Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: fhYumrVap5eXiJ2FdP4L1FP3QXzKFpEPHfEr+r4U/jE=
Subject key identifier: B3:FC:DB:C2:F2:84:34:C9:08:FD:1D:86:4A:C2:D2:BE:14:98:AB:77
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 018F8938A8BE61BBC2C25483DA5FFD3B4945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 0EBB
Signing time: Sat 18 May 2024 01:02:22 +0000
Manifest this update: Sat 18 May 2024 01:02:22 +0000
Manifest next update: Sun 19 May 2024 01:02:22 +0000
Files and hashes: 1: uKpFS-4fhVcrFNqgQcgXLZynBZM.roa (hash: Q29zEPfooOy53fmPuYQG1hYrq85p6S/Ie1eBrWNx+2Y=)
2: wItpFzp58lB6ATjYQhsdbTwF018.roa (hash: wo1qTpYI3PgXo32hPjYxjT/3jkU7vlVmSAXxCUh9ECg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: lqZQTepZSaqRJ9TtV8I2APIWeVEvI3LAnNPWjBsc53o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:38:a8:be:61:bb:c2:c2:54:83:da:5f:fd:3b:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: May 18 01:02:22 2024 GMT
Not After : May 19 01:02:22 2024 GMT
Subject: CN=b3fcdbc2f28434c908fd1d864ac2d2be1498ab77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:23:95:9e:52:27:ab:86:db:e7:cd:7f:53:
02:07:53:af:17:72:8c:19:b1:6c:49:69:38:aa:e8:
e1:43:e4:e3:b5:4d:16:d8:27:16:fa:12:05:3b:ac:
0c:56:72:c3:50:5e:22:bd:ef:4c:1c:cd:12:94:c5:
02:88:75:f3:43:d0:b3:0d:e2:30:23:4c:b9:83:e1:
7b:13:6e:f0:33:46:9a:f6:f0:a1:5d:fa:e4:9d:a2:
dd:c0:3a:69:c9:93:db:34:98:4c:da:77:af:2f:5b:
a1:2d:d4:26:ca:ed:21:4d:df:06:b8:6c:24:5b:93:
9d:29:99:1b:39:52:d9:01:5a:98:5f:4c:fc:9c:ff:
91:97:fb:fa:96:2c:43:07:05:73:59:16:05:07:66:
1d:ed:a4:62:fe:73:e5:13:06:09:e2:64:92:41:52:
81:2f:06:e1:7e:24:ca:e0:6f:5e:d0:10:a6:6c:17:
bf:34:d0:15:02:15:35:4a:97:f7:d0:0e:3e:9e:5d:
ba:9b:8c:b2:95:c2:40:e1:d7:99:2c:f5:06:51:9b:
b7:3b:62:8d:a7:70:25:e3:cd:69:fc:25:4a:63:a7:
b1:b4:b9:91:83:a6:02:ad:bb:fd:ad:ff:53:94:50:
eb:c8:0d:f6:53:cc:d5:8b:f4:50:d9:0b:51:fb:25:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:DB:C2:F2:84:34:C9:08:FD:1D:86:4A:C2:D2:BE:14:98:AB:77
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f1:37:9a:61:7f:e6:6b:6b:c7:83:3b:a6:2f:b5:22:82:51:
5a:70:01:20:8d:73:1c:7f:e5:9d:2a:3c:20:46:f3:ab:f8:bd:
a9:69:1e:57:8e:a3:a2:2c:8a:ed:80:1c:70:cb:fe:d0:90:d2:
38:6f:5d:ad:95:4e:bd:41:91:07:7d:5c:f1:4d:0d:93:c5:c2:
40:1e:72:f9:58:14:65:7c:1f:d7:cc:a3:f9:bb:73:1d:be:c7:
09:25:17:f5:9f:45:0a:f2:4d:aa:a8:14:8c:b6:63:a1:03:05:
59:e9:5e:88:ff:21:75:ef:6b:1b:33:b1:c2:7c:29:55:c0:f2:
b6:19:a3:6c:ba:88:2f:80:a0:e7:79:86:ea:dc:ad:f4:cf:bd:
a3:a3:7b:c7:4f:19:4b:46:d1:c1:f8:8d:ea:04:f9:25:0e:e0:
5d:5c:45:cd:57:39:8b:6e:1d:ba:92:6b:4d:29:8e:b4:67:02:
45:2c:4e:1a:46:41:23:18:91:47:2f:5d:56:b5:c6:b3:26:fd:
85:14:10:37:76:74:f9:30:a9:89:1c:c7:55:36:a6:74:51:72:
c8:51:ad:41:75:d9:a7:c5:66:9f:3e:8b:51:99:91:6c:48:07:
b7:3d:b7:cf:13:2b:00:21:d4:d4:33:ed:be:57:be:72:26:2b:
71:bc:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:53:28 2024 by rpki-client on console-ams.rpki-client.org