Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: t1T9cc3aOXdyEdmldIkzttlol2D686LA8rjjG6buZeA=
Subject key identifier: 73:B7:C7:52:84:24:26:D3:3F:10:EF:6E:24:8E:D1:65:98:BC:AF:EF
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 018F874A0821E1DC8D68282366F3073580E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 0C8D
Signing time: Fri 17 May 2024 16:02:06 +0000
Manifest this update: Fri 17 May 2024 16:02:06 +0000
Manifest next update: Sat 18 May 2024 16:02:06 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: 8KVOrrC9bhvpUgE8shIPsFv6GIh9tH1j0VPKgT9o8AI=)
2: t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa (hash: tWznTq6POTNMxZv5aLIq7TQ+5RcPAtrjqOfiqEMCX4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:08:21:e1:dc:8d:68:28:23:66:f3:07:35:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: May 17 16:02:06 2024 GMT
Not After : May 18 16:02:06 2024 GMT
Subject: CN=73b7c752842426d33f10ef6e248ed16598bcafef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:c1:29:50:30:56:63:01:b3:fb:b2:b8:7f:
d2:52:ce:9e:4f:00:67:97:43:9b:4a:1a:97:b1:5b:
16:ab:b0:5d:dc:fd:90:7d:5a:ad:4f:63:5d:99:66:
43:3a:59:5c:5e:08:68:b5:f1:81:d3:2f:4d:e5:77:
ac:10:f6:4b:4b:f7:e6:29:ae:68:21:2d:bb:20:b4:
c6:bb:55:1b:61:e4:0f:c3:67:31:51:46:cc:b2:3a:
ab:be:51:00:98:93:17:5d:1b:c9:a5:4e:80:4b:66:
1f:bf:c9:58:ff:ff:21:73:f6:65:0c:3e:57:41:38:
5c:6e:7e:9e:ab:32:c4:a5:23:36:b4:90:3c:e0:99:
a4:0b:ba:1c:12:5b:ff:32:a1:d3:24:54:17:95:5d:
ca:6b:32:3b:e3:80:70:3d:fa:28:a8:81:9d:52:a3:
b1:18:eb:e2:6f:fe:8a:f8:b2:50:a6:b7:58:26:94:
a8:42:50:81:66:dc:9e:07:eb:44:31:36:a0:5a:70:
52:cf:d4:de:47:b7:72:da:39:b2:1d:4e:93:63:1f:
4e:99:a8:3c:32:75:41:01:9a:43:38:ef:8a:eb:b2:
4c:1c:3c:67:81:84:78:1b:a8:80:e3:e9:49:80:c2:
71:02:c0:d8:6d:4c:62:82:ec:06:31:08:67:a3:cf:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:C7:52:84:24:26:D3:3F:10:EF:6E:24:8E:D1:65:98:BC:AF:EF
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:76:46:5e:17:22:49:9e:b5:a1:ac:d3:a1:2f:5b:71:71:
6d:c1:c9:dd:2d:c3:03:5c:38:7f:b7:1d:28:f8:90:65:67:15:
df:e7:70:b1:74:f0:ae:db:0f:89:65:1e:07:34:fc:cb:06:25:
dc:84:03:ff:c5:88:95:72:3f:08:6b:45:da:df:7b:38:51:68:
6a:3b:8d:3d:6a:7a:3e:48:fd:f6:96:e1:19:30:8f:f6:9f:ff:
f4:fe:33:c2:28:06:9f:2b:a8:18:8e:63:bb:61:4a:52:60:37:
e3:81:af:83:6e:6d:e8:f8:22:4b:70:86:ab:64:30:6b:4c:35:
58:9a:80:e5:23:84:dc:7e:8f:3d:62:30:41:29:c8:1b:79:76:
fc:40:36:a0:1a:b8:e7:7d:aa:60:39:cd:59:72:a5:9f:0a:3c:
a1:04:7c:e7:d6:99:69:f8:b6:1f:e7:8d:2e:24:75:f7:3a:12:
7d:03:61:63:59:b6:db:73:f1:05:45:9b:ae:e5:5b:f6:82:49:
f2:d0:2d:e8:51:a2:06:67:39:be:d1:e1:5a:85:92:da:cc:4f:
0e:37:33:2d:43:19:f5:30:cb:43:69:50:12:09:ef:ab:c1:f4:
46:50:9a:0a:55:54:be:fe:5e:e6:18:be:1f:a8:d4:21:3d:97:
b0:a6:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:31 2024 by rpki-client on console-fra.rpki-client.org