Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: 5MlgkKBAzMOLZlV0+m9c/YGxjCOSl2s1C45P+VYMEQk=
Subject key identifier: 14:48:2A:98:C7:95:C1:2A:05:8A:0B:08:B7:11:83:DB:F8:DA:FD:94
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 018F5137B5A745BF135364DA6F0E979E14DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0643
Signing time: Tue 07 May 2024 04:02:36 +0000
Manifest this update: Tue 07 May 2024 04:02:36 +0000
Manifest next update: Wed 08 May 2024 04:02:36 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: HzEXtTRksRXm9ZJ7KjJjK3Y2kUCvjQ32EHfipn8/C1c=)
2: b6qHYzbvVZeCCCJgAdXnisYyJfM.roa (hash: lcAO5nD73q1zQ1rsHwQC3Q/wYO/i2/V+ywEjCT9u2hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:37:b5:a7:45:bf:13:53:64:da:6f:0e:97:9e:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: May 7 04:02:36 2024 GMT
Not After : May 8 04:02:36 2024 GMT
Subject: CN=14482a98c795c12a058a0b08b71183dbf8dafd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:2e:8d:20:70:c4:2e:50:30:4a:51:92:ad:
e0:40:a5:22:00:c2:65:b8:4f:03:5b:3e:cf:ef:53:
46:57:ed:12:59:b0:15:65:7a:15:19:70:02:6c:8b:
97:27:22:ad:60:5d:31:ab:c2:f7:77:5a:7e:fa:a9:
26:cd:22:0f:d2:5d:0e:b9:7a:0a:5c:5e:c0:b2:a3:
7d:43:44:6d:5b:d9:a0:69:1e:0d:50:9f:d3:51:56:
cf:55:97:69:a5:45:ad:40:71:1d:75:1d:f1:da:d8:
92:46:19:5c:c5:92:7f:a2:84:ad:54:2a:a3:28:ae:
d4:c1:e9:58:96:89:b5:9a:25:3f:7f:1b:e9:61:d5:
76:61:28:ca:74:2d:ca:5a:ad:99:b0:6a:63:9a:71:
88:90:b8:93:ed:db:93:b7:29:bd:c0:35:e9:27:10:
a5:df:25:cd:2c:68:c4:e8:67:cf:7b:52:bc:bf:1a:
df:79:4f:77:9c:40:c1:5a:4d:26:c2:72:72:c1:cb:
7c:8f:45:6b:c4:e0:a0:4a:d6:ae:41:22:66:8a:e0:
b3:b2:a5:ab:38:2c:11:ba:cb:22:a4:5f:e2:04:9c:
8e:06:84:5b:85:0f:91:54:5a:58:96:6a:ac:00:13:
13:4d:43:92:fa:41:3f:c5:30:60:96:50:6c:7a:7f:
8c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:2A:98:C7:95:C1:2A:05:8A:0B:08:B7:11:83:DB:F8:DA:FD:94
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:b0:7c:c9:27:88:27:ff:55:f2:04:92:c9:64:81:36:f0:
d6:d7:95:72:51:03:58:9f:db:8c:82:67:cb:0f:9b:51:00:9d:
c8:ce:fb:c7:48:61:17:38:1d:69:da:df:f5:87:72:11:d6:6f:
69:90:01:25:96:04:57:ee:35:27:cb:7b:53:a7:8e:09:3f:a7:
43:a1:a7:60:88:e3:38:d8:59:ff:bb:68:51:33:33:a7:e0:c0:
4d:7f:2e:d5:4d:4c:a2:f7:7d:5a:2c:28:81:be:93:a2:72:02:
50:57:a6:1c:ba:bb:e6:d2:6a:8b:74:b4:00:a5:49:d8:a5:1e:
df:6b:d9:e7:2e:9c:81:69:7b:46:85:76:85:ae:c3:fe:46:84:
70:92:34:78:1e:b6:95:88:18:4a:91:d3:76:21:cc:20:52:ff:
4e:f9:d3:b4:8f:3c:f4:d5:71:3c:7e:a6:8a:1b:dd:89:81:6f:
b8:95:a4:ca:57:43:b2:0f:fd:12:eb:03:8d:4f:31:0d:49:84:
93:af:b6:32:87:16:46:69:9c:e8:21:f1:87:f0:5d:7a:41:dd:
03:f8:c1:3c:a2:a8:b0:1c:bd:45:65:48:b6:ec:b5:a2:80:b3:
59:53:ec:73:e8:5e:40:e1:84:e0:d1:da:91:80:80:39:0e:d3:
7a:b4:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:45:49 2024 by rpki-client on console-ams.rpki-client.org