Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: JZQ2qTt0Z9GBZ8GznUdJR98n5xf9yWNfLa7Gj9n8yyY=
Subject key identifier: AE:72:5E:94:A7:20:0E:D8:88:24:5A:71:2B:58:56:05:9F:BD:FD:73
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 018F34ACB77B1ECBA72001011EE54113E381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 114D
Signing time: Wed 01 May 2024 15:01:25 +0000
Manifest this update: Wed 01 May 2024 15:01:25 +0000
Manifest next update: Thu 02 May 2024 15:01:25 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 4HlHteGEMTTpolEv1v1Rb/QCvnnJOWPgJ+J2BUmfJk4=)
2: FS6VHRHygYy7ZXD7wwcG6UbLmo8.roa (hash: TLSb1rMyB0mwe4OBlI+lVv4Jrlp5PuZ9/oygYKtdW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:ac:b7:7b:1e:cb:a7:20:01:01:1e:e5:41:13:e3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: May 1 15:01:25 2024 GMT
Not After : May 2 15:01:25 2024 GMT
Subject: CN=ae725e94a7200ed888245a712b5856059fbdfd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:1d:70:13:5d:df:f1:92:5a:f3:53:ac:fd:
ba:84:8a:b0:22:b0:f2:8b:4f:1a:9a:38:5b:49:c6:
df:84:bc:65:eb:43:83:2b:75:32:61:28:e1:b5:12:
8f:f3:d9:a1:d4:90:55:44:93:f6:30:e1:f4:0c:97:
80:4f:91:8a:c3:c0:ad:20:9c:ac:0c:18:26:a7:01:
b2:0f:53:5d:66:6c:eb:a9:a9:75:2b:cb:31:ea:f7:
08:67:e1:28:9e:11:ea:52:35:b9:42:6b:33:d5:21:
fc:1e:39:01:fa:02:86:31:d9:c2:df:0b:9c:0f:43:
f2:8a:a3:47:b4:da:bd:30:26:6e:2c:a0:80:b6:0a:
52:95:a8:ec:49:cc:e5:46:54:82:3b:ef:9d:7a:7c:
40:37:ea:0f:34:4d:b4:e5:18:15:72:da:e6:00:23:
24:92:60:63:70:e4:78:60:09:7d:12:e0:6b:e6:c2:
a3:b5:9d:78:aa:0c:88:6b:69:98:48:ae:31:17:da:
a1:4d:ae:c5:46:3d:a8:c8:60:98:66:06:92:dd:c1:
a1:6d:ec:99:15:28:f6:e6:a6:1d:32:e7:b0:38:91:
bf:a3:13:46:25:3f:9c:6a:8b:1c:58:88:95:e2:c6:
11:37:91:dd:05:6e:b2:55:2b:6d:96:6d:35:dc:9a:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:5E:94:A7:20:0E:D8:88:24:5A:71:2B:58:56:05:9F:BD:FD:73
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:32:f8:d8:91:f7:af:06:13:49:75:38:1c:0d:c9:61:08:f4:
b7:5b:e7:7a:ec:fb:49:d7:9a:c0:f3:4c:9e:e0:8a:5f:0a:a5:
35:13:02:09:80:1f:1d:b5:ce:87:9e:19:57:ff:dc:ab:e0:e7:
61:b6:e8:79:aa:3b:99:84:36:eb:a7:cc:b7:ba:83:c8:40:48:
59:94:b8:01:34:09:27:08:7d:c4:0d:5a:50:b9:dd:c6:d4:bf:
12:ab:4f:50:4d:59:3d:22:fe:4c:ff:82:36:29:72:35:c9:25:
e0:a4:7e:7b:c8:3b:42:44:d8:cb:21:2f:11:e5:f6:c6:0f:c4:
94:a9:d0:5e:3c:c7:cc:dd:1d:e2:10:ca:4a:a1:7d:d4:1a:79:
4d:fe:43:0e:b2:84:bd:dd:5a:a9:35:fb:ab:29:6b:13:33:f8:
03:2e:8a:a1:79:d6:cd:38:eb:4f:b0:33:70:73:44:a8:11:0d:
99:63:c7:ad:6f:33:5a:da:22:0b:cd:30:89:a5:a6:da:40:86:
9a:50:0c:d2:1f:7c:3f:6c:f8:85:87:6d:60:e8:bf:a3:a6:a6:
92:2f:7f:aa:03:c8:6a:12:70:e5:a5:6c:9a:4f:67:e4:a7:51:
81:d6:a9:d1:a2:73:22:cc:1e:80:91:85:ef:a4:17:ce:aa:47:
be:19:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:50:40 2024 by rpki-client on console-fra.rpki-client.org