Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: yDjtgbc8w+AWHMlzWrklwcELL4udLnp+rMXz+kwfVJA=
Subject key identifier: B7:CB:8D:FD:1D:5D:F6:FA:E4:D2:98:A8:D8:36:99:66:86:88:D1:56
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 018F87B6D218ECB0FA7F69B996D53C980203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: AD
Signing time: Fri 17 May 2024 18:00:56 +0000
Manifest this update: Fri 17 May 2024 18:00:56 +0000
Manifest next update: Sat 18 May 2024 18:00:56 +0000
Files and hashes: 1: 1-t9Ky1EAz9uUOT6WokTwIqeu2w4.roa (hash: MnhDxBkvqJrYgtmeTD2zJm5ieQBzY3Dlv/SqzG7B6IU=)
2: VzuGi7whJ6UKGyhYyvQt4_qibQ8.roa (hash: n1pUuWmnA57NjbiV3saG2sQe9gnykEOJtuehy1NWF34=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: ENPM/FM9GIPajD1dJiB5+hvbp/EmjMeYnvvRt82Jjsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:d2:18:ec:b0:fa:7f:69:b9:96:d5:3c:98:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: May 17 18:00:56 2024 GMT
Not After : May 18 18:00:56 2024 GMT
Subject: CN=b7cb8dfd1d5df6fae4d298a8d83699668688d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:9f:f1:72:f4:be:a2:0e:1e:e1:96:f2:2f:
b4:a9:54:b8:00:a8:4b:89:b0:04:2b:08:16:f4:71:
a8:a3:b5:88:76:ff:23:e5:e8:d9:9d:3b:40:0c:66:
bb:13:bc:af:6b:a3:99:8b:53:67:f5:bb:e5:10:54:
bc:16:7c:77:32:52:e5:46:05:37:89:a5:ae:67:4a:
3f:cb:0a:f8:fe:11:ea:96:1b:08:99:41:af:68:4c:
1e:4b:f8:4d:0f:14:8f:0d:98:c0:2c:52:c9:9a:95:
6a:92:21:30:53:a1:14:56:b0:9e:5d:c3:31:cd:f4:
55:bf:fb:b2:54:7d:39:5d:34:34:62:6a:ea:5f:a2:
65:9a:ac:2b:6e:06:12:bf:8a:5c:d1:aa:e5:a2:66:
6b:7c:2d:e1:52:1f:57:e1:c6:dd:6b:32:88:be:c1:
10:6d:ee:10:f5:84:04:1d:b7:b0:3b:bd:35:9a:48:
61:d1:9a:af:70:29:5e:ef:99:23:33:54:ce:ee:f3:
bb:fd:de:a3:13:00:e5:4a:e6:ee:aa:f6:f1:b0:c4:
ab:fb:f6:40:0d:dc:59:17:49:62:45:9d:7f:9f:83:
84:0c:cc:a9:49:65:0e:1f:6e:2e:bc:94:5f:b0:65:
13:3b:5e:c9:b9:14:e7:ca:2e:e1:bc:d8:d8:ef:0e:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:8D:FD:1D:5D:F6:FA:E4:D2:98:A8:D8:36:99:66:86:88:D1:56
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:90:fd:cd:7b:89:46:d3:d5:80:b9:b6:a8:3a:f0:11:a2:
73:a0:80:7f:dd:f1:44:0f:e0:85:63:de:cb:1f:40:48:68:9b:
e3:97:36:0c:ad:ef:63:f9:b9:eb:44:7c:23:a6:6c:44:34:09:
f5:5e:b4:c7:27:ac:4a:b9:aa:b1:4f:dd:6e:c7:47:82:e4:0a:
ec:fd:63:56:6f:b2:68:93:ad:41:1e:1e:ca:dc:53:4e:fc:1f:
22:20:7d:fd:dc:14:4c:87:15:d1:b5:fd:bc:4b:ab:88:02:3b:
70:d3:b8:3d:33:35:ad:43:d3:51:16:40:ab:81:42:68:88:d5:
db:f0:71:1c:5b:80:e8:cf:27:74:73:21:fa:bf:7b:5d:9e:b3:
6e:82:3b:eb:7a:e8:94:e6:30:12:f5:76:7f:d6:50:bf:e8:4b:
55:24:9b:cc:7e:2d:c0:53:21:73:82:f9:1c:d7:44:32:3f:bf:
11:75:84:af:4d:ff:3e:5f:3c:02:70:97:3c:15:0a:fb:50:f9:
dc:87:3a:00:30:4a:9c:13:16:97:a6:59:18:b7:74:4f:ed:c8:
d7:79:c5:e5:7a:6f:66:2c:d1:3a:85:a6:a6:88:b9:1f:7e:06:
b9:f8:8c:77:59:25:97:49:1d:5d:17:bf:cc:45:54:96:4c:26:
7b:ed:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:25 2024 by rpki-client on console-ams.rpki-client.org