Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: BBo27kzQFcAfqoSUTsLqgqilfosqM/k2pmAd5WZ5K58=
Subject key identifier: D0:E9:87:5E:EB:A7:7B:F5:27:8B:7D:F3:47:E6:F6:E7:11:1C:BC:DD
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 018F96BD1D1C02F136508246400ADFB59D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1181
Signing time: Mon 20 May 2024 16:02:07 +0000
Manifest this update: Mon 20 May 2024 16:02:07 +0000
Manifest next update: Tue 21 May 2024 16:02:07 +0000
Files and hashes: 1: D8bQb2nYKG5Sd5kCe6eV6assOlo.roa (hash: 7+sBLBWRM4Q0bbmuRdCoGkYFeElsoXHpXQ4ESkakU/Q=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: /fgvJSB2V18MhqqXwpsBtxM7aLL2bzwZpMhW0V0vZHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bd:1d:1c:02:f1:36:50:82:46:40:0a:df:b5:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: May 20 16:02:07 2024 GMT
Not After : May 21 16:02:07 2024 GMT
Subject: CN=d0e9875eeba77bf5278b7df347e6f6e7111cbcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:43:b6:8e:09:5f:e8:6e:f8:aa:c8:5a:6d:
d1:0e:82:2d:50:22:28:f4:fe:2d:1e:62:ca:d2:43:
7c:bf:84:52:b6:21:6b:e1:79:18:3e:fb:fa:ee:ea:
28:3c:47:38:94:3e:6f:c3:a4:b8:ec:07:0e:ea:a8:
b5:81:ae:39:66:fb:9d:2b:d7:e4:38:01:bc:da:b5:
02:36:df:86:8e:90:8b:30:8d:5c:5a:ca:2d:2e:45:
68:87:e7:1a:f1:0c:fc:72:79:5c:6b:ee:90:4d:ba:
7a:c3:98:cd:0a:ca:da:9a:c0:9c:f9:2c:0d:66:6a:
5c:7c:e5:58:61:99:8a:68:ca:00:84:08:73:b0:45:
cb:41:dc:42:67:bc:9b:b5:d4:46:1d:11:76:99:4e:
7b:b7:45:53:a8:94:83:7b:25:99:f9:df:01:ba:14:
e0:07:3e:f4:6b:4f:1e:c7:30:ba:cc:c2:36:ed:23:
50:de:eb:49:bb:3d:3d:9b:3b:c8:3f:7f:4b:70:21:
db:b9:90:e2:3d:24:4f:9c:4f:e1:91:4b:a2:84:c4:
9c:9a:18:ca:dd:15:d4:fc:6d:78:c2:06:b4:66:88:
ab:e0:c7:19:a0:0c:80:5a:81:90:be:04:12:99:a0:
4b:c0:bb:65:d2:d1:38:80:04:47:c2:2b:3a:90:e9:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:87:5E:EB:A7:7B:F5:27:8B:7D:F3:47:E6:F6:E7:11:1C:BC:DD
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c1:97:2f:b1:68:7c:2f:3c:90:21:dc:34:67:52:7d:3f:9a:
db:5b:ba:06:7a:2f:8c:6b:93:44:2e:27:d4:06:1f:fe:d6:b6:
4e:a0:00:40:51:e5:80:87:42:3a:68:10:79:a1:be:73:b1:9d:
d0:51:22:ed:bc:7d:ce:c4:fd:da:8f:61:b0:72:1c:43:28:14:
ac:06:ff:58:fc:72:58:f5:4e:52:be:de:75:4d:ac:f2:92:7b:
af:10:df:43:50:cd:0c:1e:f3:be:99:98:8b:7a:44:47:bf:9d:
b4:9c:88:0b:f0:ce:a8:dc:c6:59:0e:6b:4d:83:e9:45:0b:d4:
8c:46:4b:f0:3b:90:8f:67:20:09:3f:7e:ee:f3:40:8e:1e:bf:
2d:fb:76:2a:20:ef:63:0b:3b:4b:e3:54:87:70:8d:80:e1:65:
38:70:e3:57:99:54:5e:72:11:bc:c8:ce:98:bd:0b:af:5b:9e:
3d:ab:40:35:50:68:2d:12:b8:84:79:4e:9c:ea:38:ad:28:02:
0c:66:c3:95:44:8b:9d:9b:d5:bf:81:9c:b6:13:aa:8c:45:42:
74:6c:c6:14:b2:e3:e9:c2:1a:93:93:3f:46:7d:68:0b:e7:9a:
f9:c4:67:c7:56:ce:ed:09:66:b9:a6:ed:2e:d8:20:e8:72:88:
1f:89:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:41:22 2024 by rpki-client on console-fra.rpki-client.org