Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: HYFwBGDIAVR0r3OF9qqClM9ysoiSlkl+TzrLa0eINnI=
Subject key identifier: 5C:F8:76:CD:59:3F:C8:5F:EC:99:D5:58:0D:C2:72:3F:4D:E9:60:EB
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 018F4B6CB30DDFFD4A1D52A91076D53D38DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0BA7
Signing time: Mon 06 May 2024 01:02:45 +0000
Manifest this update: Mon 06 May 2024 01:02:45 +0000
Manifest next update: Tue 07 May 2024 01:02:45 +0000
Files and hashes: 1: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: nChaq1m4FNbFQWbK2jDfx3y3JzjHadpRKQu11nBt1y8=)
2: Q7IfWocra-mTc3cj3Yz03mwL_HQ.roa (hash: d6XrVutZZsMBkcJIr5SxkjADv/dlXFtXWPt/2zl7zgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:6c:b3:0d:df:fd:4a:1d:52:a9:10:76:d5:3d:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: May 6 01:02:45 2024 GMT
Not After : May 7 01:02:45 2024 GMT
Subject: CN=5cf876cd593fc85fec99d5580dc2723f4de960eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:86:f9:9a:c7:c1:d4:13:e5:62:87:41:e5:
9b:95:19:e5:c8:59:ff:3f:4d:b3:a7:fe:d4:22:8a:
91:56:cd:4c:8b:80:52:14:27:b2:63:e7:2f:ef:31:
88:08:64:7f:65:3a:a6:4b:24:3e:d3:18:80:af:33:
b5:9f:14:55:0e:86:81:cf:f3:f8:72:6d:cb:83:50:
73:21:70:5a:03:60:c8:de:b4:01:c2:33:82:63:f3:
41:55:ea:43:fb:f2:2a:58:de:d3:37:98:09:9e:ee:
86:4c:bb:14:83:09:c9:0c:76:76:21:14:2c:8c:91:
7a:12:d0:28:27:9a:1a:aa:57:da:75:88:70:46:a2:
bb:9f:73:cc:f0:28:29:b5:95:61:65:21:42:81:4c:
2f:fe:ed:19:53:df:23:97:f6:d1:49:c4:77:ad:95:
2e:4c:46:8f:4b:fc:8b:f2:10:72:8a:0e:fd:05:b0:
3c:d7:93:86:f0:8b:7a:7f:c8:b0:17:15:2f:a7:78:
ea:63:2e:2e:f8:6f:cf:f4:9c:eb:d2:1e:18:eb:c7:
89:62:ed:38:32:cd:78:bc:87:dc:66:f8:0e:27:1b:
13:f4:43:fb:c6:e0:f6:7d:99:1a:09:f6:18:f1:e0:
f6:ce:77:6c:f7:84:43:29:27:22:36:c0:1f:7a:cb:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:76:CD:59:3F:C8:5F:EC:99:D5:58:0D:C2:72:3F:4D:E9:60:EB
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:af:c8:ea:74:3a:2a:eb:bf:f2:02:57:3b:3a:94:f1:fd:
c6:64:13:ef:03:9c:f7:ec:66:6d:f5:7e:fc:72:13:f3:62:c1:
a8:4d:b3:cb:b8:38:77:52:a8:d1:7e:d7:34:a9:57:eb:4e:6d:
d5:52:4a:bc:12:e4:f2:82:4e:cf:29:c9:94:f4:fd:aa:08:41:
0b:16:ca:79:33:70:0f:2a:f6:df:da:ab:c9:df:5d:81:3e:da:
ac:45:70:66:0f:f5:e5:f2:88:b6:8a:e8:24:59:d3:2b:4d:44:
27:f3:8c:f4:d8:dc:e0:af:b6:78:3b:3d:33:07:b2:03:e0:7c:
12:7f:25:ab:0c:01:20:44:fc:86:b0:dc:eb:b6:f0:83:b3:83:
d0:2a:4d:a8:e5:5c:d9:f2:50:8d:41:91:90:50:40:4a:bd:29:
31:97:ed:58:70:9d:8a:0a:ad:68:a3:e6:46:a2:6e:3b:c3:16:
b5:78:63:6c:c2:78:18:83:7e:be:80:1e:7e:62:d4:78:9e:87:
26:c5:44:43:80:be:4b:78:85:b6:71:e1:ef:92:4e:c8:89:ba:
6c:56:5e:d7:46:df:e3:a6:1d:c4:48:86:73:a6:e7:a2:8f:ef:
e2:2f:67:5c:9b:37:11:f3:49:e0:2b:91:66:58:21:1a:c3:29:
2c:3f:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:13:22 2024 by rpki-client on console-ams.rpki-client.org