Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: +qvDEp+TrKrZVAF5D6Dz061ceD74bU5jEdBqbCrjVrE=
Subject key identifier: 50:DC:D2:61:3A:65:1C:CA:07:28:D2:E0:D6:46:08:27:28:82:6E:9C
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 018F8F6FD5A5544C333E75825ADD0FB99E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0127
Signing time: Sun 19 May 2024 06:00:22 +0000
Manifest this update: Sun 19 May 2024 06:00:22 +0000
Manifest next update: Mon 20 May 2024 06:00:22 +0000
Files and hashes: 1: 2IPuE496IrAKVAV_ioNRxObuZ-0.roa (hash: MeqL7N2Smtgjq8M1rFwvtqg4C97sysU02IPX3jdtjOU=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: rKjClB3N35spLpiWzCqy4RygnDabuKXa6hz2EQK4JbE=)
3: U1lbbSfnBS6eqKOXx1HNFk8MqKQ.roa (hash: ucUjn5YZa8saX3jz0YceWTl487YUucnqydKrJ5S6aJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:6f:d5:a5:54:4c:33:3e:75:82:5a:dd:0f:b9:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: May 19 06:00:22 2024 GMT
Not After : May 20 06:00:22 2024 GMT
Subject: CN=50dcd2613a651cca0728d2e0d646082728826e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:c2:c6:18:48:93:10:23:98:1d:3d:1c:02:
9f:55:2a:11:5f:a8:fd:9f:2d:99:3d:05:19:02:48:
d6:46:9a:90:b9:1e:1f:f5:9b:ff:bf:f2:8e:04:c8:
9f:22:73:55:0e:29:d4:fc:ee:4e:37:98:25:58:61:
b2:bb:91:81:cb:3e:67:74:5c:2a:d0:b2:9b:5c:68:
ff:34:ff:89:d6:eb:94:2e:99:fe:b6:53:4f:5c:4d:
9b:d6:25:e0:74:a6:c4:ec:43:64:4b:0b:a5:83:d4:
08:17:d2:8d:22:24:38:b8:68:d0:f2:13:3a:ad:80:
f2:85:d5:97:1e:d8:2a:a2:03:dc:c7:f7:2e:f8:6b:
8d:c5:e9:2d:71:65:c1:aa:97:fa:b0:10:fe:71:ea:
c8:3e:66:93:ba:0a:97:5d:30:47:07:a2:f8:fe:57:
6f:d4:f7:31:2e:aa:a4:a9:9d:d9:8c:2c:9a:86:0e:
84:24:96:f8:ed:8e:01:cf:2b:8b:90:9d:81:26:3e:
05:cc:71:c0:16:8a:97:6f:c0:82:ad:65:18:dd:46:
8b:ef:3a:4d:9d:46:dc:cf:5f:59:da:2f:84:ef:b7:
b0:03:00:19:ee:49:9e:c3:4a:10:41:77:41:fc:98:
21:5b:92:a2:8e:26:b9:30:55:91:e2:d6:3d:97:a1:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:D2:61:3A:65:1C:CA:07:28:D2:E0:D6:46:08:27:28:82:6E:9C
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:03:dd:85:5c:ac:11:7a:4c:ba:fb:56:5a:b9:3d:3f:e9:0f:
39:95:76:9b:b4:9e:0c:a0:1a:36:f1:9c:bf:ed:47:2f:ea:06:
f4:e0:b8:fe:e0:21:6b:65:6a:3b:dd:ca:b7:d9:6e:ed:94:6d:
8a:78:6d:f4:c6:13:b2:49:cb:aa:57:d7:dd:df:a0:94:d8:73:
aa:ae:ed:da:45:a0:87:18:88:6f:29:83:90:ec:06:49:8a:31:
0b:8a:4f:af:70:de:69:60:1d:85:9e:aa:e1:af:c4:25:29:95:
44:81:f6:42:55:c4:4f:93:f6:d5:35:09:9e:41:ac:4c:2c:12:
28:e0:9c:f5:34:b7:a2:fb:03:22:60:58:dc:9f:5f:81:96:9a:
60:25:ac:62:e2:84:10:3f:74:5c:da:d0:97:20:ec:05:1c:5e:
17:21:dc:1e:0b:35:ef:5f:0a:89:68:9b:22:e5:c7:09:4b:d2:
42:9a:8d:66:fa:16:5c:5e:e8:7f:36:b6:f6:22:44:3a:f0:19:
29:33:f4:67:69:83:51:e6:ac:bc:0b:56:0b:6a:a3:91:1d:3d:
f4:ab:b2:13:fa:9a:a9:e0:46:ff:13:ba:cc:11:0f:7b:42:f4:
b9:a3:73:55:fc:62:94:fd:48:8b:5f:e8:b3:19:9b:6d:39:be:
72:6f:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:14:18 2024 by rpki-client on console-ams.rpki-client.org