Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier: sxUcCrNXR+QLG4AGwaoZa1BZS72+3NIKMYGjLpvhOMs=
Subject key identifier: 1B:C3:57:38:B4:A6:8C:94:3C:29:BB:D8:8D:BA:51:C5:77:2E:6F:04
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial: 018F874A3E34F7536AE250F537DF116CDE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number: 1174
Signing time: Fri 17 May 2024 16:02:20 +0000
Manifest this update: Fri 17 May 2024 16:02:20 +0000
Manifest next update: Sat 18 May 2024 16:02:20 +0000
Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: R0FF403d2nF0PTxWQQI4qR3ByGVvfFT0ft8NVlRGYuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:3e:34:f7:53:6a:e2:50:f5:37:df:11:6c:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Validity
Not Before: May 17 16:02:20 2024 GMT
Not After : May 18 16:02:20 2024 GMT
Subject: CN=1bc35738b4a68c943c29bbd88dba51c5772e6f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:48:9e:fa:b6:d0:cc:d0:3b:2e:84:b5:74:
7b:0b:95:7f:fa:fb:df:e6:fa:71:22:13:9f:44:c6:
58:a6:7e:f1:b3:e8:d8:12:de:04:36:84:53:fb:7a:
bf:58:93:fd:ff:3a:50:01:6f:61:ec:d9:64:4d:95:
87:55:19:52:31:b8:d4:b4:4b:21:06:d2:24:c4:b3:
d5:ec:af:24:fd:e0:1c:cf:52:d1:70:97:e2:b0:2c:
32:fd:15:5a:12:16:e4:1d:02:e8:ac:8d:75:d4:11:
51:11:ca:17:dc:a4:e7:02:82:14:8a:53:4f:46:cd:
51:0f:c1:b9:95:8f:5c:29:ea:fe:5e:0e:4c:3a:cd:
56:f9:47:46:51:57:23:fb:9e:fa:88:4a:cc:bf:45:
77:72:3c:57:bf:bd:3b:ba:d2:f4:a5:86:43:18:2b:
94:a0:ad:78:5d:f6:7d:f8:53:e2:bb:0e:8c:1e:5b:
14:24:fb:22:84:57:fd:a6:d4:85:90:ae:77:dd:80:
6c:34:b5:7f:fa:60:df:41:09:8a:0f:a9:68:64:fe:
b1:d1:a6:8c:8e:a3:1e:22:df:4c:cc:69:21:a3:ff:
a4:9b:d4:af:d6:a7:d0:a9:98:04:33:79:5a:8d:8d:
4c:55:00:3c:04:cf:4d:ec:76:26:ba:cb:70:bd:db:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:57:38:B4:A6:8C:94:3C:29:BB:D8:8D:BA:51:C5:77:2E:6F:04
X509v3 Authority Key Identifier:
keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:bd:a0:91:31:31:c5:e0:2f:74:af:5c:dc:a6:a2:cf:94:
a0:16:23:38:be:0c:a9:91:28:d0:7a:73:98:d9:2c:72:b3:fc:
65:59:cd:d9:c8:3e:1c:d6:09:cf:2a:62:bc:71:39:82:4a:08:
ed:7f:f8:83:6e:89:5f:9f:ef:19:b4:ba:16:17:19:39:61:69:
0d:c7:9e:e2:b7:d8:31:fa:c6:d2:94:f1:a9:3b:e3:08:01:6a:
dc:83:bf:29:cc:bf:2b:00:c1:99:89:bf:43:6b:19:9f:d7:14:
10:ad:3c:3a:06:fd:cd:9c:81:7c:85:a2:74:a0:6f:39:51:70:
1d:cb:09:57:dd:38:9f:49:a4:f8:a8:47:21:d4:66:50:e0:91:
93:fc:97:45:95:74:2f:93:ac:2f:e1:32:78:f4:b6:2b:71:f2:
c3:91:58:a2:13:04:f6:c4:2e:24:66:58:43:6d:aa:ef:db:5e:
7d:ac:58:a7:92:c9:08:86:d1:ac:33:7f:6f:ee:a5:f3:17:3d:
11:2c:a3:61:f1:1a:10:4a:e5:75:47:bc:2e:02:e6:16:c2:82:
36:3c:70:b0:d4:76:0e:a5:c9:d0:bf:49:45:b4:58:3c:f6:4e:
cd:5e:92:92:ad:d6:8d:c1:e7:ed:69:72:55:72:fc:c2:4e:34:
b4:fb:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:07 2024 by rpki-client on console-fra.rpki-client.org