Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: 3Z6T4fq1TJE1qr3U9vyOpyYhmiDGsbbaUPIsZCXpJ30=
Subject key identifier: C4:47:21:62:31:49:14:B1:33:8B:EB:A8:54:30:0D:70:DE:64:EE:46
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 018F866CAE12117EFBB64EF8756C5A55E531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 0C07
Signing time: Fri 17 May 2024 12:00:20 +0000
Manifest this update: Fri 17 May 2024 12:00:20 +0000
Manifest next update: Sat 18 May 2024 12:00:20 +0000
Files and hashes: 1: 9KjZ-5RgKE0vxy6M_yDrIe1GkkU.roa (hash: Az992AOdMucWOt+iDpUiOOIJVVAsvyBmBVrdONcFKHw=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: xYpblvOywTIcxJRDMqmW93sljm9iIIUhZ12pcQhrDnY=)
3: nRxdZ3hUPQsbhknALn8yGU8ux3k.roa (hash: z/sOikMMBP87fKfp3673EObuFch8d8RPN4bAcVGR464=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:ae:12:11:7e:fb:b6:4e:f8:75:6c:5a:55:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: May 17 12:00:20 2024 GMT
Not After : May 18 12:00:20 2024 GMT
Subject: CN=c4472162314914b1338beba854300d70de64ee46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:3d:10:b1:76:fb:27:79:fd:8c:18:6d:dc:
dc:3b:af:38:20:e6:c6:20:a8:90:cc:b3:61:db:be:
bb:6a:45:a8:b4:8f:60:f7:23:9d:c6:d3:22:f2:e9:
f3:44:a1:cb:71:90:77:85:ac:bf:6f:e3:ef:9c:66:
b3:44:56:14:7a:6c:76:58:e8:d1:fc:66:0e:3b:28:
93:db:b6:e2:56:88:29:22:47:d5:8f:6a:d1:4e:a4:
fa:60:4f:c2:d0:d8:c8:af:d1:d5:06:c0:4d:16:c7:
71:dd:78:2c:5b:f8:f1:9c:e6:91:28:8d:33:32:20:
36:15:b3:ed:50:19:6c:ec:be:e6:5f:6c:42:78:85:
87:67:da:16:9c:e3:27:31:69:4e:27:60:3a:59:95:
57:b8:fc:62:e4:37:28:76:1a:8b:9d:2a:d1:e2:f9:
1a:60:39:35:85:0a:f2:76:27:30:62:6d:93:8d:b2:
b0:ac:1a:86:4c:e7:67:c5:9f:70:58:94:a7:a7:1e:
a7:64:f2:db:f1:b7:89:7a:4b:7c:d7:56:fd:a3:d4:
57:f1:eb:0a:53:ae:41:12:c0:f6:ab:13:13:57:ef:
05:1b:54:56:46:b1:79:b1:01:65:8e:1e:69:ba:4a:
a4:b5:5e:87:f5:15:f5:48:17:7b:a9:e7:0b:dc:86:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:21:62:31:49:14:B1:33:8B:EB:A8:54:30:0D:70:DE:64:EE:46
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:a3:08:b9:f7:db:d3:96:50:9f:c8:dc:d1:c0:09:20:cc:
a3:5f:ab:c1:11:19:a6:16:44:5e:fe:35:32:cb:43:42:6f:7b:
df:18:2e:b1:9d:9c:e3:2b:e2:24:d9:a0:b3:42:2b:47:eb:f8:
d3:60:ed:7d:14:8e:c9:da:f9:36:71:07:f2:10:61:9d:50:94:
13:79:cb:97:3a:db:88:5d:82:d8:10:b2:14:a2:d0:d4:64:3a:
73:5b:93:fd:b8:8f:94:32:0c:f3:66:a0:5b:ec:40:65:ca:24:
bf:93:65:bb:a7:e4:b8:e4:ef:b5:9d:41:7d:09:b6:f5:74:a8:
8d:02:a7:9e:94:4d:30:26:c4:49:11:32:d7:bf:d2:67:02:42:
b3:05:d2:bf:98:22:bd:0f:52:d0:64:49:a6:3f:0a:64:9f:d5:
30:56:9f:c3:b9:05:8e:c0:6e:62:c3:c1:29:08:ee:11:c8:62:
71:86:0f:c7:9e:e9:2b:5f:c4:3d:de:2b:3f:ac:16:37:ab:ce:
61:33:bb:23:25:f1:f8:d7:2c:e8:52:e4:19:2f:79:37:6b:b0:
3a:72:db:0d:67:a0:21:ab:65:4d:67:ff:2b:bf:a6:ac:05:1d:
95:57:9a:e3:55:b9:d9:c2:c4:8d:21:05:df:8f:ef:87:42:a1:
92:e6:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:39 2024 by rpki-client on console-fra.rpki-client.org