Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: 6qVqQq63UFJSfgAzPyppNtOtV4TGeHi8IFSH9UA4cM8=
Subject key identifier: C9:C9:E9:BB:EB:7E:D6:D1:7A:85:E9:48:C4:7D:8D:F5:59:D2:A4:E2
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 018F497F8D0EC927C2CF4F0E6FD28D0632EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1158
Signing time: Sun 05 May 2024 16:04:06 +0000
Manifest this update: Sun 05 May 2024 16:04:06 +0000
Manifest next update: Mon 06 May 2024 16:04:06 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: UREwVSRW1hBbgRxQ1Q4F+aaNlhRUOLlp5F4UVYNwdwU=)
2: TTkJwDOEGa_qOqQDnu9NVrOJWEI.roa (hash: 4+8ZRksJGKVtzFYMJx2y0TSxI9LTK7gq3i+ZQ0Vjdik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:49:7f:8d:0e:c9:27:c2:cf:4f:0e:6f:d2:8d:06:32:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: May 5 16:04:06 2024 GMT
Not After : May 6 16:04:06 2024 GMT
Subject: CN=c9c9e9bbeb7ed6d17a85e948c47d8df559d2a4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:a9:78:50:e3:78:89:3f:00:ca:db:77:86:
0c:b8:d7:00:4a:0a:ec:79:b1:b8:00:be:b0:d1:fd:
2b:30:62:98:18:f1:30:a2:25:6d:be:33:34:27:84:
35:f0:f0:93:df:86:45:c2:ad:1c:f4:ad:30:bb:28:
97:64:2e:9a:48:59:6f:48:3c:34:b2:dd:2f:4a:5e:
b3:d7:56:b9:9f:73:58:2d:e6:80:b1:5f:11:9d:21:
2e:8d:09:d2:d6:be:b7:81:83:ef:e6:61:f4:12:55:
26:51:26:cd:cc:a1:f7:bd:d7:70:8c:fe:f8:f1:02:
16:b5:79:af:9f:6b:84:57:5d:a0:bf:93:92:b0:50:
1b:29:d4:f7:2a:75:d1:6f:b1:ed:99:15:b3:87:1c:
1d:0c:8b:c9:b6:35:83:8d:0d:ff:e5:78:3f:fb:71:
29:87:3f:2e:0e:ec:6b:3a:18:fa:38:ca:00:c4:e2:
ec:73:46:c0:bc:93:10:96:41:71:9b:d1:a1:96:5d:
39:7c:9b:1d:4b:a8:0d:d2:72:d3:65:78:b6:31:a3:
6a:ec:d8:10:6b:de:a5:2d:31:f6:d3:5e:3e:21:62:
a0:08:e6:81:1b:59:e6:3e:5b:7a:95:ac:7e:32:04:
02:d4:77:16:96:00:98:2e:af:5d:3b:6e:35:77:99:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:E9:BB:EB:7E:D6:D1:7A:85:E9:48:C4:7D:8D:F5:59:D2:A4:E2
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d6:4e:bf:52:23:45:ba:bd:c3:3e:c7:a5:fc:96:fe:54:28:
63:75:b2:fc:fb:6f:4c:14:96:ee:b2:66:2c:6d:c2:81:48:46:
8e:33:ea:db:0e:64:6d:d6:59:44:f9:6a:ef:9a:89:3f:f2:b6:
05:96:ee:9b:87:12:03:69:d0:2d:49:1e:df:f5:86:49:69:6b:
2e:f6:a8:7c:37:99:80:fa:a8:52:26:59:35:1a:ec:0b:ca:37:
f9:34:00:fc:8e:44:bd:16:37:e0:d0:bf:e7:c0:10:16:58:c0:
c3:ec:55:6a:8b:77:83:1f:38:09:51:34:a2:03:69:29:8f:47:
a7:76:32:d9:ed:de:77:82:49:03:a0:05:07:3e:52:26:7e:e2:
ab:82:9c:2c:83:c3:62:a0:5a:23:cb:e3:7e:be:b1:f9:a4:25:
93:fb:02:70:47:4a:81:5a:bc:8b:be:ce:6e:e0:e9:d4:7a:0a:
45:0b:04:33:66:74:01:3a:c7:9c:03:8f:2d:dc:92:24:18:48:
02:f9:4b:aa:36:ec:8d:0a:a1:82:87:6f:d4:3e:1b:c9:fc:b9:
26:86:0a:d1:76:cd:b9:a1:99:3f:47:7b:a9:a3:17:bc:75:a1:
df:0a:4b:bb:7f:34:26:a8:b7:46:09:0f:f7:d5:28:a4:3a:33:
48:57:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:54:38 2024 by rpki-client on console-fra.rpki-client.org