Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: eDvI6LRqNd5lz6MOvIgCRN1rW6v2RsS7lr6mWsbKa/8=
Subject key identifier: 59:CB:6D:AE:F3:94:3F:43:BF:F1:60:DC:3B:83:14:06:B0:2D:2C:AD
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 018F423141672BA40F2CDFA84CB0400E171A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1152
Signing time: Sat 04 May 2024 06:01:15 +0000
Manifest this update: Sat 04 May 2024 06:01:15 +0000
Manifest next update: Sun 05 May 2024 06:01:15 +0000
Files and hashes: 1: 2m6VhdE18CMK2ixeyp6Gb7tQblo.roa (hash: fHj+RYPLJj1gt3d18nEI0g097dwGFrvObuE+qF2XqLg=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: 8Pbuo2XGl68EBY7fQOjXI2Lnoev9dMC3qoJYvUq4eUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:31:41:67:2b:a4:0f:2c:df:a8:4c:b0:40:0e:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: May 4 06:01:15 2024 GMT
Not After : May 5 06:01:15 2024 GMT
Subject: CN=59cb6daef3943f43bff160dc3b831406b02d2cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:73:7d:a2:73:86:e1:68:bb:6b:aa:68:8c:
7e:08:a9:c9:86:7e:3d:94:36:b5:c0:c7:c0:b6:aa:
17:ad:f4:ef:15:72:e1:45:73:4c:ae:13:30:d8:85:
64:93:30:dd:60:68:40:30:cc:56:5e:f2:8a:9b:a7:
ef:f7:b8:11:b1:69:4b:34:63:75:30:82:7c:fc:c9:
43:e6:99:5e:82:56:d3:7c:10:7e:08:b4:8c:6d:24:
d8:52:38:6d:61:bc:e0:d4:7a:68:18:76:cf:1d:da:
23:4f:06:97:ae:67:de:da:b1:0b:22:93:e2:87:50:
d8:f6:e0:45:8d:ab:54:c2:f3:6f:b7:45:88:1f:3e:
e0:af:29:05:7b:61:31:02:22:54:24:85:86:a0:7a:
12:61:85:00:6f:f7:17:8d:ff:f2:32:55:c5:ed:cf:
de:31:5a:36:ed:41:1a:ba:ac:cd:a2:1d:36:61:13:
d3:1b:51:d6:d9:0d:e5:4b:5f:1f:68:ae:ad:64:d3:
ea:c0:95:fb:bd:99:f8:6b:b1:63:c6:70:aa:13:72:
90:e9:5b:4b:26:5f:2c:d8:ed:41:86:cc:c6:68:84:
3f:60:9f:6c:5d:69:f0:fe:ef:f2:52:a7:e0:ad:99:
c0:93:0e:b8:f5:af:e2:6f:dc:bd:bb:da:08:c0:55:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:6D:AE:F3:94:3F:43:BF:F1:60:DC:3B:83:14:06:B0:2D:2C:AD
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:88:4f:c1:96:74:d8:6c:ab:13:1b:e5:95:f4:53:33:17:e6:
ec:9b:cb:38:22:64:fe:0d:a4:d2:68:b4:85:20:94:be:b7:98:
1f:26:f6:54:53:f2:ba:fb:30:5e:d2:0d:f8:e1:8c:f3:3a:5e:
29:57:01:aa:d9:90:d9:b1:5e:e8:3c:ad:0a:f3:52:3a:3d:0c:
da:24:43:79:fd:02:6a:bf:a0:97:1e:d7:f9:5e:93:f3:09:6d:
bf:f4:96:fc:31:f4:31:2d:7f:74:a3:a3:e8:0a:3e:5c:41:12:
0c:af:2a:fc:2f:3d:7f:12:76:15:7d:d5:ad:79:c7:7b:f5:76:
a1:a9:29:c0:55:c8:07:c5:9f:d9:94:47:c3:be:28:6f:e2:f0:
a5:8f:e3:7e:ba:70:e0:cd:4e:65:01:1b:d4:0d:cc:fa:f6:3a:
3c:05:ff:9c:40:08:39:86:b1:2c:55:26:50:a4:36:81:b9:53:
f5:ca:92:72:72:82:7f:26:68:a3:1f:de:0b:39:ee:01:f7:94:
1e:79:28:fa:51:43:f8:c5:c6:f9:9d:f8:72:fa:ed:3d:98:da:
b7:09:df:05:25:02:1a:c5:69:19:b2:ef:c6:03:80:5f:cc:52:
e5:6c:60:3b:20:1f:70:32:4f:cb:4e:16:cc:70:11:af:02:38:
6d:d5:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:04:57 2024 by rpki-client on console-fra.rpki-client.org