Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: NZNXzqQDIkGZ6hrIyVPsZ/ux4SOvY18yJ8xe+1qiYiY=
Subject key identifier: A1:25:CF:E7:F3:C5:B7:90:77:D2:B0:BA:75:8E:1F:D1:3E:A8:DD:C1
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 018F4D5C54E5DD5EE942C7E55162D1FC9EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 115A
Signing time: Mon 06 May 2024 10:04:07 +0000
Manifest this update: Mon 06 May 2024 10:04:07 +0000
Manifest next update: Tue 07 May 2024 10:04:07 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: ytzvCgmQVg/+kufWwpKGRe1OwlAEO46zFQlfFckwOfw=)
2: heohusEttl4_OnVAv1RZpDdyc3Y.roa (hash: D0LwisBEwtwUrAxZ9Ht/sbCXzPzX52fAdh1edI1RNX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:5c:54:e5:dd:5e:e9:42:c7:e5:51:62:d1:fc:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: May 6 10:04:07 2024 GMT
Not After : May 7 10:04:07 2024 GMT
Subject: CN=a125cfe7f3c5b79077d2b0ba758e1fd13ea8ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:27:34:b1:64:87:54:db:ee:0e:a0:94:88:
50:27:46:b3:8d:c1:e7:90:66:0e:99:b5:21:4e:5a:
0f:09:73:87:bc:fa:35:a8:74:c5:cf:7c:c6:88:fe:
d5:45:6f:f6:72:fd:a8:e7:b5:b0:69:e1:cd:25:15:
27:7f:5a:96:35:d4:2a:e9:ac:ff:33:79:7f:71:d2:
03:88:24:ed:55:40:e3:43:67:48:5d:26:a1:9b:e7:
17:3a:38:37:43:b5:bc:41:40:b3:be:c8:7c:3f:fb:
c1:b0:03:a3:8d:75:d6:e7:2c:58:53:15:6b:e5:39:
52:e6:85:fa:a0:76:ff:b2:14:28:a3:d1:a2:f3:f9:
9b:5f:5e:09:ff:f7:82:26:31:a4:47:e0:36:d3:59:
a4:7f:fb:18:52:b6:b1:27:4f:50:0c:8e:6f:95:01:
c5:d8:d8:dc:d4:1a:f1:b6:48:fd:a6:28:82:ce:2c:
42:d2:eb:70:71:41:42:f8:76:86:5d:14:f5:ed:7b:
44:09:fc:77:9a:27:41:3a:18:12:1e:49:6b:ce:27:
6a:f2:a3:07:a4:b9:5e:7f:73:a3:fd:34:6e:ca:ac:
c4:64:ca:b9:9b:de:e6:c9:80:79:23:ed:bf:f7:4f:
5e:79:cd:5e:38:95:1e:61:e3:52:02:af:ef:47:62:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:CF:E7:F3:C5:B7:90:77:D2:B0:BA:75:8E:1F:D1:3E:A8:DD:C1
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:85:bd:da:23:97:73:35:b1:34:c3:ad:bd:42:9e:b2:c3:
b9:c7:4f:dd:0a:15:40:fc:fa:91:b0:5d:55:79:64:01:19:38:
39:2a:08:69:cc:dd:ce:dc:ff:7f:15:76:b6:03:98:68:0d:d3:
82:e1:96:fd:85:17:b0:8a:94:1e:80:d8:e3:03:ba:a9:9c:2c:
de:85:92:b6:ce:09:de:5e:12:ea:f4:53:03:96:e2:04:39:0e:
9a:79:41:c5:62:7f:59:21:bb:f1:eb:70:3e:68:98:44:9e:92:
28:e2:07:25:bc:43:3b:a1:2f:42:c5:e0:68:49:fd:f8:4f:d6:
68:33:03:81:bc:73:1a:e4:5e:98:58:37:fe:1d:3e:21:c2:d5:
ba:1f:c0:a2:4a:e1:e2:e4:01:14:03:06:f0:bf:56:b5:62:1c:
57:fb:5e:85:18:ab:b9:82:61:dd:ec:0c:00:22:01:3b:41:35:
6d:0f:f5:2d:3d:75:a8:d6:b6:13:94:44:f6:e4:55:d1:e0:18:
bb:b3:41:17:fa:bd:3b:f0:ed:21:1a:4c:f0:db:08:ff:9b:d0:
c5:2f:1c:f1:da:aa:d7:23:14:80:4a:ed:b9:d8:39:0e:78:d3:
ff:58:cc:37:06:80:09:36:4f:c3:1b:d9:3c:f8:df:a5:30:f5:
13:65:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 16:10:13 2024 by rpki-client on console-fra.rpki-client.org