Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: j12fuueOage7od6GDSyrepLg36Tn/zKkNDH0FA+EXpg=
Subject key identifier: 70:CE:7F:9A:66:9D:F8:6F:06:CC:AE:33:2D:9C:3F:7A:70:DD:B0:39
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 018F874A95056925D81DD077DBCE90B14DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 16:02:42 +0000
Manifest this update: Fri 17 May 2024 16:02:42 +0000
Manifest next update: Sat 18 May 2024 16:02:42 +0000
Files and hashes: 1: EXusHSGDocvJGZbuyyvPTW9bMeA.roa (hash: qSBzx//jNV/mOG0QyWgrv+A3JGhkzKNaQtG3ectW64c=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: x3IzllUTOguea/pGixhA1WHar7MH8b1FSUgB5YtJv30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:95:05:69:25:d8:1d:d0:77:db:ce:90:b1:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: May 17 16:02:42 2024 GMT
Not After : May 18 16:02:42 2024 GMT
Subject: CN=70ce7f9a669df86f06ccae332d9c3f7a70ddb039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:f3:38:64:01:5d:91:02:0d:97:11:4c:5e:
68:11:7c:77:fd:41:6b:01:20:5d:d6:56:d4:1c:97:
11:fa:21:c5:83:28:03:78:cb:32:c0:e5:82:05:d0:
71:ee:79:2a:75:67:2a:a2:6f:f8:13:ec:ee:02:e0:
cb:d3:a0:6e:49:ae:27:79:3f:b4:27:0d:ab:46:65:
00:0a:2d:bd:e6:b9:76:38:30:23:d2:f1:29:07:33:
f4:f9:aa:da:79:ba:a7:64:95:6c:b6:79:6c:5e:3c:
95:53:83:3a:2b:cd:d0:e0:00:dd:f7:7b:d5:d7:f1:
5e:13:c4:38:6a:3c:48:1a:51:77:4c:dd:b2:82:b2:
74:16:51:98:51:b1:4a:bb:f2:11:c7:90:ee:34:e4:
e7:93:27:f1:f8:8c:bd:fb:93:12:76:cf:1d:04:27:
50:fc:9d:5b:06:71:29:a6:6a:9e:3a:65:11:8b:bd:
d4:7e:4b:c3:24:ae:d9:72:61:ab:f8:05:98:9f:fc:
0f:89:93:fb:86:fb:28:23:8a:73:a6:99:e4:63:32:
db:29:5a:bf:41:5d:a2:cf:a4:66:35:40:01:78:43:
58:d8:a3:4f:31:e4:87:18:b0:f8:09:45:cf:e0:14:
ae:a4:24:9e:a7:aa:3f:30:97:b4:7e:d1:75:7a:8a:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:7F:9A:66:9D:F8:6F:06:CC:AE:33:2D:9C:3F:7A:70:DD:B0:39
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:4d:ee:c5:28:d2:26:78:84:bc:c2:f4:3c:28:7f:62:6a:
e4:d1:ea:ae:79:62:22:28:03:1a:b0:d7:7b:dd:60:5c:e7:ef:
3b:84:d9:86:19:28:73:11:d2:12:6d:d2:57:5d:50:cf:c8:22:
78:92:f8:04:93:dd:a3:c5:a7:60:59:3b:2c:ed:03:62:8b:fc:
4d:93:6f:1f:9d:e3:7f:8e:ca:cc:f6:4a:4b:53:56:a6:c9:e3:
a8:5f:ae:ca:f9:15:cf:da:01:9e:f1:5b:88:56:31:70:51:5f:
df:0c:14:d9:5a:95:18:d2:6c:06:9f:3a:21:08:16:08:99:d8:
a2:78:c1:1f:7a:58:19:03:c2:87:e1:30:1d:72:fd:72:c3:6a:
2a:2d:9e:4c:5e:92:b5:58:8e:d7:a7:d3:1b:05:7e:dd:7c:a1:
b7:8a:bb:c1:cd:4c:3a:06:08:ce:75:cb:4f:24:62:ca:06:61:
ed:54:98:1d:6c:00:97:fe:9c:fd:ea:2a:eb:16:63:f8:cd:95:
f0:3a:70:ab:6a:7c:76:7e:ab:e3:3a:a1:8c:70:26:62:f3:f5:
ba:50:2d:88:70:7f:c8:47:1b:a8:be:e1:37:e4:50:7c:b7:ad:
e0:d1:33:32:a9:d7:77:ee:41:e1:11:be:a0:d5:7c:52:1f:79:
71:bf:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:57 2024 by rpki-client on console-ams.rpki-client.org