Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier: /mjjG8awleY1YN5YmmHj+/lOb1HfJ8AyiKDW84yzg+g=
Subject key identifier: 44:19:F4:89:5D:CA:A6:57:E1:3F:63:D3:DD:6C:60:EF:CD:56:A3:AA
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 018F86DA5BF018D3A9FF4B2F048632D82E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number: 1181
Signing time: Fri 17 May 2024 14:00:08 +0000
Manifest this update: Fri 17 May 2024 14:00:08 +0000
Manifest next update: Sat 18 May 2024 14:00:08 +0000
Files and hashes: 1: LPsCS7FLfHSisbPRU7jsmHTJbf8.roa (hash: rdqooSA2ushWxelR9N5DAHKj5gcFOBavV0gt7Qqk0Dg=)
2: liPbIzkz79MDLIxDc5Q1z4LPdSM.roa (hash: BiV1dA+mvXWAkFGjfyWJPrCby1Fn3sF4fAf0tp9W+R8=)
3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: RKDaE6729lIzb+ikf8XSwb6hCvzhzV/ZZT4xJJunnb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:da:5b:f0:18:d3:a9:ff:4b:2f:04:86:32:d8:2e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: May 17 14:00:08 2024 GMT
Not After : May 18 14:00:08 2024 GMT
Subject: CN=4419f4895dcaa657e13f63d3dd6c60efcd56a3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:c4:4f:ed:d3:c5:6a:14:b3:0b:f4:f3:69:
3b:c2:f9:03:5a:28:2c:1d:d9:c9:1d:2f:a2:d7:9d:
e3:ca:5d:e0:c6:f6:cc:d6:cd:04:64:53:71:28:d7:
67:18:99:c6:7f:6c:c7:a8:0b:ad:bf:27:15:85:07:
e3:c7:9a:de:50:e1:c4:0c:82:e9:1d:7c:cc:9e:5e:
f3:1b:e6:e1:fc:0c:0f:c6:05:6f:aa:e5:a3:da:58:
49:f3:f1:fc:e3:fc:3e:83:b8:c1:d5:25:84:23:92:
f5:94:4a:bd:d2:d9:4e:29:61:7d:a9:54:84:3f:03:
1a:78:27:e3:be:94:54:79:58:e7:c8:6d:6c:22:07:
4f:2a:7e:d6:0a:c4:f4:2d:4a:12:c1:34:88:07:3e:
ad:49:b2:3f:de:e5:d8:4a:d4:c5:85:7e:95:7e:c2:
74:1c:1e:9e:45:8e:12:40:64:14:fc:23:01:9b:e2:
ad:fd:a9:98:f3:53:be:e4:c0:94:a9:8e:b9:4b:f2:
2f:61:c2:54:cf:39:9d:58:cb:0f:bd:fe:2d:36:f9:
dd:2b:8d:a2:aa:6c:34:46:dc:5f:2e:ae:fd:f9:29:
da:98:47:45:c5:6f:84:6f:80:7e:d5:83:07:fc:9f:
82:d2:56:97:5e:a9:34:1a:cf:50:33:db:41:ab:6a:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:F4:89:5D:CA:A6:57:E1:3F:63:D3:DD:6C:60:EF:CD:56:A3:AA
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:36:a2:d3:ae:dc:c4:25:6e:db:8a:0a:07:cd:e4:25:63:
ec:3b:cd:0e:db:38:c9:38:73:cb:67:eb:ac:e2:02:75:e9:cd:
63:c2:c7:86:29:8c:9f:43:f5:85:7a:11:81:fa:9f:d8:45:db:
fe:b9:59:85:a9:97:4d:7a:0a:b5:ff:55:9a:3e:5a:b1:97:4b:
0c:0e:99:bc:58:96:38:79:76:9b:a5:8c:b6:9d:13:3c:42:77:
69:6f:39:65:c1:59:19:0e:34:08:83:2a:1e:c7:b0:cd:1c:00:
77:e3:15:af:ed:9e:9b:d7:f6:d1:be:d7:5d:81:55:58:72:0d:
31:15:c2:b9:7f:9c:17:8f:b1:c1:d5:73:9f:8d:93:be:47:b9:
ca:34:34:d2:cc:f1:87:29:ae:e8:ed:d5:fc:d5:71:c0:87:61:
dc:e3:1e:dc:d6:96:a3:74:94:ad:43:d6:45:6d:18:b4:c5:57:
62:ae:e9:02:4c:4c:98:70:15:5e:fc:bd:5b:62:10:af:3c:cc:
e8:78:32:4e:08:51:55:f4:c6:fc:37:64:9d:08:62:98:f4:60:
94:f7:ed:94:08:9e:50:cc:b2:3d:b9:65:13:c5:9c:f0:f9:5e:
f1:70:b3:3f:aa:0b:9c:da:49:0b:75:ac:ed:d0:81:79:44:b8:
d7:30:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:42 2024 by rpki-client on console-fra.rpki-client.org