Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: MG6EevcwQNNRWP9Ti1CVYGTtAq7SbhjniTb4MUcA9pM=
Subject key identifier: AD:13:16:C0:2D:72:83:34:21:90:E7:C9:F3:84:01:03:BC:5E:0B:1C
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 018F3EC241011F558000F92F4BFD304E9CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1157
Signing time: Fri 03 May 2024 14:01:08 +0000
Manifest this update: Fri 03 May 2024 14:01:08 +0000
Manifest next update: Sat 04 May 2024 14:01:08 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: sX1tV1RrmprV3xHwhRGDTj1KzE5JpntePQzy8PAV3c8=)
2: T7rKmq8kWmRNet7Viu2aPN3zo-M.roa (hash: yWPDPzSr/CN9JZkYfYOLhkQmHGmzk952ycTEHI/uQtE=)
3: iT-GWP7tJpCGI9o8z0aX3CKit4Y.roa (hash: V37c0Wb1LxwsSZMokNVez1UIf0t4w168v/S27lgPC6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:c2:41:01:1f:55:80:00:f9:2f:4b:fd:30:4e:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: May 3 14:01:08 2024 GMT
Not After : May 4 14:01:08 2024 GMT
Subject: CN=ad1316c02d7283342190e7c9f3840103bc5e0b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:4b:a1:92:ec:56:11:f6:8d:7a:2a:d5:32:
96:ca:e7:0a:77:69:d2:4d:e4:9e:15:57:76:83:87:
3e:09:b5:c3:50:19:bd:7b:1b:c8:d7:57:50:3e:74:
6b:c6:a3:b9:ad:e4:64:f4:a6:79:3a:4c:fa:49:bc:
f6:93:8c:aa:f0:3c:ff:79:78:78:d8:40:65:49:0e:
68:8b:29:23:48:ce:cf:8c:77:af:4f:0b:4f:ad:b3:
45:db:fd:b5:1c:b6:fc:e6:1f:61:28:f4:b1:8a:f9:
16:9b:79:8d:fd:9f:0b:e1:15:e2:78:13:2f:c2:37:
bb:1a:88:d4:0c:0d:d6:15:16:e2:31:5e:dc:bb:32:
66:1a:12:b1:82:8b:07:34:40:ff:73:de:86:57:0b:
c0:db:de:c3:74:8a:ae:d1:41:3e:67:6a:1a:83:cd:
98:69:24:ba:86:37:d8:7b:d7:41:22:91:d8:7d:c8:
6b:d6:4f:42:58:4f:11:e8:c0:13:d8:b1:eb:e4:9e:
ca:cd:e6:81:d8:39:53:90:d0:7e:2c:d0:1b:03:22:
12:ad:b3:b4:e5:9c:61:2a:f3:23:ac:95:03:b3:f8:
e0:e3:f5:28:ec:85:bd:db:cc:a9:02:32:63:eb:d6:
65:7a:4d:cf:a0:6f:64:a3:d6:4e:0c:75:81:0d:54:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:16:C0:2D:72:83:34:21:90:E7:C9:F3:84:01:03:BC:5E:0B:1C
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:69:31:92:c9:a2:60:25:b5:eb:59:02:69:09:0c:a0:b6:
db:e1:61:cf:9a:69:e4:f9:a1:74:b5:74:d4:5b:dc:ee:a9:a6:
80:4e:22:50:2d:8c:dc:23:a7:cf:bb:50:bc:b8:d2:8f:c0:18:
94:e5:ec:00:30:b6:e2:2a:f3:2f:ff:18:68:76:93:5c:18:a3:
96:ae:8a:1d:44:ae:75:06:cd:00:15:1c:ef:7e:82:12:d6:81:
9c:05:35:1e:8e:7f:ad:4d:c3:42:44:de:ee:5e:ad:73:05:a8:
5d:28:3c:78:7f:11:71:0f:03:f0:ca:96:1a:69:d8:35:a8:1b:
44:af:dc:76:5d:ca:0c:bc:17:09:f1:4b:05:85:67:a4:50:87:
39:27:5c:43:ae:67:a4:12:bf:9b:f8:bd:4d:e5:60:7c:69:f4:
4b:dd:51:08:d9:af:d6:97:c7:dc:5e:9e:c3:57:90:7b:5c:12:
24:e2:00:11:b3:22:50:b9:ed:3d:8c:42:22:12:55:30:fd:a9:
26:f8:7a:d2:40:0b:01:eb:1e:d1:95:2b:02:d3:24:8b:54:8e:
a1:01:af:10:9f:58:60:fa:03:b3:5b:0f:c4:66:11:2a:f8:97:
03:d4:75:51:ab:6a:d8:00:7c:3a:f2:da:86:88:be:4d:51:7f:
20:c8:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:40:08 2024 by rpki-client on console-fra.rpki-client.org