Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: EzYZky3hK+nSLqj3EJ2+Z/NiS25gvzaK73whDlLij7U=
Subject key identifier: EB:FC:1E:E2:4C:FC:2A:3B:44:4A:9F:44:75:A3:5F:07:28:49:87:30
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 018F874A5DEE9A96D1E3F23A8A8B1BDC0602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 0322
Signing time: Fri 17 May 2024 16:02:28 +0000
Manifest this update: Fri 17 May 2024 16:02:28 +0000
Manifest next update: Sat 18 May 2024 16:02:28 +0000
Files and hashes: 1: kjfwGIJ0iUb_Qo461r3ECsqvUdg.roa (hash: L8Fdi2QBmIab/DANF2RbIIEdSrPt9nvg6tb1KpWKKR4=)
2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: qDWF0iCa4wnkiq3I+G+fcYZBC0TB9shUdiUUAbwGujw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:5d:ee:9a:96:d1:e3:f2:3a:8a:8b:1b:dc:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: May 17 16:02:28 2024 GMT
Not After : May 18 16:02:28 2024 GMT
Subject: CN=ebfc1ee24cfc2a3b444a9f4475a35f0728498730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:4b:64:50:9b:bb:87:67:58:8d:09:47:7d:
4e:d2:2f:53:48:6e:39:6d:0d:00:33:6e:4a:d3:9d:
3b:66:72:cc:7f:dd:89:11:89:53:ff:8a:78:fc:c3:
f0:d5:d9:0e:27:f6:be:3e:cb:0a:f0:01:8c:0f:74:
50:87:68:82:43:f0:03:ba:51:39:82:d7:6a:b6:17:
1c:79:d6:2b:74:d4:bd:c7:5d:83:15:5c:70:fc:6d:
81:06:2a:5f:3d:3b:05:28:72:df:57:1b:38:83:d5:
75:e4:8a:5f:cc:d2:bd:c6:4f:6e:92:73:a4:7f:4b:
16:64:b0:08:e4:64:3d:d4:12:4a:57:c9:44:4d:56:
74:56:bb:89:b1:55:dc:0e:d2:d2:f8:19:c8:b0:09:
5a:b1:c8:7a:d3:e5:3d:27:cf:33:29:75:2f:87:cb:
1e:7d:88:98:1c:94:c2:45:d8:e5:07:32:01:5c:b6:
81:08:9b:a3:6f:87:75:e8:73:b9:ac:4d:0a:50:95:
ff:bd:1c:b4:b2:b4:4e:78:d4:94:97:45:3a:e1:be:
4c:22:6d:9f:1b:05:6c:e7:06:75:90:35:8c:29:d8:
49:bd:bd:3d:a4:a1:03:33:cb:a8:92:cf:b5:c1:80:
68:22:a6:e6:76:a0:97:b7:f6:fb:e2:29:c6:33:5a:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:1E:E2:4C:FC:2A:3B:44:4A:9F:44:75:A3:5F:07:28:49:87:30
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fd:ae:c2:d9:d6:e4:42:4c:e4:31:81:58:c7:29:25:b8:01:
d9:37:1e:93:d3:6a:77:3b:70:f4:e7:f1:5c:37:c4:bd:4c:89:
6f:0e:a7:ea:47:aa:60:b6:5c:4d:34:a1:18:13:26:75:f2:67:
fe:9f:16:a2:af:64:8c:82:7f:23:ce:81:a8:b9:7d:55:b1:9c:
1c:52:e3:7d:c6:56:48:fb:5b:21:1d:9b:29:a7:b1:0c:ed:e0:
a5:9f:25:71:3b:05:6a:8e:1a:d4:39:aa:fe:49:5e:bb:a3:a5:
f6:33:34:78:c5:9d:4d:7e:9c:c0:42:44:26:db:88:f0:79:79:
dd:94:c8:d1:e9:ab:84:fd:5a:99:fc:29:3a:88:95:08:a3:62:
71:f7:24:15:15:ba:d0:5a:c7:6b:2f:10:8b:ed:30:e8:37:b6:
77:b0:93:98:d4:48:40:c1:46:dd:1e:4d:d3:60:ee:fc:d2:7b:
96:e0:ec:4b:03:b1:a5:7a:44:14:c8:0c:4d:21:af:01:7b:77:
53:6d:0f:1d:7c:f4:a9:c9:6b:bf:e8:48:5e:ae:31:2d:e6:56:
3c:0a:d6:3f:e5:01:17:c8:95:72:4b:02:c3:1a:eb:ed:5c:92:
9d:99:78:3b:4f:ab:03:8d:35:9f:bc:17:6f:42:7d:d8:f6:b5:
8d:a2:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:11 2024 by rpki-client on console-ams.rpki-client.org