Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: /KD/mGpuZcXdcWhRdu2OcYRfVku13kLFOUNEVz0fVyA=
Subject key identifier: 22:CE:D9:53:E5:B7:21:D5:4B:2E:26:8B:39:C0:24:8B:F1:B3:BA:6B
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 018F90823F006E20F7A52518B7612DDB0316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 0CA2
Signing time: Sun 19 May 2024 11:00:05 +0000
Manifest this update: Sun 19 May 2024 11:00:05 +0000
Manifest next update: Mon 20 May 2024 11:00:05 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: t6piZpkpNx4CpgEKXibwCiFDXJjSXHZ2i4NCFWgHN84=)
2: nyCt7Dv6p3aoGmc8K9Sq8j-m_Go.roa (hash: /V8TbNABdwlM2xWgeT2vdNhyCyJ1Msc0CJUvlDPI5d4=)
3: pisCrSzOjAyK_K7IUXrsNaS7ino.roa (hash: tdYF3omJ1nNyxpTJy4PW9ybN+HQXDizu0uQfiwF9qgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:82:3f:00:6e:20:f7:a5:25:18:b7:61:2d:db:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: May 19 11:00:05 2024 GMT
Not After : May 20 11:00:05 2024 GMT
Subject: CN=22ced953e5b721d54b2e268b39c0248bf1b3ba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:9c:19:30:86:54:ff:8d:0a:fa:8a:c7:81:
f6:18:c9:f7:80:4b:cd:89:60:b2:32:02:12:16:88:
bf:76:4e:99:46:04:77:ac:a9:35:b6:a1:55:e2:25:
1e:c2:07:8f:1b:02:81:d0:be:b0:95:2c:77:b8:ab:
90:dc:d2:1f:53:94:55:03:bf:c5:63:5a:05:33:a6:
18:0e:bc:99:db:8e:d1:2c:88:97:01:33:7c:4e:95:
bf:c8:5f:4b:2f:9a:34:bb:ab:27:de:40:12:5d:1d:
98:59:af:d7:ae:3d:8d:4c:16:c9:0b:d4:8b:87:2d:
fe:33:63:fd:02:63:47:81:1a:fd:f4:b1:6f:c9:cd:
33:2b:85:bc:9c:4c:35:b1:e6:34:83:0a:34:bd:19:
26:11:04:6b:be:cf:6b:fc:a5:7f:8b:37:2c:a7:48:
74:60:73:40:ec:8c:a8:c2:d4:a5:c8:5d:1e:3e:0d:
1f:d3:29:93:26:04:48:68:7d:99:a2:e2:30:fd:ae:
e5:40:10:81:9f:48:65:37:3f:83:58:58:f8:aa:06:
6b:87:7f:34:b9:f5:c4:21:9e:c2:e1:5f:1b:bd:23:
46:72:0d:5c:b5:1c:75:52:e6:a7:b2:69:7e:21:96:
1c:40:72:4c:f0:3f:09:fc:9f:83:58:6e:3e:60:b5:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CE:D9:53:E5:B7:21:D5:4B:2E:26:8B:39:C0:24:8B:F1:B3:BA:6B
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:22:fe:bf:6f:98:fd:15:d1:0d:4f:21:3b:a2:cb:9a:8a:
fe:13:e3:c9:92:d2:90:b3:72:2f:02:e8:a1:90:06:69:ed:c0:
aa:89:de:7a:32:5a:11:96:1b:13:11:55:94:4c:d5:e2:69:2e:
98:d5:65:2c:dc:e6:bf:39:12:14:92:6e:22:ef:a5:c9:f6:28:
f2:e0:f7:cc:42:b0:4e:58:5a:ab:0e:84:dd:62:8d:28:aa:8d:
19:dd:43:5e:79:e6:4b:03:53:72:94:92:96:43:38:b7:74:c1:
65:8e:e3:c4:13:f4:b7:33:7b:d8:bc:06:bb:e9:1c:24:3d:30:
15:fa:c3:8c:bc:fb:ae:7f:bd:0a:a9:ec:c5:f4:6a:88:63:e0:
9e:ef:55:d2:b7:94:45:f3:d0:4c:69:7e:9b:fa:f0:17:9c:9c:
72:ba:c9:c6:d3:45:ac:22:26:bc:04:b4:65:5b:c7:2d:f7:28:
b9:e6:92:d5:6e:3a:29:a7:09:7a:19:8f:01:0f:23:05:17:f0:
d1:dc:86:1b:91:e2:c2:31:0a:0d:a9:35:f5:d9:8f:a9:5a:7f:
f0:4f:ca:84:bf:18:7d:3d:bc:e3:a1:d3:f5:f6:44:1a:96:15:
6b:c6:44:ee:29:35:32:bf:15:0e:c9:4b:a8:3a:49:f7:3c:0a:
e5:97:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:13:40 2024 by rpki-client on console-ams.rpki-client.org