Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: 7xaoyUJWogHDGRJY4uIMroA0xh23yqytbxxd2+cnwWk=
Subject key identifier: 68:A2:9C:CB:D6:32:63:DE:6E:40:9D:E1:98:0D:4A:C5:28:BD:FE:74
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 018F400BB55FD3DD8C494042D1CD7588E687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 05AE
Signing time: Fri 03 May 2024 20:01:00 +0000
Manifest this update: Fri 03 May 2024 20:01:00 +0000
Manifest next update: Sat 04 May 2024 20:01:00 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: BzpBL1BVWis/8VivvhVRTZtEXNDo/r6ZvXD0u2PzjfY=)
2: kveyG8465IkF1RIRaNIgG9fiDYQ.roa (hash: 3GEc7JkUqJKgslAIfKDsc7dvk0fDWd3WzYbozsf4/tE=)
3: mChy1Q-yGYKAuBtCpwG2BrYpKK0.roa (hash: opJqXCswnM8gk5M6btYT/annRn1VRJjytY8D+xBfiUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:0b:b5:5f:d3:dd:8c:49:40:42:d1:cd:75:88:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: May 3 20:01:00 2024 GMT
Not After : May 4 20:01:00 2024 GMT
Subject: CN=68a29ccbd63263de6e409de1980d4ac528bdfe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:ff:9d:29:28:6f:23:b5:6a:f7:7a:9a:44:
45:45:21:a0:1b:53:d2:56:7f:bc:7b:15:58:20:bd:
10:55:55:7d:44:2d:6d:cf:a9:db:c3:06:42:c4:55:
af:35:a0:0a:e6:a9:72:0a:1f:cb:e3:04:31:d1:79:
1b:28:29:5f:b1:7c:dc:c1:cf:f1:25:29:f0:87:07:
25:ec:71:39:3f:d7:98:e0:83:a8:0b:be:c3:49:73:
48:69:4f:3c:5c:86:0a:bb:03:e8:73:41:9a:8f:ab:
6e:08:5d:e5:8d:96:a1:6d:8b:29:79:a2:44:66:54:
70:b1:d9:54:c1:14:bd:89:b7:14:e1:7a:32:c8:e4:
66:18:7a:0b:e1:38:ad:9b:11:b4:3b:74:35:ab:2f:
6b:7d:ad:30:46:64:bd:6c:ad:de:41:b2:2c:31:e2:
dd:76:87:a8:64:0d:2c:dd:f0:bd:45:72:a1:6b:35:
a0:0b:5a:3c:7e:04:b1:98:bc:0c:6d:0e:6b:5e:a4:
2a:d0:27:ed:be:ba:d6:65:9b:e9:e9:3b:0a:9f:38:
04:64:43:79:a5:df:ee:f6:d5:c9:ab:f8:5c:49:db:
4f:e6:bd:7c:26:04:ea:d3:7a:d8:06:28:1c:e2:45:
f5:2a:41:41:79:cc:ec:c8:8e:7c:42:fb:cf:c4:a9:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:9C:CB:D6:32:63:DE:6E:40:9D:E1:98:0D:4A:C5:28:BD:FE:74
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7a:5e:cb:44:03:8a:27:f6:13:65:64:bc:aa:ef:40:c9:19:
51:e3:70:4d:1b:55:a7:e4:b3:a3:b5:f6:b3:9b:d7:4a:cb:ab:
48:12:8d:03:4c:ce:2b:f7:24:25:b1:57:d5:cb:6e:9c:c6:49:
2e:78:57:af:92:b8:f4:e6:67:a0:e5:35:b9:c7:e4:1f:d3:29:
61:89:5b:70:62:8c:da:d0:72:8d:58:c3:fe:3c:e2:b4:52:f2:
b3:f5:8a:6e:5f:3f:73:8f:60:94:6d:e8:48:1f:83:ad:67:9a:
2f:61:23:46:77:cc:c0:6c:c5:14:74:c3:aa:ed:1c:67:1d:83:
9e:d5:bc:44:62:47:b7:dc:aa:bf:7e:ab:d1:1f:5f:ba:4d:b7:
6e:3c:d8:e4:66:46:28:c0:3f:37:95:91:1d:ab:ff:1b:5f:02:
4e:3d:3e:d4:2f:eb:96:4b:b4:7b:78:6b:dd:36:db:72:0b:24:
2e:d8:a7:ae:86:5c:c9:61:a8:d7:19:70:c9:7e:e8:5c:fe:ea:
7f:cd:0c:a1:2e:51:46:21:70:4a:37:45:c2:63:6e:1d:79:7f:
63:15:ff:1e:3f:26:4d:e8:28:d6:e6:54:6e:c3:6c:9e:75:55:
6c:fe:bb:51:c2:5b:82:73:ad:a7:ed:d0:bc:42:9c:af:65:6e:
3d:93:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:58:31 2024 by rpki-client on console-fra.rpki-client.org