Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier: izDAN8w0xqD1OxW0xDMZrgrfV3W6hfUTLZWmJk+DiQo=
Subject key identifier: 74:3F:49:D0:06:48:20:98:71:0B:70:B1:C4:6E:50:C0:13:E4:B8:88
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 018F15FCC531E5DBD2D82AFEBAA321DB7F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number: 1145
Signing time: Thu 25 Apr 2024 16:00:37 +0000
Manifest this update: Thu 25 Apr 2024 16:00:37 +0000
Manifest next update: Fri 26 Apr 2024 16:00:37 +0000
Files and hashes: 1: 56pCFITxTeWubaBvXkpHO5ZpIs0.roa (hash: 6w7PA2/2BTTCkhaVFhM8G/FtOk7Ty3y/vJN/A1xL890=)
2: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: mMuF+6Bf/uLqk9TCrUXJoi/Kzj1hwz2oSRfYIwZUTLM=)
3: O3vSBcqxSm0X4V3WPybIPsiVVZc.roa (hash: M+L/oqX5z5Nn80yt8FZeHkEn+Tkg8ix0B+oYVWbCNp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:fc:c5:31:e5:db:d2:d8:2a:fe:ba:a3:21:db:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Apr 25 16:00:37 2024 GMT
Not After : Apr 26 16:00:37 2024 GMT
Subject: CN=743f49d006482098710b70b1c46e50c013e4b888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:3f:32:5a:9c:11:ef:ad:45:10:48:f3:27:
58:01:d7:c2:77:23:c5:1a:a1:44:f7:63:01:ca:74:
c1:df:5a:dc:ea:b4:79:7c:e2:c0:2e:2b:32:cd:83:
60:80:3f:13:62:8c:c9:5a:ab:4b:97:7d:9a:25:17:
fc:fe:49:82:92:8e:df:8b:66:b2:17:16:63:2e:86:
71:a6:2d:1d:28:b8:ca:1e:a3:77:54:a6:50:54:8c:
d4:24:05:b7:45:de:b1:b3:df:67:3a:b9:06:22:b9:
3e:c1:b6:7a:18:94:16:55:90:82:88:65:23:df:47:
30:09:4d:6c:39:91:9a:22:02:52:a3:8b:37:d4:9a:
28:dc:35:8b:d2:55:35:c1:ab:95:d7:38:5e:64:78:
0b:61:b3:8a:e9:e1:68:40:d1:28:37:3e:ad:20:20:
f7:1b:aa:95:c1:60:c6:39:f7:97:20:4e:ce:61:a0:
9c:d5:8a:a5:ac:a5:12:7e:6a:cf:7e:ea:f3:27:0e:
0d:4b:6b:82:cf:a8:8a:ff:23:ac:a5:93:2c:e9:e0:
84:51:73:66:d5:d5:98:b1:f9:c0:29:7e:9d:f9:e9:
85:c0:c4:a3:a5:56:ac:c4:93:7f:4c:63:8b:0a:75:
cd:05:93:38:e4:21:40:ab:11:ea:d3:da:3a:2d:88:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:49:D0:06:48:20:98:71:0B:70:B1:C4:6E:50:C0:13:E4:B8:88
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:85:57:29:0f:07:ec:db:b2:82:f3:d9:4e:47:82:f6:20:5d:
8a:f0:31:87:18:47:2b:0b:64:89:ae:9f:20:e7:cc:ed:2b:b1:
16:a0:ce:5e:3d:08:e7:d9:d3:a2:a1:ae:87:e4:26:ac:61:88:
40:61:47:67:69:f6:f8:d3:5b:d8:76:8c:12:af:5a:e6:79:e0:
06:03:c9:03:52:eb:e1:9a:51:71:b1:52:7e:f4:03:df:3c:64:
a1:4a:cf:9a:e0:25:36:29:59:d6:22:15:a2:a4:2b:ec:0c:44:
4b:a7:bd:63:42:97:be:2e:a2:8f:0e:fa:1f:41:b4:48:c7:05:
03:da:38:58:de:34:37:cc:f4:33:a8:e3:96:a7:12:7d:e7:fd:
ed:f2:2c:85:31:dc:da:eb:42:2f:ee:c8:b0:ac:8a:4a:4b:4c:
0c:85:d2:fa:f7:fd:a3:6c:08:dc:bc:23:b4:2d:ac:c4:9f:10:
f7:11:ed:09:d4:8e:27:72:a2:6b:ce:7b:72:d9:74:a2:4e:b8:
45:e4:ab:61:bd:4c:0a:6b:dd:2f:db:6d:f3:21:40:8b:ed:6c:
33:a5:d6:9e:4c:46:31:32:98:6d:bd:46:06:0d:d2:0c:0b:97:
8f:ff:9c:24:9e:53:7e:e8:30:9c:8c:ac:57:b3:a1:82:5f:cb:
2e:be:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:44:14 2024 by rpki-client on console-fra.rpki-client.org