Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: fXOKeARHHXHzhn+dxN85QRSzEW8vE90H5MnIWcEJMRM=
Subject key identifier: 6D:B1:CC:59:97:D2:D8:4E:38:A0:E8:D2:A0:54:91:1B:19:6B:67:E1
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 018F885B49AB717765B14E3BF1B2BA7F05DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 4D
Signing time: Fri 17 May 2024 21:00:35 +0000
Manifest this update: Fri 17 May 2024 21:00:35 +0000
Manifest next update: Sat 18 May 2024 21:00:35 +0000
Files and hashes: 1: KLU1VH4Jh-n9IFmJ8n7LS39oL-k.roa (hash: UQl4lmXYeUmYKdtW7BuYhLz+Aq8UnXtrwx+I6E6jrlk=)
2: cb8nhkZY_9yAxbVBw5sRMfI8KMY.roa (hash: Ozqhxr+VZTfcUSaFQbBOYxrG70wwDQ1u1G3x50R7hX8=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: m5aWaxojwdHAAmyW+5w1L8SQK1iCeM31TmjlYxYKDFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:49:ab:71:77:65:b1:4e:3b:f1:b2:ba:7f:05:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: May 17 21:00:35 2024 GMT
Not After : May 18 21:00:35 2024 GMT
Subject: CN=6db1cc5997d2d84e38a0e8d2a054911b196b67e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:c9:3e:0f:b8:29:85:2c:a1:f6:69:48:b1:
a7:03:38:b8:64:4e:26:6d:2e:a8:2c:a7:a8:98:b3:
1e:95:1a:59:90:eb:bf:04:13:b0:78:6b:3b:b5:44:
b5:b5:85:e3:8d:22:54:3d:9f:1d:8f:07:6e:04:57:
63:28:46:e5:d5:d5:18:4c:81:53:e6:b2:54:b4:95:
53:67:14:08:58:f9:68:2c:24:89:08:05:59:a7:2d:
96:6d:60:85:05:0c:7f:22:b7:4c:1c:10:0f:79:b0:
28:69:3c:44:66:30:7d:4b:da:e3:2b:8d:ae:52:b0:
5a:32:e2:10:e5:59:36:16:4b:3a:bc:90:1a:10:cc:
12:92:46:ea:00:7b:93:7d:40:b5:7e:c2:db:2e:cd:
7d:12:1e:26:5a:d2:03:d8:54:20:04:12:f8:9b:77:
fa:b6:e9:df:38:fd:08:f5:cf:7b:2c:73:d3:9a:7c:
53:05:e3:55:da:2a:91:33:24:bf:8d:0c:8c:e1:64:
06:5e:cf:8f:37:5d:9e:30:3c:b5:4a:ad:51:0f:8a:
ec:d5:4b:5b:0d:23:3a:30:41:49:d0:70:66:81:6d:
ca:f6:cd:62:d9:80:63:69:9f:2a:1d:aa:fd:f6:36:
58:6a:18:25:9e:15:d5:4d:7c:53:22:32:11:18:8f:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:CC:59:97:D2:D8:4E:38:A0:E8:D2:A0:54:91:1B:19:6B:67:E1
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:00:7f:6d:04:1a:b9:68:29:77:27:3e:f0:da:6e:d9:eb:
9b:e1:db:30:69:62:20:0f:e5:d0:d7:c0:d4:19:84:53:ed:1c:
ba:b0:2b:3c:7e:3d:35:74:9f:69:48:3e:19:5d:1c:18:b5:47:
3a:b2:16:da:ab:c7:59:d3:4e:9f:7b:f6:bb:3b:82:6a:49:ba:
b0:b5:ac:b7:0c:23:8d:e3:71:72:d6:dc:e3:52:3a:17:6f:0e:
2e:ec:85:0d:2b:80:9d:d0:1f:bb:f4:24:d1:e3:35:28:8c:f4:
16:be:ae:42:f6:27:9e:d6:75:ed:dc:7f:04:ab:35:83:44:9c:
6b:69:ee:4b:fd:f7:de:87:d9:64:b5:b7:35:5a:c2:f9:05:7d:
3b:f3:59:65:88:11:62:7a:08:3b:c2:1b:f9:f9:b8:13:21:bd:
81:a7:ab:7d:5a:d8:33:c5:be:b4:33:a8:14:52:a8:f5:01:93:
31:c2:2f:ba:65:20:76:02:1e:38:04:01:cc:8f:a5:e2:2d:6e:
40:54:fc:0d:bc:d6:fc:d9:5a:32:3f:40:b9:52:f9:27:3f:d0:
3e:be:2c:36:3d:03:d6:87:04:aa:ea:a7:62:4b:51:ea:a3:50:
72:c5:b5:32:73:f3:c1:29:fa:72:53:25:35:f2:06:68:93:a9:
e7:52:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:38 2024 by rpki-client on console-fra.rpki-client.org