Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: eZApW92/TY3zYy5QS5RG4CsykEL6Td+ZhsctTaZjL48=
Subject key identifier: E9:0E:85:4F:E8:96:E7:90:8D:06:9C:64:0A:81:A3:5D:63:BB:0B:4B
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 018F7BB262951F3320F932F6BBEBE35A2BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 1173
Signing time: Wed 15 May 2024 10:00:39 +0000
Manifest this update: Wed 15 May 2024 10:00:39 +0000
Manifest next update: Thu 16 May 2024 10:00:39 +0000
Files and hashes: 1: f_OFJuCY4eQ5FW7OyAfBifddf8Y.roa (hash: hTHkOs2V8Kh5puYFuhMLgFWr44WTwu46gC5srvEIxGA=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: IGo18K9P6CyVzdHXDGYlDXoD0FC24EpxcRbvgMBwT4A=)
3: ng0yZKSMI7YJR2GjNz3hb3pwbL0.roa (hash: LLxxqI7Y4JjQZY1ErWK/XnQiL4khm1NwMGKA2SIs9sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:b2:62:95:1f:33:20:f9:32:f6:bb:eb:e3:5a:2b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: May 15 10:00:39 2024 GMT
Not After : May 16 10:00:39 2024 GMT
Subject: CN=e90e854fe896e7908d069c640a81a35d63bb0b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:85:12:67:0d:d1:b4:de:4c:f8:0c:07:78:
ef:9b:58:78:45:ca:70:5e:29:e5:e2:e1:09:73:67:
22:a1:28:9a:5c:10:f5:7e:68:a1:89:c6:f0:7f:12:
af:b9:58:8d:5a:66:49:14:1c:41:ae:9f:a3:7a:8c:
16:e9:70:bf:93:56:e3:eb:2b:6b:f5:44:e2:b2:4f:
d4:79:e2:b0:da:7f:15:c6:05:f6:94:00:40:70:43:
3f:35:f5:88:b5:67:2d:33:bc:e8:f1:d2:3b:15:c9:
75:bc:6c:9e:3d:49:07:dc:e9:e6:45:81:e4:4b:50:
c9:f4:48:21:3b:95:18:93:49:9e:dd:97:4d:e7:56:
77:41:bb:6c:99:46:c3:4b:3d:d8:9c:86:7f:54:c6:
dc:07:f7:c3:eb:6b:26:5d:16:3f:ac:bc:c2:e0:51:
de:fb:67:65:3b:3d:7f:ac:c1:63:b3:fe:ab:81:77:
de:c4:c7:9c:c5:5a:aa:d2:04:04:5e:b8:20:f1:00:
dd:0d:33:65:a6:a4:7f:3b:18:e4:b7:8a:eb:fb:77:
6f:18:20:7a:41:ab:7c:57:71:f8:f0:4c:ed:92:36:
3b:ba:30:4d:57:ee:78:87:12:38:af:5c:23:3e:ec:
db:92:16:42:d5:51:97:5b:38:30:9d:df:a0:4e:a0:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0E:85:4F:E8:96:E7:90:8D:06:9C:64:0A:81:A3:5D:63:BB:0B:4B
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:32:a1:3a:0a:a3:10:5e:e8:bb:21:6b:ba:5e:0b:ef:f8:
7e:a7:fb:74:a0:0a:df:25:ea:c5:4d:51:8e:34:e7:dc:63:5c:
e0:e6:f1:78:4d:12:99:8d:fd:98:93:45:c1:9b:47:ca:7f:0e:
09:f8:83:95:34:1b:d3:60:05:e5:b3:e4:6d:86:7f:72:17:3f:
88:40:34:bb:cd:9c:9c:6c:c6:4e:d1:84:db:71:b6:06:9d:e1:
ec:fb:39:6d:21:49:8a:37:6f:02:09:e7:03:b6:ef:18:e6:23:
25:96:94:65:7b:52:c8:44:6c:67:99:6b:0d:2f:5b:0b:0a:66:
fc:d1:20:76:d7:85:a8:d7:96:c5:88:5d:64:4e:b3:96:6b:a9:
1c:5c:c7:c3:88:e3:51:d7:6e:36:0d:69:ca:a7:4d:31:b7:94:
f7:ca:61:dc:26:c4:29:e7:d4:d7:81:6e:b9:eb:f3:2a:e8:6f:
05:df:86:5c:c5:ba:16:79:3e:4a:fc:0a:1b:15:d6:00:33:4d:
95:79:3d:94:d1:f2:51:d9:05:d1:be:01:89:8c:fc:31:39:ff:
fb:e5:04:ed:e2:f2:8d:89:18:1a:b1:76:2e:a2:16:f0:36:60:
3b:27:db:06:ae:4d:10:2d:a7:c9:cd:a0:ca:52:a8:19:f3:ce:
76:b3:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:36:23 2024 by rpki-client on console-ams.rpki-client.org