Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
File: LOcbH07qAVkkYSX8WumtUaRHks4.mft (raw, json)
Hash identifier: Rietep3jdRoTqr68o3X9c45d0jWISrzWGQVc5niIQJc=
Subject key identifier: 86:59:93:76:3D:69:C1:88:A0:94:33:BB:69:6A:14:26:79:C4:58:01
Authority key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Certificate issuer: /CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Certificate serial: 018F874A1D1C0690EACCBD9B57AF46225B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 16:02:12 +0000
Manifest this update: Fri 17 May 2024 16:02:12 +0000
Manifest next update: Sat 18 May 2024 16:02:12 +0000
Files and hashes: 1: LOcbH07qAVkkYSX8WumtUaRHks4.crl (hash: ScW4g605wfbbLYRDN2WpfciBenkRFptTeBK+ylDJols=)
2: NL56a-6PtPVgGAtVFT0HPZTEwWk.roa (hash: /YUFSHjgbsrlcVgoF83kyjiETSpiLsqw5p7M6tKdgWY=)
3: uAZdSzvzVJ0WsMBvdsB8t2vNi_U.roa (hash: TgHrTPsK3TvqfYQFfVP/bQ9n/PMkcRfH8P/rLi+KzcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:1d:1c:06:90:ea:cc:bd:9b:57:af:46:22:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Validity
Not Before: May 17 16:02:12 2024 GMT
Not After : May 18 16:02:12 2024 GMT
Subject: CN=865993763d69c188a09433bb696a142679c45801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:e6:3c:a2:8e:e0:b5:74:05:7a:0a:fd:e7:
03:12:1b:74:ac:60:cb:e4:9b:19:b8:73:07:d6:97:
54:b5:40:8f:c9:3b:93:93:84:c4:d4:09:f0:dc:9d:
6c:bd:2d:58:5a:75:4f:ed:9d:74:03:a4:26:e8:f0:
63:db:1a:48:16:a7:02:02:9f:6a:52:9d:de:51:ac:
ec:eb:12:3a:23:88:0b:17:da:5c:ed:be:36:4c:e7:
71:14:fe:2e:32:88:65:d2:64:ad:df:3d:ee:1c:bc:
50:a6:dc:58:f4:f9:65:43:3d:97:67:64:04:e1:f5:
6f:d2:fc:e1:dc:0e:78:f0:ee:00:eb:c7:71:77:38:
e5:39:a4:fd:68:fe:05:e1:e0:c8:f8:eb:b6:5d:0f:
b7:05:7a:79:d0:50:75:62:30:28:34:59:86:00:f6:
7d:0f:55:1c:93:a7:43:88:f6:50:eb:6b:35:4d:f2:
4d:36:8a:a7:9c:f4:c2:10:3f:e4:2c:58:3b:35:c2:
a5:52:6d:a6:bc:0d:f8:a1:9e:29:da:7f:7b:34:5e:
26:df:99:27:18:04:02:e6:b7:0c:ff:2a:a1:da:ad:
f5:e4:0f:5d:01:be:50:5e:74:b8:81:22:2d:ab:6e:
77:47:64:9a:b7:7f:f5:40:b4:16:eb:8d:69:fc:aa:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:93:76:3D:69:C1:88:A0:94:33:BB:69:6A:14:26:79:C4:58:01
X509v3 Authority Key Identifier:
keyid:2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:93:28:9c:45:8f:b4:49:ef:66:d0:d5:5e:e7:74:2d:0b:1d:
90:72:4a:51:57:5b:e6:ad:ac:fa:03:75:43:60:74:25:92:e2:
43:86:bb:b7:4e:cf:a8:47:82:0b:ba:7f:2e:b4:26:ed:b1:28:
41:77:3a:1b:c2:51:73:57:4b:37:bc:c9:a9:42:21:cc:85:e4:
dd:e9:ac:e6:aa:e8:e8:b4:f8:aa:5e:20:00:06:dd:a4:aa:6e:
16:a0:d7:0b:51:49:07:aa:aa:02:d3:e7:0c:9b:5b:37:c2:1d:
25:c5:c7:5f:3f:c5:c8:5d:bd:c5:38:c8:91:39:ee:9b:54:45:
7d:3e:15:bf:a0:c7:9e:11:05:e0:9a:33:ec:32:df:1b:a5:3e:
fb:11:e9:51:18:55:d3:49:f6:9d:66:8c:45:bc:66:6a:46:7f:
f0:b4:ce:77:26:0a:6f:9e:10:18:3a:23:56:db:59:dc:ea:85:
a9:fa:f9:83:e2:5d:6d:e7:00:fb:ed:fd:bf:75:67:da:b6:2c:
dd:6e:f8:6d:cf:eb:39:c8:4b:97:b1:75:43:a7:4a:f0:44:e0:
cc:ab:25:f7:ed:4c:43:23:0c:75:12:58:81:84:ce:05:6d:b2:
71:99:52:5a:61:0c:31:95:b6:57:01:16:e1:7f:5e:52:15:c2:
f3:83:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:43 2024 by rpki-client on console-ams.rpki-client.org