Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File: IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier: 7YUxDYb7prV+Tota41gg7fH26Q+gA0RTKcnPZTALLPI=
Subject key identifier: 2F:D6:89:12:26:E1:11:37:A9:12:A0:E3:7B:50:6C:ED:A6:19:40:93
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial: 018F57A69FBAE633F48EB607A7082448F002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number: 0CFA
Signing time: Wed 08 May 2024 10:01:28 +0000
Manifest this update: Wed 08 May 2024 10:01:28 +0000
Manifest next update: Thu 09 May 2024 10:01:28 +0000
Files and hashes: 1: HGO4pTCZ5QoEzr_dBAnCWjWirxY.roa (hash: IC91e+CPEhKWBxyDE9P5Y6zl2JiLozZ7gH1uIfpfKcM=)
2: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: QSM61bl4AUkh5jVSD7EktFErp5Pc7szqHa72H2899iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:a6:9f:ba:e6:33:f4:8e:b6:07:a7:08:24:48:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Validity
Not Before: May 8 10:01:28 2024 GMT
Not After : May 9 10:01:28 2024 GMT
Subject: CN=2fd6891226e11137a912a0e37b506ceda6194093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:ae:b4:79:85:e6:79:0a:cd:4f:7f:14:94:
9f:ff:aa:d8:8e:27:16:7e:ed:a4:de:5e:30:a5:b7:
16:7b:6a:93:6f:fa:40:4a:22:cd:a4:78:4f:ad:8c:
ba:b8:d7:34:e7:ad:b9:41:8f:13:5d:3d:b9:1d:e5:
4e:3c:1c:5b:1e:98:d1:81:a2:bf:d3:10:e7:30:8a:
e0:bb:6b:f3:3a:80:de:fd:b8:5a:46:c9:76:63:8a:
13:59:a2:3d:4e:03:ea:ab:cc:74:b2:50:5c:51:a6:
8c:28:f3:02:e3:ef:9b:30:71:a5:9e:2e:9f:f3:81:
ca:eb:90:15:6c:e1:48:99:42:81:81:77:17:22:88:
8a:8f:a6:d3:da:ad:c0:4f:13:e2:99:5c:6f:8c:07:
f2:9f:83:c0:df:8d:99:c7:1c:79:66:3d:ab:61:38:
c9:ba:b8:c6:21:85:a3:29:57:f3:d6:37:3d:aa:ef:
b4:33:f1:64:9e:ff:88:b8:ff:27:29:e1:ae:a1:53:
24:ab:4a:48:64:aa:14:67:e8:b2:dc:18:af:d5:8b:
8d:44:79:ee:52:d1:35:1e:0c:cb:71:dc:50:1b:af:
60:f5:66:e2:d3:63:09:8c:e0:e2:1f:20:49:f2:95:
a8:0c:46:c3:14:ac:7c:af:b4:8a:42:8b:ce:81:9f:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:89:12:26:E1:11:37:A9:12:A0:E3:7B:50:6C:ED:A6:19:40:93
X509v3 Authority Key Identifier:
keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:3f:72:bb:d9:c3:96:9a:69:85:72:28:01:ae:b8:56:94:
ae:74:d1:17:3b:35:f3:1f:5e:ae:08:86:32:88:c2:26:2f:5d:
51:a6:76:a8:a8:08:94:ea:21:e3:46:b1:79:b3:3b:11:30:4b:
7a:fd:3c:4d:09:c5:f8:3a:a6:7b:68:f5:3d:13:02:5d:bd:24:
c6:5d:9a:d1:0f:1c:c8:f2:b9:43:69:fb:84:95:fb:95:7a:93:
c5:54:93:8a:4b:82:a3:77:15:9d:6f:aa:82:5c:52:eb:e9:fd:
c6:81:38:ca:4f:ba:6d:5c:22:e0:80:87:e7:ea:72:5f:4c:52:
78:29:88:52:db:f0:49:c1:34:86:e1:6d:98:d1:38:bf:84:9f:
7d:cb:04:8d:54:0c:3a:64:f9:b0:ed:d0:ff:f9:62:2f:f4:5d:
fd:d4:a2:3b:e9:a3:97:be:78:16:4d:a2:a3:8c:9a:46:3b:e4:
f6:89:4e:03:41:8f:53:9a:c3:e2:13:2e:24:9c:ea:91:02:69:
f6:02:1b:58:35:55:49:45:ab:cf:e2:c4:0f:c4:cc:5e:08:a5:
49:f8:56:c0:d7:c0:a4:f4:1f:c8:51:d6:65:37:b4:b7:34:e9:
3b:d6:54:52:5f:d1:88:a2:f9:cb:41:ab:0c:9e:32:89:1f:8d:
b8:c4:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:49:25 2024 by rpki-client on console-ams.rpki-client.org