Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: p4WZQ9oinHnme/sQSCL0pJLlZwTw9tOCOx90cHem0KQ=
Subject key identifier: 85:D0:98:22:3B:5E:D5:36:A3:C0:94:6E:78:DA:C2:A0:92:C4:ED:B0
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 018F87ED96BBAA7DDD67AA8D6184465419F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 110A
Signing time: Fri 17 May 2024 19:00:45 +0000
Manifest this update: Fri 17 May 2024 19:00:45 +0000
Manifest next update: Sat 18 May 2024 19:00:45 +0000
Files and hashes: 1: 0v7_OvZKrmemXxFEbr4YQBjpJoY.roa (hash: lg/HOCjtU7L0PgfI0et7FW3g5DnYswZl6OX9z+PHrs8=)
2: cv3SlCn_WTLRaqwKxhoyDL7WXWQ.roa (hash: koOyxXB3JCQtnHKqv+ARFSOkTrNNm2nGmcOwn5j/cik=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: kcfqFOXSexpPdPC6/ceDcXSYBPkNZECLTtkgc7SsgLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:96:bb:aa:7d:dd:67:aa:8d:61:84:46:54:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: May 17 19:00:45 2024 GMT
Not After : May 18 19:00:45 2024 GMT
Subject: CN=85d098223b5ed536a3c0946e78dac2a092c4edb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:a9:58:fa:c9:9e:c0:39:8a:a7:b2:e2:21:
6e:eb:f4:cb:b7:21:9c:71:fa:76:47:54:d7:6d:36:
57:f1:e7:12:83:77:23:c4:25:82:bd:04:ab:a0:34:
ef:9a:bd:0e:06:2a:19:1b:59:1b:04:64:52:7b:75:
62:d0:29:64:9c:71:78:94:c1:2a:c3:28:07:41:f7:
0e:89:4a:9f:c0:ae:4f:00:26:99:0d:c1:cc:cc:0c:
3a:b9:18:53:c4:7e:f7:5a:20:37:df:f2:e8:e2:b6:
06:bd:2e:1f:8a:ba:bb:f3:3d:c9:01:95:a5:45:69:
0b:2d:59:12:1b:db:2e:85:0f:2e:f0:fd:4b:66:28:
c9:95:e8:ee:75:78:1b:c7:74:86:b6:b4:c9:d4:80:
fe:30:6e:a3:c5:99:98:69:8c:2b:b1:6c:61:94:e8:
d3:fd:7d:3b:22:a5:f0:33:28:43:13:74:4f:85:e4:
76:b5:96:07:23:b5:92:7c:42:c9:f2:40:92:e8:16:
1c:15:51:d1:00:37:51:5f:6d:4c:90:df:1f:f6:7b:
72:05:f3:9b:1c:f5:b4:82:32:f7:3f:fa:18:29:63:
31:41:52:7f:dd:4c:2a:09:eb:1f:97:f6:c7:84:9f:
67:b7:83:e0:be:e0:16:41:52:3e:97:3e:27:2f:48:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:98:22:3B:5E:D5:36:A3:C0:94:6E:78:DA:C2:A0:92:C4:ED:B0
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:09:b1:8c:3d:0b:bb:79:c3:3b:21:b5:96:60:41:e0:24:4d:
a3:eb:81:cc:fd:86:20:3f:31:2c:07:36:85:cd:16:81:9c:6b:
d1:d2:a8:ce:83:af:f3:f2:75:7d:36:9d:50:58:b4:52:26:18:
29:b6:99:07:14:e5:64:6d:03:35:99:16:03:89:5c:4a:b7:1f:
cc:da:5f:ab:03:d4:d2:b4:05:e4:be:d0:ca:8e:9c:49:bd:41:
41:d7:cb:a8:e0:c9:88:df:4a:80:dc:9a:79:dd:32:d8:ab:06:
f4:55:7b:2c:94:24:fb:95:9e:89:47:71:d5:fe:f0:f6:89:49:
2f:b1:e7:40:82:e1:4a:76:69:a0:71:52:2b:62:62:27:44:89:
82:53:b9:fc:97:ef:03:55:e1:63:d8:d3:e5:d2:3b:64:74:9e:
b7:49:77:d8:c5:6a:87:93:84:15:f8:d3:a4:d3:35:e1:0f:98:
09:40:8b:66:44:cf:f2:e4:2d:01:62:a3:d0:96:32:34:77:36:
f5:09:5f:6f:6c:4f:e3:ee:83:eb:bc:66:52:ca:42:ea:1d:21:
9b:b8:31:7f:60:c0:0d:cd:11:17:52:c8:43:b5:b0:a5:9e:41:
2c:0d:0c:98:90:3c:68:b8:4e:2e:58:a5:52:33:b7:6b:bd:75:
bd:d2:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:56 2024 by rpki-client on console-fra.rpki-client.org