Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: 37MXNI5orxZ9Yh4fsQE3rBgSL49HBQtWUrmY+EotiOI=
Subject key identifier: 8B:A9:D7:74:BA:0A:B4:7A:90:E8:DB:5E:71:B4:BA:B3:89:B7:31:2E
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 018F874ABE40998355F60B6356D7F2CCC9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 16:02:53 +0000
Manifest this update: Fri 17 May 2024 16:02:53 +0000
Manifest next update: Sat 18 May 2024 16:02:53 +0000
Files and hashes: 1: q4p0jFQ3WEfG-M-4E7I9saS5OYY.roa (hash: e5nOmBteRDXgf2CEGYG1zrThh5BuvyRg11QsYb1ewt0=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: YHldUjungv1wX+g/4aQpka/Qy0Ym+MsFZfezBOkt40o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:be:40:99:83:55:f6:0b:63:56:d7:f2:cc:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: May 17 16:02:53 2024 GMT
Not After : May 18 16:02:53 2024 GMT
Subject: CN=8ba9d774ba0ab47a90e8db5e71b4bab389b7312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:c3:cc:28:a0:d7:65:e5:68:fe:5b:65:f5:
c2:31:d5:b2:c4:7c:0c:95:c6:ba:a4:53:39:e8:54:
c9:be:b1:3a:19:c4:3f:95:8d:85:90:a6:92:7d:db:
9f:e4:da:3a:e9:89:dd:82:58:4e:28:40:7c:64:9f:
05:1d:25:c6:94:9f:fc:26:dc:12:72:1f:ca:4a:33:
30:b0:27:22:c5:a9:91:bf:31:02:59:19:4f:8b:58:
e5:8a:fd:1d:bc:c7:e4:00:dd:a2:d5:09:a4:42:dd:
48:27:f6:0c:a7:74:cd:3c:96:33:8d:39:a4:d0:bd:
08:63:d2:13:15:91:be:36:e9:df:2c:55:a1:b0:53:
cd:b0:56:74:cf:b0:df:88:a6:4e:76:ec:ef:3a:57:
26:31:a1:28:d8:f2:5f:fa:96:f7:dd:29:09:f5:ab:
da:fc:df:65:9e:0d:00:df:8d:56:d7:5e:fe:06:54:
2b:96:05:df:75:29:a9:ab:68:de:a6:75:27:28:a7:
66:4f:5c:80:b0:a4:60:1c:a4:7f:35:1a:39:16:7b:
7e:89:9f:b0:0e:21:e4:b8:f6:55:af:f1:19:67:0c:
d8:05:9a:6d:54:7d:71:fa:bf:08:e7:ef:22:16:ea:
11:01:30:a2:be:eb:83:59:58:1e:ca:a0:00:15:be:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A9:D7:74:BA:0A:B4:7A:90:E8:DB:5E:71:B4:BA:B3:89:B7:31:2E
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b4:19:b7:dc:17:fc:88:85:21:05:25:51:68:5c:8b:e9:f3:
c9:c2:37:e5:cc:8a:66:83:0e:ab:63:85:dd:c0:ec:5c:09:f0:
1d:ee:40:38:fb:52:a9:20:99:0e:69:f4:09:a7:70:d2:76:03:
09:d1:e9:98:19:5e:df:65:d4:2a:de:65:32:59:5f:5a:0b:ce:
b6:ea:b6:32:e3:93:f5:28:5d:d4:67:1d:c6:69:66:48:06:e3:
f0:39:13:4f:4e:2a:a7:ab:99:35:14:8a:a8:89:7d:a9:7b:81:
23:90:16:b5:5f:09:2f:98:82:43:32:d2:4c:35:c7:41:e9:cd:
29:7c:0a:ab:c3:b3:07:ba:71:08:89:40:aa:ca:67:81:97:ab:
f4:cc:95:6c:e0:47:d8:f1:5b:3c:53:b0:70:a1:8f:83:82:6b:
91:da:0c:57:59:37:f7:dc:72:0d:6d:e8:3d:41:c6:49:57:f7:
10:21:97:49:4c:1a:4d:ca:d2:af:00:59:c5:f2:67:e7:e5:7a:
74:df:b8:a4:ad:6c:58:e2:1e:a8:dd:07:90:60:41:f4:a1:bb:
95:da:0a:c8:f4:01:82:fa:40:bd:5c:a0:8b:11:96:d2:f7:e9:
d0:5a:fd:0f:0e:b0:9e:a1:9b:1a:b3:96:d5:3f:fd:92:9a:fa:
e0:ae:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:10 2024 by rpki-client on console-fra.rpki-client.org