Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
File: ET8DvxRR7uYupyQF-otkq_rjxOk.mft (raw, json)
Hash identifier: ZO8/WP+SngNlS6j4nrJY5vJRVkbZvPQASLj0SeB795w=
Subject key identifier: CE:A4:BD:89:D9:46:75:16:5C:C5:B1:F5:9C:1B:B9:65:5C:78:55:F9
Authority key identifier: 11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
Certificate issuer: /CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Certificate serial: 018F4A8FE3E4F962072B9DCCFAE30D4350D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
Manifest number: 0C33
Signing time: Sun 05 May 2024 21:01:35 +0000
Manifest this update: Sun 05 May 2024 21:01:35 +0000
Manifest next update: Mon 06 May 2024 21:01:35 +0000
Files and hashes: 1: ET8DvxRR7uYupyQF-otkq_rjxOk.crl (hash: 7IWFicxhQFmLjDUrv2ri+NyLuhxnAmJMO7ClpfUWVMY=)
2: eoKI2KiFgdXR_Bg8nAKQTP3GPfU.roa (hash: /oFkrhVvIl025G+fpSt8omn9SqIDNiykkv/vCGVRQ48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:8f:e3:e4:f9:62:07:2b:9d:cc:fa:e3:0d:43:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113f03bf1451eee62ea72405fa8b64abfae3c4e9
Validity
Not Before: May 5 21:01:35 2024 GMT
Not After : May 6 21:01:35 2024 GMT
Subject: CN=cea4bd89d94675165cc5b1f59c1bb9655c7855f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:f2:42:f0:4a:4c:83:ae:77:fd:ca:14:fe:
68:5b:cd:a3:a4:20:d5:a9:f0:2c:b6:91:e9:95:80:
69:97:b6:70:e7:09:e6:1c:a1:24:b7:7c:42:d4:fb:
7a:dd:eb:e7:39:19:d8:36:4d:29:d8:c6:e3:49:0f:
41:34:17:d7:59:58:51:b1:14:be:cb:b0:22:1f:23:
e4:7d:5a:61:a8:fc:ba:45:07:f0:74:0a:0d:33:80:
f1:dc:09:46:44:82:6d:c0:c7:44:01:6f:91:fc:d2:
ab:a0:9c:ef:ec:93:c3:e9:b8:17:2c:41:80:05:ab:
4c:88:bf:3a:a9:ea:13:97:fe:ef:ae:6f:0b:32:b9:
c9:13:ac:34:f5:6d:1a:6e:cb:9b:d8:88:42:ec:71:
26:6a:78:aa:1c:de:79:2e:42:1b:56:00:73:2b:ca:
35:e1:58:c2:3f:aa:56:25:7f:0d:26:25:7b:45:9e:
4f:cd:35:0f:49:da:73:9e:b3:8c:00:8f:21:bf:e7:
e3:60:44:85:33:3b:02:9b:25:72:fc:64:75:62:b2:
01:e6:ac:a5:ed:53:f7:3c:d1:d7:9c:1e:70:43:78:
b5:1d:e8:83:c1:61:16:7e:99:03:a2:4b:d9:8c:07:
79:e3:48:df:e5:82:9e:de:9c:ea:73:6b:65:0b:bf:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:BD:89:D9:46:75:16:5C:C5:B1:F5:9C:1B:B9:65:5C:78:55:F9
X509v3 Authority Key Identifier:
keyid:11:3F:03:BF:14:51:EE:E6:2E:A7:24:05:FA:8B:64:AB:FA:E3:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET8DvxRR7uYupyQF-otkq_rjxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a2be14-aec9-4ada-8784-debe5747b293/1/ET8DvxRR7uYupyQF-otkq_rjxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d2:d6:31:83:61:20:e0:e9:00:fd:e8:83:5c:83:bb:d0:f9:
31:3b:0f:d9:63:19:f2:bf:00:de:38:d9:4b:fb:f0:04:a1:fe:
8d:73:f7:36:f8:c0:91:14:1b:71:f4:c9:9a:cb:7e:b9:04:bf:
67:33:92:de:d0:2a:06:50:fd:be:cf:f7:10:3b:38:10:d6:7b:
a3:06:39:2d:8d:48:97:29:63:30:4b:5b:d9:cc:91:f1:e9:5b:
38:7d:78:8d:90:8d:f8:3e:ba:dd:45:f3:ec:ca:00:c6:7d:34:
11:44:ce:69:ca:30:2e:93:38:4f:db:24:31:07:d3:fb:5f:a7:
5d:6b:0a:85:5f:e0:fd:2a:02:71:45:4e:8c:e5:47:76:89:ed:
ae:6a:03:5d:0a:37:3c:e1:d5:a8:87:f2:fb:d6:48:31:ea:d0:
ff:77:38:e6:2a:3c:db:5c:f4:3a:c1:44:fa:11:f1:a3:73:82:
2c:39:79:72:5c:c0:7e:8b:a7:58:c1:73:05:02:20:cb:38:b1:
5e:5c:11:e9:25:7b:ab:ff:53:f1:f7:4a:57:f3:3d:62:dc:92:
1e:aa:c9:f3:34:6e:9b:39:90:d6:28:4d:2b:85:23:ec:96:f0:
75:2b:86:83:16:2c:79:93:47:0b:fd:fa:45:8c:1c:2f:4e:58:
b7:0d:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:13:12 2024 by rpki-client on console-fra.rpki-client.org