Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: /Preqodsducgi6dBpjLo0/RABVGAuDa+do7y56l9H9U=
Subject key identifier: A6:25:2E:14:49:39:49:F0:DB:1F:6D:88:CC:D1:86:E5:D9:1E:5E:91
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 018F86A42730F71642A5CF418DA183DB4AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 110A
Signing time: Fri 17 May 2024 13:00:55 +0000
Manifest this update: Fri 17 May 2024 13:00:55 +0000
Manifest next update: Sat 18 May 2024 13:00:55 +0000
Files and hashes: 1: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: gnNUf2gtxrf2EFuDk3hAIWKJ7nq4WE5+dZXNIUzo4DM=)
2: w0maLiytibCuE006Ei_urYqziCw.roa (hash: 1/15JI54wd3OZtFF+Rv+Npj8jebFpoagQ35e4Ghap+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a4:27:30:f7:16:42:a5:cf:41:8d:a1:83:db:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: May 17 13:00:55 2024 GMT
Not After : May 18 13:00:55 2024 GMT
Subject: CN=a6252e14493949f0db1f6d88ccd186e5d91e5e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:f9:0b:19:6a:51:a4:3d:6e:52:7d:4f:35:
59:b4:9a:9d:38:1e:bc:ef:0f:f7:42:5f:c6:1d:a8:
83:52:d9:aa:e6:01:5f:ff:9c:b2:63:a1:7d:75:b1:
91:4d:91:e8:58:6b:50:1c:de:60:9b:54:3e:c1:2f:
60:5a:80:bb:89:3f:81:5d:42:97:d0:8c:fc:78:13:
56:ec:95:32:ff:4c:63:67:60:ef:cc:ee:2a:7c:13:
cf:c4:40:9a:f3:1c:d7:ac:52:b5:a4:03:fa:d8:78:
0b:20:b1:ca:c0:6e:df:e4:f8:b5:9a:a8:70:11:19:
e2:af:0c:48:26:83:05:1e:ed:ab:e3:00:3f:6f:8a:
52:44:f2:a1:1b:c0:78:bb:6c:cf:f5:bd:11:cd:d5:
c3:37:db:40:74:a5:a5:bf:84:b0:0e:12:c5:31:df:
a4:96:93:72:b5:c0:b9:d4:07:a1:1d:d7:ee:d2:2f:
72:1f:9a:35:c1:7a:3d:8f:88:43:7f:21:5b:3b:5a:
3f:63:40:a3:b0:e8:e5:c6:46:42:9a:02:19:22:27:
55:29:cc:78:fc:2d:5c:ae:63:4f:2d:db:7f:7a:47:
bc:4b:f0:5e:06:b5:8e:af:96:14:c0:ab:8d:d1:99:
1e:f8:59:41:18:96:5b:25:25:af:87:8d:12:81:5c:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:25:2E:14:49:39:49:F0:DB:1F:6D:88:CC:D1:86:E5:D9:1E:5E:91
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:42:1e:b3:77:1a:f2:b9:0b:b9:c1:2a:c0:7f:43:03:6b:52:
20:ad:40:34:b0:fb:f6:9c:b2:6d:32:8f:79:c9:04:28:6d:9e:
30:59:e5:5d:48:b5:a3:56:5c:34:75:9c:62:88:b0:48:48:21:
a9:fb:46:06:1c:80:dc:39:07:6a:63:fd:99:b5:52:2b:73:bb:
1a:c7:03:d5:9e:17:1e:65:fe:5c:b8:2e:5a:1e:a9:c0:be:e2:
92:14:cc:56:f2:db:28:2c:2c:a9:70:9a:5b:7b:5d:92:ea:e5:
49:80:04:86:ee:a8:05:82:bb:8c:d5:fc:7f:18:e4:94:29:62:
8c:03:7f:1b:d2:88:05:57:31:f6:af:ca:43:bb:b5:21:bf:4e:
3d:93:d1:d5:18:ca:a1:04:6b:55:8c:2c:cf:bf:32:ff:f7:6e:
2e:6b:16:1a:4d:94:a3:e3:93:14:8e:d2:3f:04:26:4e:cc:be:
7b:db:92:97:83:2a:ae:06:f0:9e:91:61:22:52:52:43:70:a1:
3a:d7:ca:49:b6:aa:6c:32:af:f7:f7:e9:eb:5d:ea:cb:17:d1:
66:0a:fb:05:a6:29:b9:8a:54:b7:11:ab:69:10:e5:74:bf:02:
b6:12:2f:6b:fa:87:ec:ea:97:0b:62:d4:fe:9f:b9:11:63:ec:
83:a8:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:58 2024 by rpki-client on console-fra.rpki-client.org