Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: FD0aKvesS3eGfYRECV9KiFrxmCpHlEUyQDAY/k6xJKg=
Subject key identifier: 4E:90:0A:C3:95:1D:36:D8:8B:BF:F8:01:D4:98:87:B7:1F:69:F4:07
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 018F88922010F92F1FD6E39BC7978F1FA1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1186
Signing time: Fri 17 May 2024 22:00:28 +0000
Manifest this update: Fri 17 May 2024 22:00:28 +0000
Manifest next update: Sat 18 May 2024 22:00:28 +0000
Files and hashes: 1: 64XGMEw1Xf9IhHO70OMP_ul0zlo.roa (hash: uoV8mMzj02yHDFP4Tmg3RKhrAfwvwq1gWNvlGlGrzkA=)
2: r121nLtbhT6ScYlmucIyBj2DlxA.roa (hash: qUf5miw9mXU73eSXjehohUJK4702gaRVjwq5ud3Kxjw=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: pLi03Z11djQLelnlkgqePSVqm1ZbZYCZkKeSjRe6EC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:20:10:f9:2f:1f:d6:e3:9b:c7:97:8f:1f:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: May 17 22:00:28 2024 GMT
Not After : May 18 22:00:28 2024 GMT
Subject: CN=4e900ac3951d36d88bbff801d49887b71f69f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:5c:aa:57:95:bb:69:d4:08:cb:31:4e:bc:
cb:f6:fb:46:ef:b8:59:e1:06:44:31:5c:90:5d:9d:
ce:f0:06:e6:c9:38:1b:ef:9d:b6:73:0c:56:16:eb:
e4:b9:21:19:6f:0b:ff:f8:8f:29:25:56:2b:e0:59:
4e:5a:47:94:18:45:1b:d1:dc:13:eb:47:f7:df:7f:
d1:53:31:ee:c7:6b:c7:d9:ea:e8:4f:3d:35:4a:65:
c2:97:ed:1e:12:4b:a8:5e:6f:c9:48:82:f8:1f:e6:
24:5e:03:8b:06:ff:0a:3c:5c:2d:db:78:ab:91:c0:
e2:b0:da:9b:a9:a5:f5:00:68:ad:dc:35:0b:ff:1c:
3d:5a:6d:47:e2:c6:f3:71:af:bb:a5:4f:8a:bb:cf:
17:b1:49:08:69:6c:98:eb:04:c7:bc:3a:a1:8a:62:
a2:fb:21:6f:f1:70:53:43:21:5f:9e:9f:2d:2d:7c:
b3:ed:f1:40:70:c1:5c:ee:e5:e7:ba:94:e0:70:87:
92:0f:b8:14:11:80:d1:93:94:00:db:37:80:99:20:
ee:c2:9f:3c:a4:be:f2:b8:aa:d9:95:6f:4e:ca:87:
40:1f:aa:83:37:ba:a2:12:85:25:a2:50:0d:a6:82:
6c:7f:46:7c:65:bb:54:b3:31:bb:b4:66:d6:f3:0c:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:0A:C3:95:1D:36:D8:8B:BF:F8:01:D4:98:87:B7:1F:69:F4:07
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:10:97:8a:10:86:66:a6:55:42:0b:93:8d:b7:5b:85:e7:
fa:aa:0e:5e:d6:9b:f3:f9:47:03:02:05:f5:a8:ca:56:da:c4:
f9:60:91:e7:6d:9d:46:34:f5:62:c7:7f:08:e2:8b:69:bb:20:
08:b2:71:38:d2:e2:d1:ec:11:35:57:e0:99:72:a7:14:31:eb:
20:05:de:95:76:a9:19:3e:2a:df:d2:1e:67:41:92:6f:01:57:
24:dc:bf:d3:5a:cb:11:38:76:58:f9:7e:f6:90:4f:1e:9d:d1:
e3:d4:c7:82:02:46:c5:ea:f6:a1:e4:3f:56:5e:2c:a6:fa:6e:
9a:a0:22:8a:b7:3b:19:3d:ae:89:6a:9d:c7:f6:b8:64:d5:79:
73:3b:81:ed:83:c5:5a:6b:f6:05:12:f9:42:42:5d:93:3b:2b:
69:54:b0:bd:0a:91:dc:47:72:a8:32:82:a4:53:dc:d3:57:24:
8b:b2:f0:70:c3:af:57:9e:92:19:af:aa:16:64:0a:ee:60:fe:
21:c7:7c:a6:39:bd:5d:07:94:8a:c4:ec:8a:28:24:28:14:d0:
fd:f0:ea:ab:46:d6:7e:bb:59:1f:78:dd:e3:ef:a1:d1:93:d8:
58:a3:59:d3:f2:7d:12:fc:fd:bb:2c:45:b2:ca:8b:35:85:b2:
79:26:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:57:52 2024 by rpki-client on console-fra.rpki-client.org