Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: SQ8epI+yqnQ3v33LQ3soJQqKFv7gDTma8BoM2jDS9Q8=
Subject key identifier: FE:2B:83:A9:57:CF:0E:1F:A6:24:22:FF:CD:81:BB:BA:09:4B:AE:01
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 018F86A3B689FA8BB4528E2B9A74ABFD2AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 13:00:26 +0000
Manifest this update: Fri 17 May 2024 13:00:26 +0000
Manifest next update: Sat 18 May 2024 13:00:26 +0000
Files and hashes: 1: DOoBOLh68tL2yDoT20vD5zDwXoA.roa (hash: NXYsXc4E2fhe0PKpGyMFjJmvWJfftvvqg8yWpvOiBYQ=)
2: JSV8NLzx2W-u7zp0d28E4o-9wMA.roa (hash: xqqSykwKuhQYGT2lNzQXpzV06yGWHtwM+WcspZiDzjc=)
3: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: grnHhCY8NtnVyx6rI3xFaIY4NQ2RUMuN3kC/Y+advQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:b6:89:fa:8b:b4:52:8e:2b:9a:74:ab:fd:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: May 17 13:00:26 2024 GMT
Not After : May 18 13:00:26 2024 GMT
Subject: CN=fe2b83a957cf0e1fa62422ffcd81bbba094bae01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:60:ee:80:e1:aa:f2:6a:0a:de:74:71:2a:
18:3a:d0:97:ca:62:e8:f2:4a:fc:92:5b:0a:9a:df:
e2:8c:ba:64:00:df:da:27:ab:9b:43:2d:f1:8f:ac:
60:fe:f6:e0:4e:11:36:86:49:25:a9:1b:98:0b:50:
93:52:03:53:4f:7f:91:f5:6e:d6:55:1f:81:fc:10:
7c:98:81:08:28:8a:26:fd:7f:e8:56:69:df:b8:a6:
5e:1a:e7:f3:f6:a5:e0:c5:86:0b:6e:4f:10:62:7b:
d4:1a:0b:75:0b:15:5c:57:4b:b7:86:d5:5b:e4:f2:
f6:80:3c:5b:db:0f:98:d5:73:a2:83:b3:38:e1:d3:
da:c0:86:cf:b6:2c:23:45:ba:50:58:de:04:99:06:
ec:93:eb:e4:74:4b:c1:f0:be:a6:c3:df:38:f5:f4:
54:52:4c:5a:fa:1f:4f:09:da:5e:e0:8e:42:d6:55:
9d:99:e3:77:ca:26:8c:93:62:6e:c2:61:fe:cc:76:
92:ce:20:e9:9f:90:d2:e4:bb:25:e2:6e:7b:2a:cd:
c1:43:f0:c3:f9:59:80:86:f4:3d:34:77:e7:df:41:
7f:98:c7:82:54:9b:07:18:79:11:e1:26:a7:01:6f:
de:3a:e5:47:9a:d7:1f:2c:20:60:7a:54:1c:3a:2c:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:83:A9:57:CF:0E:1F:A6:24:22:FF:CD:81:BB:BA:09:4B:AE:01
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cf:9f:56:24:e2:ce:38:8b:01:09:e4:71:c7:a4:68:77:e7:
ad:8a:5c:bd:48:a1:95:61:83:34:be:ad:8c:e1:40:6b:0b:5e:
e5:9c:74:41:eb:cb:4f:74:18:83:b0:4f:d6:b8:1c:3f:2e:93:
1e:25:30:dd:fa:81:52:b4:dc:c5:09:1a:1f:3d:b3:46:b6:e9:
56:3f:ef:fc:82:93:7e:7b:87:9d:3e:86:e7:38:cd:53:07:22:
50:d3:36:a0:d3:a1:f2:7a:b2:56:b9:af:b2:27:8f:bc:0a:de:
42:1c:3f:6b:3d:9d:c6:de:be:b0:96:12:5d:b1:23:2c:9d:92:
df:f7:5d:ee:32:ed:6d:fc:dd:96:7f:ff:0d:90:c4:71:87:ec:
7a:32:ab:b8:59:5d:00:08:c9:9d:27:3f:41:e2:ba:aa:5d:01:
c8:f6:0a:43:f2:6b:a0:96:a5:a1:07:1a:93:9e:6d:63:7d:f8:
e3:96:e2:1f:81:28:fb:6b:37:1b:b6:20:05:57:e6:65:8e:2b:
55:71:9c:31:f1:05:55:af:fe:48:43:28:33:61:4b:70:94:1e:
ec:a1:5b:e7:63:be:a2:27:71:c3:1e:bb:08:50:d1:78:8c:1d:
15:2a:17:ee:c6:81:10:27:b0:af:2b:11:3b:bd:c6:d7:11:56:
62:fa:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:08 2024 by rpki-client on console-ams.rpki-client.org