Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: Q15xPBg6xQKNCfMMD+nYq4eYNvi79FN6zAWN62PrYFo=
Subject key identifier: D3:83:66:54:DD:3F:90:54:F8:08:90:74:07:DE:26:0F:4A:B8:4C:82
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 018F8749DB6E60F3472906570BAF1A194D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 0F08
Signing time: Fri 17 May 2024 16:01:55 +0000
Manifest this update: Fri 17 May 2024 16:01:55 +0000
Manifest next update: Sat 18 May 2024 16:01:55 +0000
Files and hashes: 1: EUUz0Q_0qiqbQjY_ugNT1G14jBY.roa (hash: MW4r1h1cJ7JdYWFwTnU9W1w3viCsjmc+ZSRNohnkY7g=)
2: F_RjFZutWE8mLcCMRHCPW2Kuieg.roa (hash: YE6ZOpzaGl5H2qdu+A12HtC7aOPrceVmAHPY0nEGs7g=)
3: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: /ortYQ/nJD64PM3d4m3nIBNIHEjKv83w+JHhTu+UhqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:db:6e:60:f3:47:29:06:57:0b:af:1a:19:4d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: May 17 16:01:55 2024 GMT
Not After : May 18 16:01:55 2024 GMT
Subject: CN=d3836654dd3f9054f808907407de260f4ab84c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:81:89:4d:ef:af:66:14:99:8c:4f:cd:3d:
1a:e6:c9:14:15:45:81:b9:18:56:48:59:1c:d5:2c:
86:80:85:a8:22:8e:b9:4e:f8:b3:68:69:d3:86:ff:
f3:0c:54:fc:08:1e:2e:18:bc:9e:ac:17:43:b0:8f:
b1:06:17:6a:d4:03:0c:f0:ea:4b:0f:7a:22:4e:d8:
21:51:c2:82:75:ce:88:fa:af:12:c4:68:de:4a:d8:
e4:35:e8:cd:c1:cc:88:b3:01:12:1b:d4:80:cb:f2:
27:2d:aa:99:bb:fc:79:cb:1d:b9:6f:7f:68:ef:7a:
5f:d4:75:bd:91:0a:63:34:fc:76:34:d7:87:5c:e3:
a7:62:4e:bc:06:38:76:3b:8f:cf:f3:17:f5:fd:60:
d0:09:33:46:99:90:b8:12:33:3c:ba:a8:4a:cd:ec:
5c:e0:b9:63:f3:f7:1f:c0:23:1e:f9:e1:e2:da:19:
d5:a8:b1:d8:63:a2:79:d3:f2:37:8c:ff:e0:b6:11:
7a:f7:e3:2f:7c:17:d0:36:31:f2:45:3b:1a:1e:d9:
ec:7b:ae:d0:1c:c0:93:38:20:4c:d8:ab:e7:4c:70:
0e:0b:1f:b1:55:ef:bc:f4:cc:14:f4:71:29:ae:81:
e7:5d:9c:23:26:28:d9:3b:35:2e:fd:e0:ad:d6:6b:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:66:54:DD:3F:90:54:F8:08:90:74:07:DE:26:0F:4A:B8:4C:82
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:97:41:d5:62:e8:53:4b:f4:53:5a:a2:6a:68:36:a6:34:f6:
9f:0a:52:53:09:20:09:a5:14:c7:8e:12:72:ff:91:e0:f0:16:
43:ef:0d:60:d3:98:5d:cf:2c:1e:e3:ed:c6:1e:db:ea:32:b4:
04:9e:00:94:fb:1d:ab:f2:a4:38:6b:09:69:e4:5f:46:4f:17:
84:06:7d:b7:88:f1:c9:cd:e3:d8:47:d9:fa:01:67:88:f4:d5:
52:75:3c:bc:d9:2e:88:b4:c4:f3:7a:e2:56:6a:6e:c6:e4:fa:
ac:31:75:16:10:a8:cf:f3:08:2c:c8:75:dc:26:82:1a:1d:9c:
9b:59:e8:2e:71:be:f5:94:c3:0c:13:3c:94:87:d9:f2:dc:62:
4a:24:45:39:74:15:b9:32:57:8f:22:db:1f:6c:a8:fd:f1:36:
f8:84:dd:dd:e3:00:a1:12:d4:b3:23:63:36:b8:cb:d4:85:0b:
e1:b5:1b:ae:54:5c:e6:c2:18:59:52:e2:62:25:2d:ff:2f:3b:
07:f7:b7:34:4d:f7:14:57:b1:03:e9:c5:6f:0a:ed:26:b9:d6:
3e:08:ca:8d:a1:52:4e:93:ca:dc:94:81:28:3d:25:66:21:6b:
0f:08:dd:47:b3:90:5c:70:62:78:e2:91:2c:f5:6c:67:27:1d:
7e:4c:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:38 2024 by rpki-client on console-ams.rpki-client.org