Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: /kiJlyo4CJU9QwSh1adeZrU39uEY0/65cDxdk90PtEM=
Subject key identifier: A5:95:28:20:0A:0F:81:7F:22:7B:D3:DF:1B:F0:DE:55:11:20:E4:60
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 018F877F30EFC596766BFE0315E192E5EBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 17:00:10 +0000
Manifest this update: Fri 17 May 2024 17:00:10 +0000
Manifest next update: Sat 18 May 2024 17:00:10 +0000
Files and hashes: 1: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: BH2d1prinL2ItSKCHdcFCy+TUwl5+ho9SWeOfVJ7lWs=)
2: yUYdHRbTOv0d1MetsWOgAV0H6VU.roa (hash: +EFZd5lQ4dkXRQFADEy9sJ6BqMDudBbS3CjpZl251rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:7f:30:ef:c5:96:76:6b:fe:03:15:e1:92:e5:eb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: May 17 17:00:10 2024 GMT
Not After : May 18 17:00:10 2024 GMT
Subject: CN=a59528200a0f817f227bd3df1bf0de551120e460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:17:e1:d8:78:83:3e:2f:c6:68:98:63:4f:
54:77:b6:4e:24:e8:ea:e1:41:81:f4:83:9e:e6:73:
44:43:3a:a0:70:42:63:bf:c1:44:89:e4:56:82:bc:
04:1f:98:8b:4c:a8:ad:1e:6a:11:d6:f9:4c:2b:43:
ee:62:67:03:6a:e8:a2:ee:0c:e0:84:c5:70:67:84:
85:26:38:93:82:bb:cd:ef:87:f9:6c:f3:86:c9:be:
22:7a:28:78:6d:6b:16:84:dd:01:6d:49:ef:fa:53:
ad:4b:91:d7:50:ab:2d:b8:12:96:40:0e:c0:77:51:
82:37:94:60:a0:2b:91:b2:8f:65:af:13:3d:3a:bd:
7e:41:2f:d2:0c:44:b1:cc:cb:22:09:0c:cf:e6:7b:
99:b2:e1:9f:2b:b0:0e:32:8e:cb:aa:67:5d:1c:dc:
3b:d2:bc:26:e8:d9:e9:24:d2:ac:3d:73:ce:7e:64:
8b:f3:c2:e3:03:16:eb:da:ef:77:1b:cf:5a:b4:82:
ff:85:af:de:58:ac:27:d9:78:19:c8:04:4f:41:c5:
64:2c:c0:33:a6:c1:d6:f4:cd:2c:17:0e:a4:7a:9d:
7f:51:97:78:21:8c:43:a3:de:9c:c2:e7:0f:e5:9c:
76:2f:4b:93:67:ba:06:a9:72:3e:e3:e5:7c:2c:57:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:28:20:0A:0F:81:7F:22:7B:D3:DF:1B:F0:DE:55:11:20:E4:60
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:89:de:c5:74:c0:43:6e:f4:80:4f:13:ea:29:e8:61:83:
7f:23:f5:24:22:b6:14:f6:5c:69:cc:0c:3d:b7:9e:73:33:89:
0f:28:71:dc:10:7d:ac:36:ae:ce:86:70:a9:d6:15:be:02:3c:
cc:80:bb:18:86:29:12:b6:2b:48:ef:32:16:c2:33:f0:bf:89:
fe:8f:b6:38:2a:5e:08:64:be:5b:ca:d4:7c:91:76:72:f8:42:
70:f0:13:71:4d:b2:09:d6:fd:ed:4e:ce:fe:d9:76:0c:0b:06:
a2:e4:a2:a4:1a:72:74:5a:b2:e9:02:dd:9b:fa:07:cd:5d:56:
d1:e7:ff:b5:89:53:24:d7:83:6a:b8:5f:60:a4:7e:13:3d:a0:
b1:d0:50:67:d4:13:8d:98:eb:1c:33:25:aa:81:1d:51:ab:32:
be:f2:d1:09:7e:44:4b:24:98:81:5b:de:6a:87:d8:cd:07:57:
6f:bc:1d:7b:26:12:a4:27:00:ff:72:dc:cf:d7:4b:dd:a4:ce:
6d:85:26:eb:2c:35:95:3c:f4:1e:23:e7:95:c1:12:b1:06:13:
5b:44:1b:a5:17:9e:9a:7f:2e:8d:22:43:44:f2:49:b9:22:d3:
6d:32:8b:95:eb:20:93:21:3c:86:d3:8a:b8:96:df:dc:9a:29:
f8:d6:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:26 2024 by rpki-client on console-ams.rpki-client.org