Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: bNzwzH2fBspLw40evabE4gNllT7whGGxwtkZk0lHujY=
Subject key identifier: 96:C8:57:B1:14:D8:A9:C1:3B:5E:54:D6:F5:1F:86:5C:A1:18:DF:69
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 018F87ED95D4DAA02171F7FEB555E5062ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 0168
Signing time: Fri 17 May 2024 19:00:45 +0000
Manifest this update: Fri 17 May 2024 19:00:45 +0000
Manifest next update: Sat 18 May 2024 19:00:45 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: Ad/JarEgXnYJFyW9Zl+nayps3UWEX4RVZY9l5X/69OE=)
2: LBbWU0WMfzZhNoSO9RgqOybvX_M.roa (hash: /oeybjLETuVV7wntucTgdof/2swnXe6vcy8si6AUK3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:95:d4:da:a0:21:71:f7:fe:b5:55:e5:06:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: May 17 19:00:45 2024 GMT
Not After : May 18 19:00:45 2024 GMT
Subject: CN=96c857b114d8a9c13b5e54d6f51f865ca118df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:11:14:a2:52:74:1b:d4:9a:54:c1:38:fe:
77:08:e8:9d:13:83:f6:65:b0:d8:0d:35:43:27:2a:
65:6c:07:27:84:be:d4:ed:d1:14:92:6c:42:f4:3b:
d1:9a:b4:0c:2f:05:3c:0c:fa:da:69:8a:d5:fb:2a:
83:66:cd:83:d7:df:dd:c5:ec:c5:25:90:19:2b:11:
85:40:27:20:c4:f8:9d:54:1b:a1:ef:dc:ef:df:43:
20:fe:56:df:ec:61:78:96:7c:fb:47:67:36:dc:47:
70:84:11:7a:27:a4:6d:14:21:49:b3:cc:6b:05:5b:
0a:ce:56:7b:89:79:bc:c8:a4:2f:56:a9:bc:79:e1:
16:99:4e:83:86:0b:ba:52:9f:eb:4c:49:32:ab:c8:
2c:af:00:41:8a:2a:2d:48:75:98:5a:ae:35:4a:3b:
24:11:13:2c:b6:dd:16:50:a6:82:da:e5:bb:c9:af:
d3:b6:d7:40:ef:e0:a5:d4:8d:1b:73:40:25:5d:1d:
e3:17:8c:43:24:f5:e4:52:9b:a6:ca:fd:0c:54:42:
98:dc:7b:c5:56:3c:68:02:21:d6:99:e7:6b:8a:ac:
a1:37:d6:b8:d4:cb:2a:14:6a:e9:a3:8a:8f:aa:0a:
8f:79:58:95:b8:e3:f4:7d:6b:50:ca:39:d7:73:53:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:57:B1:14:D8:A9:C1:3B:5E:54:D6:F5:1F:86:5C:A1:18:DF:69
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1e:73:0b:04:08:50:0d:b8:da:75:40:b1:7c:bd:3e:33:1f:
2a:c6:23:65:05:d2:4e:e0:23:aa:62:75:ba:86:07:dd:08:67:
53:9c:bd:a7:d6:aa:54:48:f3:24:f4:1b:ec:8f:84:62:7e:b4:
d2:ac:f0:a1:ce:ed:61:85:2c:26:39:6e:08:70:aa:b8:d5:1a:
89:57:34:63:9d:32:50:54:57:34:75:20:3b:5b:7d:7e:94:9c:
17:38:17:07:00:e9:32:47:4b:ee:6c:ed:04:9f:03:7a:9b:bc:
33:42:71:04:68:85:50:2c:16:6f:c6:a1:4b:58:02:8d:cd:6f:
52:52:11:c8:e7:4d:95:f7:3b:34:01:4e:14:4f:b3:7f:67:9a:
c8:fb:a0:ce:13:59:12:ae:d8:dc:20:b5:5f:4e:69:80:37:55:
10:1b:8b:4a:90:00:55:b9:fa:bf:b1:71:18:d7:67:9a:0c:2c:
ad:e8:8f:29:4b:c3:1a:2a:13:92:5b:d7:88:93:5f:a2:b7:ab:
f4:69:6d:c9:8f:7e:38:ec:a4:e9:8f:14:7a:61:9e:04:fd:65:
0e:d1:e2:3d:e7:0c:cb:b9:74:70:e7:b5:df:e3:01:76:d4:b9:
ce:0a:0e:8c:93:fe:ab:34:e3:d7:04:c5:ca:b8:30:fa:34:9f:
82:82:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:03 2024 by rpki-client on console-ams.rpki-client.org