Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
File: 0EOMFbwZI2ixByCmanlBCueHcks.mft (raw, json)
Hash identifier: RSlCcVGDYr4eNOp9fsSdz0cpgV2IL+zYAK1cVmjVctA=
Subject key identifier: CF:F3:31:99:9E:85:2F:36:1F:7E:04:7E:1E:7F:37:41:4C:89:FB:3E
Authority key identifier: D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B
Certificate issuer: /CN=d0438c15bc192368b10720a66a79410ae787724b
Certificate serial: 018F95A905B218EAE39993EC236171B8ECA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
Manifest number: 0A24
Signing time: Mon 20 May 2024 11:00:33 +0000
Manifest this update: Mon 20 May 2024 11:00:33 +0000
Manifest next update: Tue 21 May 2024 11:00:33 +0000
Files and hashes: 1: 0EOMFbwZI2ixByCmanlBCueHcks.crl (hash: GqGWIYhuLpdihT8lSgx+gjOu04ifqRfcxRCIi+xHslM=)
2: T9GZsNWTiUG1ULcq6sYJBGikaz4.roa (hash: w7ShGAy2/gXZef9xBqiyA+Jyz2jj73RZ4vY/D/HtgQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:a9:05:b2:18:ea:e3:99:93:ec:23:61:71:b8:ec:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0438c15bc192368b10720a66a79410ae787724b
Validity
Not Before: May 20 11:00:33 2024 GMT
Not After : May 21 11:00:33 2024 GMT
Subject: CN=cff331999e852f361f7e047e1e7f37414c89fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:27:92:90:f4:fd:63:c5:1a:9d:75:d9:fb:
11:98:8a:5b:64:43:ea:83:8e:a2:be:fc:93:68:fb:
0c:b1:6b:14:ec:6a:4a:7e:b5:b8:1b:ae:fb:93:60:
55:10:a1:84:de:e6:41:40:1e:58:40:0b:ac:ca:94:
7d:61:77:48:0f:fb:ee:92:33:0f:ec:42:75:7a:c8:
b6:19:a7:56:93:21:30:a7:74:77:83:04:1d:29:d1:
40:e6:1d:94:ce:40:b7:0f:d7:97:f4:f9:03:be:05:
d0:55:3b:94:3d:7e:ad:4c:c9:96:31:91:d9:37:11:
f0:6e:3a:0e:3f:b2:42:3e:f7:fa:97:c7:a9:fe:42:
88:03:49:38:63:9b:74:db:15:e8:d2:37:9b:02:fb:
2b:a0:f8:c2:1b:3e:88:50:a6:b0:bb:ff:84:4b:5b:
d4:88:52:8b:85:cc:51:a5:80:6e:da:44:1b:6c:f7:
51:11:8b:b4:d4:25:58:b4:ac:60:10:7e:f1:f1:50:
38:a5:ed:1f:a0:5c:fe:d6:49:50:e4:d5:f1:3b:4e:
63:2f:41:7e:d4:9f:28:05:10:6e:2e:ca:62:36:ba:
f1:df:70:b3:ec:02:3b:7c:b5:05:1c:c1:be:3c:aa:
2b:f0:81:ef:ee:06:c2:ff:97:00:87:49:16:8a:2f:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:31:99:9E:85:2F:36:1F:7E:04:7E:1E:7F:37:41:4C:89:FB:3E
X509v3 Authority Key Identifier:
keyid:D0:43:8C:15:BC:19:23:68:B1:07:20:A6:6A:79:41:0A:E7:87:72:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EOMFbwZI2ixByCmanlBCueHcks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a7353-c72f-417f-ac90-665a98347ac5/1/0EOMFbwZI2ixByCmanlBCueHcks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9f:f9:cd:a4:f6:de:32:75:4f:16:d5:84:c2:db:b5:37:f6:
ed:de:21:33:38:74:d8:60:98:18:b5:80:01:b3:08:71:d5:76:
bc:5b:58:4c:77:17:b4:45:d6:00:9e:28:87:26:44:c1:45:03:
c9:9f:26:88:a1:02:04:99:b2:30:1e:ad:46:30:55:f2:79:fd:
fb:bb:d4:ce:3a:39:47:86:e5:db:e8:6a:8d:9d:f5:8a:b3:ae:
58:6f:e8:5d:ff:35:ca:72:6f:91:c3:d3:35:2b:5f:08:3d:e9:
c1:f5:41:9a:ff:80:ee:ac:c4:50:7d:db:90:f2:df:49:aa:86:
40:94:5b:67:c6:3d:da:58:29:27:46:90:f7:22:52:fe:c7:15:
c1:da:38:00:0c:31:a0:c2:b5:f9:99:0c:d0:0b:30:68:fd:ae:
04:59:59:b4:04:73:f7:a7:13:7c:5a:44:c9:56:1c:fc:10:6b:
81:d6:7c:8c:4d:9a:f7:22:91:57:60:49:9e:eb:bb:d0:91:04:
b6:c4:18:31:18:84:cd:83:85:2f:95:7f:57:32:6b:4c:bd:34:
b5:c6:c4:73:06:ec:11:e9:18:6d:49:f1:63:9c:6f:c8:4f:64:
19:9c:b9:0f:35:87:72:34:d1:36:7d:a4:82:35:6e:ee:d9:97:
26:04:e6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:18:47 2024 by rpki-client on console-ams.rpki-client.org