Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: /Yl8njoPzB3ejResYFzxxlfciDX2PiaHF1qMbulYhWI=
Subject key identifier: E6:9D:58:80:75:C7:75:24:3F:A3:A1:5E:5B:E1:8C:AF:3E:40:1B:13
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 018F94CE9F174DA9E84B79D4383405D62794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1185
Signing time: Mon 20 May 2024 07:02:00 +0000
Manifest this update: Mon 20 May 2024 07:02:00 +0000
Manifest next update: Tue 21 May 2024 07:02:00 +0000
Files and hashes: 1: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: AC2TMl59ODKIcgrTzjCcj0MKz2nWggWmKoEgYgu2l+c=)
2: v6JJV5gqlEHjdSShRUsQlJamPJw.roa (hash: fXl9uTehmb1k4pE5taNpKk/nGnlKhEUq+Co960IkHsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:ce:9f:17:4d:a9:e8:4b:79:d4:38:34:05:d6:27:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: May 20 07:02:00 2024 GMT
Not After : May 21 07:02:00 2024 GMT
Subject: CN=e69d588075c775243fa3a15e5be18caf3e401b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:18:1d:db:39:bc:5d:a6:67:57:c0:c9:f8:
b0:e5:b6:1f:45:f5:8e:92:f0:ba:91:86:2e:9b:b2:
cf:7c:e2:a6:86:b2:27:6e:bd:05:75:52:95:91:e2:
cd:9f:c8:a9:4c:54:e9:34:f6:31:83:84:36:1c:46:
f5:88:40:01:16:9f:c3:c8:c1:99:97:78:8c:3b:f6:
d3:ed:ee:1c:13:74:a3:6d:65:72:c3:25:e2:ce:32:
f3:83:4a:00:77:2e:4f:60:4f:3b:96:fd:4d:33:e3:
b7:73:0e:2f:6e:bf:63:8b:6b:a7:ee:3d:77:9a:61:
b8:f8:6e:34:b0:1c:2a:27:a3:54:69:60:9f:77:b5:
01:2c:c9:c5:95:3c:6b:f9:79:7a:d3:e8:72:9c:54:
b7:c9:ff:1a:5f:42:09:90:3e:ed:b8:a5:dd:08:94:
b7:9e:df:d3:93:9e:3d:9a:d3:b7:7b:74:ff:cf:9d:
95:c1:bc:2f:ba:60:80:78:66:ff:86:a2:ce:bb:5c:
ba:e4:d7:dc:b7:2e:e6:a8:9b:2c:76:8b:2e:cb:5f:
38:6d:cc:bb:9e:64:5c:ac:d5:03:a5:cc:0b:cb:86:
26:24:81:89:23:05:da:e5:0c:0c:35:d2:43:d7:95:
fe:2f:b5:e1:c8:27:19:7b:b1:9d:2a:05:d6:37:5c:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:58:80:75:C7:75:24:3F:A3:A1:5E:5B:E1:8C:AF:3E:40:1B:13
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:23:9e:9f:d7:e0:3a:f5:ff:36:d1:31:72:f6:37:d2:88:
4a:44:17:11:4f:b0:6c:0d:96:46:59:82:ae:d0:25:9b:72:87:
5b:a6:d2:35:8d:90:61:f6:4d:a4:ac:e2:f2:f5:4a:63:cf:68:
6f:44:68:c4:f7:62:f6:95:39:f9:9e:86:b2:48:e5:ef:42:b0:
88:df:da:f7:92:8b:0f:00:84:46:b5:bd:82:bc:e2:fd:91:70:
2c:36:56:e3:58:dc:bd:f4:88:41:7c:a4:4f:68:cb:b0:0f:12:
b7:28:0b:21:bc:e0:b4:ed:1b:a1:c3:22:b6:6b:da:7c:ae:49:
50:03:a4:83:02:77:d3:f2:38:b2:59:92:d7:30:d3:1c:18:89:
94:9a:ac:b7:31:c6:c5:c8:d9:db:4e:a7:34:7f:5e:0f:83:84:
30:2f:9c:bd:71:c7:3b:3a:af:f2:0a:e2:9d:b9:2d:89:cb:03:
6a:c2:92:8e:fa:a1:7e:a5:7e:62:59:98:3b:25:51:90:d4:e8:
a1:d9:6e:34:40:cd:15:39:fb:56:b8:7a:56:88:3d:f6:fc:81:
3d:fc:03:ab:e8:ef:2e:34:24:6b:98:ab:be:46:89:44:b3:82:
8c:f1:78:f2:bc:d8:45:6c:6a:84:59:3c:53:50:67:4c:1f:a8:
d4:9a:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 07:56:35 2024 by rpki-client on console-ams.rpki-client.org