:80:
a2:3c:0d:2d:62:3f:27:e4:3f:12:c8:8f:7a:60:02:59:3b:63:
90:e8:21:00:72:08:22:8d:64:8f:9c:80:bc:27:3e:83:ee:8c:
cb:8c:6c:01:60:fa:d2:09:67:f6:a9:0c:61:0b:14:02:35:af:
5a:2b:26:dc:d3:c7:d2:f3:d6:2f:f9:d6:b0:01:47:56:98:47:
b4:b4:52:d6:63:ed:18:e1:2b:03:b1:c1:81:3a:92:2e:c9:be:
e0:45:dd:59:66:53:77:c6:3d:8d:6c:98:1e:45:08:b3:78:0d:
89:46:e8:c4:cd:a0:a6:21:f2:18:1c:83:ee:78:88:a1:4d:c4:
f5:42:f8:82:47:76:50:b2:8a:a4:85:8e:0f:1c:ee:23:53:e4:
c3:f9:48:41:1b:ac:68:90:70:ba:1d:71:06:b6:2e:90:4b:04:
4e:e0:a1:89:86:4a:63:5e:f2:cd:66:91:4a:e4:69:9b:ea:a0:
f6:b7:0a:b1:bb:60:8a:e1:a7:f8:a4:37:96:29:91:bf:dc:00:
d2:79:09:de:5a:60:3e:d4:a6:e0:dc:74:cf:72:f0:c2:98:f4:
ff:6e:82:4b:bf:28:d2:58:35:cf:3d:ef:19:98:d7:19:69:59:
55:29:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:32 2024 by rpki-client on console-fra.rpki-client.org