Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: zCeShsIm1ro3viLZvSPO5pRpdm9L2WFetHCWt5LgAu4=
Subject key identifier: E8:59:95:36:C5:B1:A1:E2:89:96:D2:F9:C8:88:4B:5D:F6:6C:1E:6D
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 018F87ED8EF758754325F78F4B54215AC6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 01F7
Signing time: Fri 17 May 2024 19:00:43 +0000
Manifest this update: Fri 17 May 2024 19:00:43 +0000
Manifest next update: Sat 18 May 2024 19:00:43 +0000
Files and hashes: 1: Y9nq5okrDHLXV50U6K0JgWZfMN4.roa (hash: mPCGc3WGzQ/iKdhjInhr+pXjFmwlFTej6bt875o2qb0=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: EpqMIJRCy99QqiwEumOBcfbY76grdUx9MMCIU/TaCug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:8e:f7:58:75:43:25:f7:8f:4b:54:21:5a:c6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: May 17 19:00:43 2024 GMT
Not After : May 18 19:00:43 2024 GMT
Subject: CN=e8599536c5b1a1e28996d2f9c8884b5df66c1e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:eb:e8:9e:e5:5c:a1:3f:a6:c0:3c:3b:a3:
de:a9:cc:c2:e0:f9:9d:f2:6a:9f:39:7c:41:4c:6f:
7c:db:1e:f8:28:f2:43:0c:e6:15:84:ca:72:72:d5:
99:d1:5e:4a:9b:6a:f1:7a:18:34:8e:bb:89:55:0d:
07:0b:e9:85:7a:34:e8:b1:a7:52:bd:5a:ef:fa:6c:
4f:88:cb:94:e5:89:b3:72:46:f8:5e:a4:3a:d2:d8:
e6:b1:fe:33:b6:b7:c7:89:8b:9e:b5:14:36:1d:cb:
07:ff:a0:50:40:0f:d4:bc:4f:74:57:27:f4:15:94:
ce:47:6a:7b:41:e2:78:00:3b:71:11:41:be:e4:6b:
48:1b:11:9b:b3:1f:ee:a8:f9:de:c2:29:79:16:80:
37:d5:cb:ef:39:88:f5:bb:b8:8b:5d:a2:7d:be:d0:
27:dc:cd:68:72:59:e1:7b:fa:f6:91:cc:1d:ed:27:
b7:bd:68:57:4d:ad:ae:06:46:31:f1:65:50:3c:dc:
0e:f9:79:2d:29:fa:bf:b2:2e:64:3d:5b:ac:8f:f9:
f0:23:80:a9:72:32:36:83:c4:8c:5c:0d:1d:58:a7:
de:88:84:08:22:73:34:95:81:88:57:49:05:43:4c:
fa:8d:b3:ea:6b:9b:22:de:81:3a:9b:77:73:7a:46:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:95:36:C5:B1:A1:E2:89:96:D2:F9:C8:88:4B:5D:F6:6C:1E:6D
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:1d:32:47:2f:43:5a:7e:cf:70:1a:c2:cf:2f:7d:e6:68:
a0:ae:34:0f:11:f4:a7:d0:ef:ca:01:c8:44:f6:3e:71:a4:b1:
c4:cb:35:bb:a2:d5:fe:8e:70:e7:85:2f:30:81:9c:cc:75:e9:
30:4a:9b:85:24:e1:a9:7f:ea:ea:32:b9:3b:97:8a:f7:62:8f:
eb:91:92:a8:51:d7:fb:df:18:75:57:46:06:0a:9e:30:34:af:
37:37:37:e3:14:10:74:dc:f8:27:0d:a9:79:b3:27:76:dc:85:
e0:21:96:0b:f3:77:77:ba:b3:e2:17:f5:c5:1f:00:e5:2a:00:
e8:b9:07:de:d3:46:92:a1:d4:8c:7f:b8:a5:42:4d:3f:7e:c5:
e0:75:d7:91:5e:5b:d7:21:65:d5:20:8f:13:a1:b6:83:51:50:
37:6a:d6:48:d8:dd:01:45:3d:78:8a:db:ca:01:e3:81:ff:fa:
a1:42:a6:13:c8:c8:9e:f0:e6:e2:e5:92:36:0a:64:b2:93:53:
bb:4c:e7:c3:93:b1:82:07:de:5d:1f:99:f5:c1:b9:97:c2:ad:
33:ae:23:1b:16:a8:da:3d:4d:5f:a7:67:91:45:01:d5:64:2d:
60:0c:05:63:6c:36:ba:06:5b:1c:d1:ce:f5:f7:62:5a:82:21:
4d:45:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:49 2024 by rpki-client on console-fra.rpki-client.org