Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: 4RpezNVokpS9GuBAAKKV+EUdo+ouBo2oXDqvyGIP5LM=
Subject key identifier: 62:35:0C:63:6B:71:2C:7D:93:31:57:76:EC:0F:04:E1:22:EA:AF:82
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 018F6306454419470D9A8BE2661CF412EF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 116D
Signing time: Fri 10 May 2024 15:01:46 +0000
Manifest this update: Fri 10 May 2024 15:01:46 +0000
Manifest next update: Sat 11 May 2024 15:01:46 +0000
Files and hashes: 1: 2q8unfbcBXnu5BDNThHJC53yKq0.roa (hash: SGCyYlFgla8cdB7WiSg/xK1H1lYhnxXEojCI4UHfK9o=)
2: AWP34c7fXfVYKLF8_Q1gagZKXm0.roa (hash: zaglWTI0weDehehuLyAsd2ekB4Z5cFyzORNDhHm4oes=)
3: PaRbaIjdaKVA9uLi4MJar8OwiNQ.roa (hash: L41OXi5z3AuLeFqVLiyAeQasGcQDuXQvIHYrOccLjLY=)
4: cULvj9sdgViYIbPS51XphWtZHG0.roa (hash: uDP/R/t4YX6+ugXC8PHCAb2yrmj8m1XADtF7jjrMEvA=)
5: jknt15rw120miyLAbd6G3QLL1wM.roa (hash: w4lnfnj2ypCVD8OwkcFQ3q+RWcDkNb9OXouDKPfT4+Y=)
6: lQ9jw6Mj-IVXuhO74eAiy5tWPs0.roa (hash: h4Md4thCjTNIlqqkcdQbpdYwOeYbaKfzklpF9Kr+FhU=)
7: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: x+vZi1l300Kc3LlAPy6xPncj7ASDoRed5PC8g4DCQc4=)
8: lwH5EK7Wtlxgk9oGKRVjmM4ln2s.roa (hash: 3EViSm9TFXOVQmoym7/2fz6sSWn1m5dYJVdgt7uV8tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:06:45:44:19:47:0d:9a:8b:e2:66:1c:f4:12:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: May 10 15:01:46 2024 GMT
Not After : May 11 15:01:46 2024 GMT
Subject: CN=62350c636b712c7d93315776ec0f04e122eaaf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:07:31:33:81:45:3e:d3:f1:a7:d8:e0:03:
09:73:39:40:0c:59:c5:1d:61:bb:2e:ed:08:1a:a8:
ae:83:5e:1a:e1:6c:97:ac:e8:60:ea:34:4b:9a:21:
92:c5:97:31:71:23:81:98:f2:ee:10:3e:ff:e1:4a:
c0:65:a3:71:e8:6d:52:bd:ef:8c:ce:78:4e:96:df:
7d:d9:0e:52:61:45:dd:2f:5b:fd:51:a1:6c:5a:1f:
a1:61:c8:47:c8:0f:e0:8a:3f:47:f0:89:ef:e7:18:
69:bf:8b:c0:a1:55:e8:1d:9f:da:5c:11:de:1d:33:
a1:c4:bf:60:e4:db:b6:2e:b4:63:94:a2:dc:22:03:
d3:54:a3:96:de:7c:bd:a6:ec:6b:c9:66:5d:ac:9d:
82:6b:0a:47:ff:3f:eb:12:ca:3f:a9:cd:3a:09:38:
ad:9b:51:b0:78:b3:2d:da:68:e2:12:98:d5:76:66:
e0:15:f6:2a:b3:82:3e:5f:77:03:27:c6:15:4f:fe:
75:80:ab:d9:ca:80:32:80:d3:14:61:c7:bb:06:1b:
64:af:ca:21:2f:3c:7f:a4:d6:62:cd:65:37:ca:d3:
c9:28:30:6f:67:1f:07:a0:ce:05:c5:dd:5b:82:c9:
55:60:df:19:78:0f:44:0b:ed:c9:77:76:bc:36:37:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:0C:63:6B:71:2C:7D:93:31:57:76:EC:0F:04:E1:22:EA:AF:82
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:f6:11:4d:91:4a:a5:38:ab:56:40:97:f3:ee:ef:58:76:
3d:88:e7:b2:0c:20:b0:87:3f:93:a4:ed:a8:b4:b1:67:20:0c:
99:0d:7f:ad:88:b7:a7:d8:62:7f:74:8c:5c:36:1e:77:6a:be:
65:ac:3b:0d:43:df:1f:1c:fb:a2:2b:e3:27:70:a6:c8:d2:47:
ea:45:61:e5:33:c1:0d:32:80:1b:c8:d6:3e:9e:4c:1a:49:5f:
49:81:88:83:5b:46:47:67:50:52:4e:d0:ac:98:46:54:56:7a:
68:ab:6f:4f:3c:75:be:9f:e9:91:60:ef:7e:44:97:29:bb:a0:
aa:4e:8f:f9:2f:71:28:68:aa:b0:ae:48:a5:2a:56:49:17:45:
6c:d9:36:80:fc:8d:c6:4b:14:89:c1:fa:ac:f7:44:bb:38:9f:
cd:a1:f3:86:86:e5:c4:20:1a:c7:d4:a6:57:95:cd:dc:9b:63:
50:9d:12:c3:8f:66:91:db:a4:b5:9e:aa:56:af:79:44:b8:a0:
da:a4:12:06:a4:f2:0a:cc:97:34:ea:36:ae:a7:f1:5c:db:13:
fe:08:67:2a:82:f1:d5:62:52:7a:b4:17:3a:d3:13:71:c5:51:
53:5c:13:f3:1f:59:77:47:0b:bd:99:b5:0e:62:5d:73:17:a8:
46:2a:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:43:03 2024 by rpki-client on console-fra.rpki-client.org