Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: 83LcxSODkVF9rnOTTem+NcPaFKG4utZaKKey2mhvAio=
Subject key identifier: EA:3E:F1:27:95:0F:3A:31:B6:7C:62:F6:C3:3C:82:83:A9:76:DE:8F
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 018F8749AAD03C48A62B5C061A63D92B9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 0D84
Signing time: Fri 17 May 2024 16:01:42 +0000
Manifest this update: Fri 17 May 2024 16:01:42 +0000
Manifest next update: Sat 18 May 2024 16:01:42 +0000
Files and hashes: 1: QKJXBuj0YgwQYhI-HUF5YUSngCo.roa (hash: Lo/DfnO4pc6PKNXS7S37SEkAm0vBSLvnVWRB3lrWmqA=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: 1/NA8nX5VaLma6lijIqUBlKRBocOg8zoruZrzhvHveA=)
3: rLZGLT8dF0NmUHBTvGTUgLbN5sM.roa (hash: FnNYUjY1bidLh7OmIvFH5no5YMXIdn7y1I3V1422kAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:aa:d0:3c:48:a6:2b:5c:06:1a:63:d9:2b:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: May 17 16:01:42 2024 GMT
Not After : May 18 16:01:42 2024 GMT
Subject: CN=ea3ef127950f3a31b67c62f6c33c8283a976de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:47:08:df:45:8f:88:75:52:e8:43:2d:bb:
46:e6:c6:7a:77:e9:7f:df:5d:93:6f:f1:2c:e6:5a:
18:64:4d:1f:39:09:7d:cc:e0:9a:e7:a8:68:60:26:
a1:ae:ed:0b:34:55:86:d0:d3:81:22:b0:c5:c6:ee:
23:26:30:8f:01:6e:f0:2c:e0:59:40:a4:57:77:76:
07:3c:23:56:14:cb:42:d9:90:08:8b:e5:e2:25:88:
06:3e:20:26:8d:5c:25:44:9b:08:23:1b:63:ed:29:
54:10:f5:d7:60:2e:25:ec:75:b3:56:17:c5:8f:d6:
f0:1e:66:7c:6b:54:01:60:88:11:14:61:ff:cd:a3:
fb:d8:78:1d:b0:0a:62:d0:e4:c8:aa:65:f3:f6:4f:
83:fa:25:ac:10:41:f1:fe:28:b0:26:87:44:d6:05:
58:82:50:18:dc:7b:13:65:50:1c:05:b6:36:cf:93:
e9:98:d1:43:a3:96:22:63:56:24:cf:af:2c:05:73:
44:07:5b:65:7c:6e:74:1e:84:ba:af:0a:45:8f:0f:
42:71:88:86:3b:c4:33:e1:d3:a9:8e:01:e7:fe:67:
5c:1f:bd:35:26:68:d2:79:4c:1f:a5:2e:23:67:82:
68:12:ba:55:50:16:7d:cf:0e:bd:8a:4b:36:21:30:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:F1:27:95:0F:3A:31:B6:7C:62:F6:C3:3C:82:83:A9:76:DE:8F
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:93:ee:47:c5:2c:6d:39:8a:6f:b2:d2:34:63:32:2a:79:
94:e8:40:e2:5d:02:68:48:62:f9:1c:55:b4:1d:38:a8:39:ea:
81:d6:78:75:e5:e8:44:70:4b:b8:58:05:c0:56:b0:7b:72:a5:
7a:58:d9:62:34:67:70:91:11:48:81:63:a6:d4:f9:66:6e:99:
82:d9:4d:21:7f:d1:0a:f0:cc:01:fd:e0:5f:18:f0:43:7d:dc:
b0:f0:66:1d:63:65:61:6b:d4:0f:24:87:5c:4f:bc:43:0d:c6:
59:01:1d:a0:83:27:a9:03:46:be:35:44:19:46:76:cb:91:01:
a2:a8:4a:f8:f7:e0:73:e9:82:be:47:5e:51:d3:05:78:ad:0e:
92:64:3b:8e:db:12:b0:c4:4e:1c:2e:67:28:0f:19:b4:2e:9a:
a3:ff:69:cf:cb:39:a8:b0:99:07:b8:ba:fa:90:62:f4:6a:47:
8c:5d:6b:eb:ec:a1:cf:77:bd:17:ba:07:2f:89:97:27:34:c3:
44:87:74:80:17:8c:70:b7:72:f0:16:b0:ba:5e:54:cc:db:b5:
0f:27:ee:1c:25:ea:62:1c:e8:60:b9:0e:32:d1:2c:e9:42:82:
2f:83:19:58:d7:b3:26:e2:3f:c2:c7:19:29:3f:7b:16:e1:42:
26:0a:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:07 2024 by rpki-client on console-fra.rpki-client.org