Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: 9vq8mkflAH+xJxdCAMsUfECHv2F5BCVBj5FTTYY9pvQ=
Subject key identifier: D0:7A:09:4E:2B:62:47:3F:1A:21:D0:35:27:82:89:CD:FD:08:42:0E
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 018F8824920A4E3A6DD41338BDA7580090D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 0D49
Signing time: Fri 17 May 2024 20:00:49 +0000
Manifest this update: Fri 17 May 2024 20:00:49 +0000
Manifest next update: Sat 18 May 2024 20:00:49 +0000
Files and hashes: 1: PO0Q53Bef1BQ6rV-PJpRIf9knY4.roa (hash: 4D0SAv0ahrzcJFAN4DaqHJkmqVoAds0jVp4+Ac3cDAo=)
2: kemo6U9hRz_dvg8OEFiCmUepxmI.roa (hash: 70hNV1f5wqfs8gUnLVE/hJ1y5t+CmKpm6rJ9yRvqe0s=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: GLRrab8gF/CBodrAi+Ky5Y+FfB1727AmmW+ERlZiaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:92:0a:4e:3a:6d:d4:13:38:bd:a7:58:00:90:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: May 17 20:00:49 2024 GMT
Not After : May 18 20:00:49 2024 GMT
Subject: CN=d07a094e2b62473f1a21d035278289cdfd08420e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:aa:5a:65:65:37:fe:21:f1:53:02:d9:26:
08:2c:c7:18:6f:d5:a8:e2:32:f8:d9:2d:45:70:7b:
b2:76:79:fa:73:be:f3:fe:ee:81:51:4f:62:94:57:
72:f5:31:2b:bf:82:bb:0f:11:64:2d:21:3b:0b:c0:
f3:ff:6c:47:45:73:7b:ae:a9:a6:50:6b:b4:93:fa:
29:c6:19:7e:7a:7d:89:dd:6d:0f:43:2f:97:21:38:
55:fd:73:c3:98:62:31:bc:38:60:59:4a:00:ea:4c:
e1:ac:b0:e2:b7:31:c9:10:d8:a5:67:e8:dc:df:5d:
73:8d:61:7a:e0:a6:80:b5:28:2f:af:9d:45:80:8b:
d2:fb:6a:94:f0:b3:d7:91:23:4a:bf:e7:02:ab:39:
f3:9d:42:c5:61:19:7a:f7:07:47:1e:18:67:50:e7:
e4:b4:1a:f2:ad:b4:14:76:e2:d6:aa:38:b5:62:29:
14:ec:42:af:c6:6e:a3:ba:ba:f3:a5:65:9f:a5:63:
ca:11:08:f2:72:e3:aa:06:f6:20:ff:49:c8:fd:39:
ed:24:02:ea:ea:a0:58:0e:ee:e0:88:de:95:84:7f:
4e:72:8b:6f:d8:da:50:1d:c2:c0:16:23:b8:1b:3e:
c2:0f:8b:5a:1d:43:16:97:7e:76:be:cc:a1:ea:e7:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:09:4E:2B:62:47:3F:1A:21:D0:35:27:82:89:CD:FD:08:42:0E
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:de:f7:0d:db:ff:c5:25:a1:36:10:65:a6:d5:75:2e:32:
72:06:00:63:d2:ce:a4:09:9c:3a:9f:cf:f1:f5:ec:72:5a:08:
ce:5f:4f:56:74:b2:da:5e:0a:85:c8:a4:b6:f4:14:52:b9:d6:
5a:20:9b:3c:f3:fe:64:b7:62:51:23:aa:96:f9:f4:90:ad:a9:
ed:e2:e5:a5:0a:6e:f7:c2:1a:33:1a:f5:7a:8b:c6:d1:c0:0e:
a7:bb:55:13:ca:cb:2b:32:55:b0:6f:ce:94:72:29:d9:9a:fe:
4f:aa:71:06:e9:6b:16:56:a3:76:79:70:9f:d8:db:f8:47:f4:
a5:4a:9c:ba:3b:8f:18:08:c1:30:12:25:23:e3:7f:19:db:61:
d5:c0:ff:07:10:39:2c:75:3f:cc:9b:6b:d1:e6:6c:3a:9c:b7:
d4:80:9f:78:52:76:f9:1c:86:e1:9a:77:de:c9:96:2a:42:1f:
c4:78:63:11:b2:46:56:5c:23:9e:16:13:40:3c:91:c2:fb:7f:
8a:cd:6b:7b:e0:31:2d:36:b2:0f:fe:ae:d1:c9:bc:e3:b1:06:
34:c7:72:5c:e5:ef:86:c6:ac:35:56:ad:06:9f:21:52:01:1a:
e4:c4:a5:18:a4:06:d3:5f:b9:b4:03:b9:66:cf:6f:40:95:f1:
8f:66:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:22 2024 by rpki-client on console-ams.rpki-client.org