Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json)
Hash identifier: 9vd0Yencb1uSJMksziv7FSGd6KMfTIquodEi7v3IeM4=
Subject key identifier: E2:BB:33:71:DF:6D:63:F9:1C:46:21:92:A7:61:6A:B8:5D:CE:D2:E2
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 018F3C9D08A7878FD51652713A61F5FD32EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
Manifest number: 0BDC
Signing time: Fri 03 May 2024 04:01:15 +0000
Manifest this update: Fri 03 May 2024 04:01:15 +0000
Manifest next update: Sat 04 May 2024 04:01:15 +0000
Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: afrI9wVn/nqlr1uNV7eNK7KNvJLM6ukgvk3opB6j9Mk=)
2: K-1nPbPaFGrLG844RBW5MdqmZpA.roa (hash: dDxafcgVjqmsRo5KArabS7YzLQ6qEK311dnaLqYkiwE=)
3: s1d0X18wwVoJkZp-FOdcb7mJ0CQ.roa (hash: hIG+nj6sqabnfXx1yGIKPR1/PErmmmf4YWciu+C3hd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9d:08:a7:87:8f:d5:16:52:71:3a:61:f5:fd:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: May 3 04:01:15 2024 GMT
Not After : May 4 04:01:15 2024 GMT
Subject: CN=e2bb3371df6d63f91c462192a7616ab85dced2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:6a:7a:e2:67:4b:41:46:da:24:5f:dc:04:
d3:fa:3a:55:cf:a0:39:a7:ae:ea:45:61:4c:90:6d:
7a:79:1f:5f:27:40:ca:59:dc:1c:4a:c0:e7:4a:dc:
89:4f:71:ae:9a:5f:2a:55:25:b4:e6:d0:d9:1e:e1:
3b:b9:ab:68:6a:d0:be:7c:c8:ac:3e:f9:7d:cc:31:
0c:2a:07:20:92:ed:d1:f5:07:ed:14:e8:64:85:88:
e4:e1:a0:78:6c:c4:dd:a6:7a:18:f7:38:c3:aa:2e:
b1:ec:7d:88:16:d8:67:a8:70:3e:ee:16:36:7d:e2:
66:63:cb:b6:ec:1f:2e:6c:3a:5c:45:e7:e9:6f:8e:
85:b5:3c:aa:1a:28:d9:f1:f3:b7:0b:b3:11:be:6a:
5b:e5:4e:e7:18:0b:4e:8d:ce:4a:c9:3d:42:2a:2c:
26:7b:5c:23:15:f3:18:4d:83:04:59:2e:60:93:cc:
31:b3:cd:de:e2:f6:de:e3:50:bd:a6:77:1e:84:a3:
69:31:b0:1e:75:2e:6d:40:0f:82:f7:78:52:d1:53:
dd:e3:f0:83:4f:c9:e0:bb:aa:76:5f:7f:29:d9:d6:
54:ca:9d:d7:89:fb:28:8b:1e:86:3c:6a:3d:29:6c:
65:97:ec:e3:0a:b1:c6:88:01:28:ac:72:af:73:da:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:33:71:DF:6D:63:F9:1C:46:21:92:A7:61:6A:B8:5D:CE:D2:E2
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:44:50:03:cc:dc:c8:82:61:ee:d0:ee:90:86:69:4e:4d:15:
71:e5:e3:75:c8:81:b3:e2:58:29:93:9e:82:c8:5c:b6:b3:d7:
96:b4:ed:e2:f4:5c:80:c5:93:cf:d8:55:05:25:e8:b8:85:1f:
1c:73:09:73:15:4c:bf:a4:8d:c1:d0:10:bb:42:05:4a:95:19:
8d:80:3b:7d:11:4d:88:fe:a9:66:da:cc:cd:2c:69:8b:4d:79:
1d:25:1b:e9:2b:d4:56:01:a7:30:a5:81:92:a3:9a:c2:4d:32:
92:6e:db:55:e0:5c:be:fe:c5:c3:25:df:a8:29:09:bb:73:3c:
b9:8b:fe:79:0e:a5:1a:00:87:13:2f:c8:6a:cd:aa:8e:9a:59:
20:a0:b2:67:fa:9d:1c:88:81:77:58:24:fe:d3:d1:35:3f:27:
33:f8:02:ae:bd:e2:38:61:6e:82:6b:09:fa:0b:4d:42:b7:54:
28:68:83:08:13:25:e5:27:ad:e5:0b:30:5e:9e:aa:93:f4:05:
34:4c:f9:d1:a9:e8:80:0e:e5:25:74:37:df:2a:62:60:36:36:
9f:88:fb:bc:1b:5b:77:06:aa:e1:1e:a5:b6:02:4c:24:31:c5:
15:b8:66:b6:08:40:d9:d7:14:73:43:ca:b1:a7:3d:0f:7b:60:
d2:a2:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:53:40 2024 by rpki-client on console-ams.rpki-client.org