Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: zZktZmglPofhf/y8M5Hhs8jkHs1hvyL/dZQieb5iegM=
Subject key identifier: E2:DA:12:24:B1:85:F3:7B:CD:4B:5E:0C:6A:B4:98:F0:79:0A:06:16
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 018F8748C74E6FBE43BC134A29675A6B2B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 059A
Signing time: Fri 17 May 2024 16:00:44 +0000
Manifest this update: Fri 17 May 2024 16:00:44 +0000
Manifest next update: Sat 18 May 2024 16:00:44 +0000
Files and hashes: 1: k3K8P9Fp3iI6nie3a0yeOjBFw6o.roa (hash: xnCx9nrwPWESgktLmchhT+UYwngarzuTg/0WarqxAD0=)
2: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: EI+zLD01UBpZQV7vRUFLDyeazu+QGqi1EYZqlOYI2Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:c7:4e:6f:be:43:bc:13:4a:29:67:5a:6b:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: May 17 16:00:44 2024 GMT
Not After : May 18 16:00:44 2024 GMT
Subject: CN=e2da1224b185f37bcd4b5e0c6ab498f0790a0616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:44:1f:1b:34:63:79:35:ad:b6:54:75:74:
c6:bf:7a:ba:36:cf:90:36:04:25:24:b9:c6:19:ec:
83:f3:4d:f0:69:77:bc:b9:d6:31:09:f1:b0:59:02:
1f:a7:8a:83:ba:ef:ab:b8:a7:fe:a5:bf:7f:02:0b:
34:93:c5:50:89:95:db:35:88:31:90:09:da:fc:10:
55:b4:9f:74:36:ed:f8:1f:d6:36:ed:f4:3b:0e:1a:
0a:c4:3e:94:cf:f8:e6:c9:33:df:c7:96:43:b3:6f:
0d:59:24:e8:0d:cb:3d:3a:19:9b:d4:28:6d:33:52:
83:82:49:d3:e8:5d:57:73:de:67:83:79:9b:99:b0:
55:44:3a:2f:58:a2:e8:7a:52:41:34:df:a8:7d:e5:
6e:78:d3:8d:a8:9b:9e:a0:fc:6d:16:7d:65:a8:43:
b8:09:03:45:28:98:91:81:f7:6f:b1:d2:78:15:5b:
36:9a:73:5e:9f:d1:2e:ee:3c:7f:51:47:a4:87:cb:
01:0a:24:9f:7f:4f:30:0e:d9:46:42:ad:b6:97:22:
65:99:c3:b4:fe:60:3c:f5:0f:75:66:db:8e:f5:7a:
aa:6b:18:fb:50:1d:c7:42:2d:c6:d6:73:9a:a1:8c:
1b:5b:93:0b:ee:94:de:f3:ce:3b:0f:d2:d8:74:99:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:12:24:B1:85:F3:7B:CD:4B:5E:0C:6A:B4:98:F0:79:0A:06:16
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:1a:3c:07:33:a3:c0:5e:e1:b3:72:9b:a2:3e:6b:4f:38:
53:6e:f8:97:d3:f9:e9:e6:8e:03:d3:9f:a7:4a:75:3b:eb:6f:
5e:03:09:cc:40:af:19:bd:67:25:df:60:ea:d2:67:ef:7f:ea:
32:28:82:b9:a4:c3:39:38:60:ac:84:43:e9:82:df:88:b3:23:
fc:a1:72:ef:6a:20:e8:77:6e:bd:1d:a0:91:fd:b1:55:09:35:
01:b1:cf:56:bf:41:61:f2:17:b9:44:57:b0:07:1d:11:fa:de:
48:bb:68:80:76:87:6c:3b:ef:bb:71:23:ce:5b:e2:01:10:14:
76:96:c8:5d:c7:23:58:5b:af:97:9c:cd:29:24:44:1d:40:99:
64:20:65:56:b6:c3:90:20:59:3b:1b:75:18:cc:56:35:b8:58:
cb:47:14:bf:bc:32:c9:af:7d:8f:cc:48:ba:41:d2:11:a6:55:
1e:61:37:22:fe:d8:47:53:ae:03:98:d9:37:73:d3:02:4d:3f:
67:8f:43:81:e8:7f:29:ad:cc:e3:0f:c7:62:ad:a8:72:cd:b0:
9c:a8:3b:db:3f:de:f5:6b:e7:3e:1c:9c:cc:72:84:12:b2:e7:
5f:aa:2b:c6:40:0b:dd:b7:d3:08:94:3d:0c:c8:6c:04:80:ee:
06:9c:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:27 2024 by rpki-client on console-fra.rpki-client.org