Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: yAXGPeWftcKdZ/v2UrUaJyDijRkQXScjdI80CW2oOoQ=
Subject key identifier: 35:97:31:15:F6:80:EF:F9:00:AB:FA:19:CD:45:34:3E:06:BE:C2:88
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 018F87491385E544F1A30A6E4405E809F52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 0CFE
Signing time: Fri 17 May 2024 16:01:04 +0000
Manifest this update: Fri 17 May 2024 16:01:04 +0000
Manifest next update: Sat 18 May 2024 16:01:04 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: vZcX/eYVbth9w2ZsPm+LRDxMlSa2EM84nZUwpv+840c=)
2: k94nd-Z8rdJGZoMBtg9-AbTfTWQ.roa (hash: z0WQ1mULa2ASHPRDVola2p9wFV5IvjvUVyaesxt/lsM=)
3: oTihBis1T28y7TN0nSUBVLYqT_o.roa (hash: Jnp2iM4gIvUcoNXCdSOUD/DPh9eKEm2lZitJPELzSDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:13:85:e5:44:f1:a3:0a:6e:44:05:e8:09:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: May 17 16:01:04 2024 GMT
Not After : May 18 16:01:04 2024 GMT
Subject: CN=35973115f680eff900abfa19cd45343e06bec288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:fe:03:f1:c6:56:1b:d5:f0:f8:18:15:df:
f9:96:70:e2:31:2d:95:1e:e8:48:43:4a:b1:06:a8:
80:1b:0d:ea:06:3f:09:1b:1e:fb:fe:41:7d:6a:9d:
74:37:f7:32:78:9e:42:f7:ff:45:96:c2:37:cc:15:
9a:11:20:22:18:a4:fe:e5:1b:a3:47:13:88:20:5a:
3d:bd:03:1f:ee:e8:dc:f4:1e:1e:83:7f:18:d9:67:
b4:8e:57:ec:f0:29:2c:77:8f:88:c6:ef:f2:22:bc:
4e:a8:c2:83:ff:1f:33:9c:c4:e8:dd:6a:5f:34:08:
d9:87:21:6a:f2:5a:c6:bf:a2:2a:6e:29:05:40:e3:
2d:4f:f2:8c:1b:2b:ad:f2:1d:8e:cb:5e:68:a1:05:
0c:f6:7d:2a:f7:9d:28:cf:99:92:26:0e:25:ef:d6:
53:8e:af:ea:6d:e3:00:88:0c:2e:1e:cb:dd:bd:3f:
2d:c6:09:0c:51:ee:38:7c:28:c4:ef:25:4e:44:ea:
09:40:14:e7:9f:00:9a:05:6a:17:ae:1d:66:66:00:
bc:f6:19:fb:aa:2b:0e:9f:68:60:7e:bb:f6:86:ff:
6b:f1:15:6b:6f:21:d7:6c:1e:c4:ca:30:49:4f:50:
74:39:c2:6d:81:94:9d:b1:6b:07:a0:34:42:3d:83:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:31:15:F6:80:EF:F9:00:AB:FA:19:CD:45:34:3E:06:BE:C2:88
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9d:4e:0f:04:94:20:22:ae:f9:22:9f:34:46:23:96:dd:a2:
5d:50:ae:ca:e8:b5:90:5e:e7:9a:d2:2c:79:d0:08:a0:dd:fb:
dd:1d:9d:be:21:04:85:29:81:ab:8d:12:e3:a0:49:6d:dd:5c:
ab:82:e3:eb:39:97:cb:5d:5c:50:46:4a:c6:69:67:d5:e5:5f:
53:44:4e:c9:4b:d0:08:37:90:52:f1:e1:53:c3:49:28:31:db:
99:01:6e:d7:94:37:fb:6c:9d:e6:86:07:77:e4:71:95:5a:7c:
7a:31:e2:19:c6:ea:51:e2:64:ab:62:24:5e:47:91:8f:5d:29:
2d:5d:dd:87:ab:06:ad:23:95:b2:4a:79:81:67:7d:f4:35:a0:
bf:45:e2:71:a9:6e:2d:56:b3:92:fa:43:dc:a5:a8:e6:16:54:
6b:cb:39:d7:f6:9e:d2:58:ab:ce:ab:2e:e9:ad:78:89:c7:e2:
c8:bd:ab:64:6c:91:59:3c:a4:f9:e4:4e:12:ae:cd:9e:b0:9c:
9e:4f:99:3c:eb:e5:aa:2b:d8:7a:76:a3:59:d2:a4:a3:27:e9:
ff:ae:b8:84:ed:99:05:74:ac:ee:89:2f:eb:bb:79:22:1e:f6:
44:f9:c3:93:de:35:3b:c3:75:3d:53:cc:02:8a:f3:7c:c6:2e:
3f:1f:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:04 2024 by rpki-client on console-fra.rpki-client.org