Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: SHflluYGEvLkxFNIfbp0w0Gn3wxtx7J273I1ACFmQPo=
Subject key identifier: 16:FE:08:1E:67:E2:DD:3A:F6:59:92:FD:23:B3:13:DB:D6:7C:DF:53
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 018F96BB7CDBE891B2B0C22C75FCE9085418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 117F
Signing time: Mon 20 May 2024 16:00:20 +0000
Manifest this update: Mon 20 May 2024 16:00:20 +0000
Manifest next update: Tue 21 May 2024 16:00:20 +0000
Files and hashes: 1: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: XdJ2tK1HRX5ejQemZzNcHC+gsZiK4tD4ZpCQuCSVwGY=)
2: pEi50I1bCHR2kb9ppChwelBWpJ4.roa (hash: zVS5GgTWvU5txkeKOwtM4QmNvrvGCsv79hSgCFGabzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bb:7c:db:e8:91:b2:b0:c2:2c:75:fc:e9:08:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: May 20 16:00:20 2024 GMT
Not After : May 21 16:00:20 2024 GMT
Subject: CN=16fe081e67e2dd3af65992fd23b313dbd67cdf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:6c:1e:82:4c:1c:a6:a3:6f:82:27:16:40:
d4:93:51:d1:e3:3a:fa:0c:2a:58:71:31:de:70:c6:
2d:94:cf:a6:8d:11:6d:7d:dd:b9:1e:96:38:54:b5:
d0:48:07:f8:eb:bc:11:76:cd:19:e7:91:62:a6:fd:
26:3d:a4:5d:03:e7:a0:2b:93:6a:82:ab:c5:ff:69:
bc:7c:7b:f4:f9:2c:58:f5:a8:da:8e:19:fd:78:2e:
a6:b8:ac:60:e2:39:50:8b:64:de:2c:45:e8:18:1c:
b8:0c:f1:0e:3f:c3:86:e4:2f:3e:1f:56:bb:cb:ea:
03:87:6e:13:cb:06:06:06:9b:09:41:fd:47:36:32:
fe:8f:4b:cc:b6:60:5b:d2:c5:98:55:b7:1b:c1:2e:
4e:b1:10:7d:b1:c1:63:50:cc:e1:ec:7f:26:c0:bb:
9c:79:b9:5d:e7:d2:05:b5:e0:1f:48:4c:f0:c5:d4:
cc:99:63:e6:fa:4f:5c:b0:44:81:1a:18:b0:99:6b:
bd:6a:0e:29:02:94:59:0d:8a:ce:9e:25:5e:ac:f4:
f5:81:5b:ab:04:2e:38:74:50:62:8d:76:67:56:d5:
a3:29:56:f1:07:a2:c7:f3:c5:2d:c3:8a:28:74:3d:
a8:30:e6:f8:62:c8:ad:76:e6:3b:3d:e4:25:5d:9f:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:08:1E:67:E2:DD:3A:F6:59:92:FD:23:B3:13:DB:D6:7C:DF:53
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:15:fa:d1:81:f7:63:8d:af:cb:12:35:76:3f:43:f0:ca:
5f:6b:be:ec:54:19:a8:88:55:65:8f:b3:0d:4c:65:9f:0a:a7:
3c:1c:bc:a8:3a:e8:1b:d0:ce:30:6d:63:c5:95:66:dd:64:c9:
81:c6:3a:a8:27:11:b9:a5:41:f5:28:2a:c2:fa:76:1c:8b:09:
07:39:b1:2c:f3:54:e8:09:42:39:69:4b:62:57:7c:61:d0:43:
ce:06:b6:17:5e:78:6c:3d:92:16:ca:ca:1c:ba:f6:87:1a:bf:
8a:58:89:35:37:24:1e:ef:f1:14:bc:c3:67:fd:56:22:25:2c:
d1:84:d6:d4:b5:83:a0:7f:db:15:03:32:e9:aa:d4:a4:b2:76:
cb:43:25:a1:d3:cd:69:c6:28:bf:bc:76:01:a2:0e:d7:45:ea:
68:9a:3b:1c:9d:60:cb:6b:01:35:ed:d1:af:d0:43:e1:72:ae:
15:30:9e:d3:00:3f:84:48:77:1c:41:2d:0a:c3:16:ef:99:89:
3c:14:3b:60:fc:b1:37:af:7c:fc:d6:2b:8c:43:6b:a0:26:c5:
56:ea:63:48:af:7a:df:86:47:e4:58:a3:2f:e4:80:43:8d:24:
15:d3:a9:ed:1d:56:fe:2a:73:b7:6b:f2:29:a8:f6:39:9d:0b:
c9:7a:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:25:11 2024 by rpki-client on console-ams.rpki-client.org