Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: r7AL+QjBPZzneBHk71+fkRnbr5PgfsMRIHdORpPyL7g=
Subject key identifier: 5D:5C:3D:87:D0:65:F9:C3:84:F8:11:C1:C1:11:A4:76:F4:5D:8C:C1
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 018F6ED36D35E6FE671AAF0F2E1C1077895C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 040B
Signing time: Sun 12 May 2024 22:01:40 +0000
Manifest this update: Sun 12 May 2024 22:01:40 +0000
Manifest next update: Mon 13 May 2024 22:01:40 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: Fjm/qJVnYlqyWU8gmAghjvMve7LcgJcuRCHfrHEFq28=)
2: YNSRif6DEa8JsyzzEBR_MeiVv4I.roa (hash: ETJDg9On3wAQcHJZFZzKyHt1TpcbbbiGwD85tpermno=)
3: gi7z4kQnEDT4E-sqhpN3x_zqzsg.roa (hash: nhDpJKNF8O/htW/AIfy9n4YRcA1Nc7wNh9fFOk6c1wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:d3:6d:35:e6:fe:67:1a:af:0f:2e:1c:10:77:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: May 12 22:01:40 2024 GMT
Not After : May 13 22:01:40 2024 GMT
Subject: CN=5d5c3d87d065f9c384f811c1c111a476f45d8cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:1a:4d:86:02:8e:27:0f:99:00:77:2b:fd:
92:60:59:fa:a4:bd:e2:f8:09:c7:64:0d:7b:21:a5:
cf:f9:44:04:ca:d4:1e:76:60:36:5e:0f:a1:99:7d:
d2:d8:74:0a:b4:c6:2a:53:cf:f0:f0:5e:ce:58:7a:
12:0d:a3:18:37:85:4b:b0:72:82:ae:fd:1a:92:26:
cf:03:af:bd:37:c8:54:63:cd:5a:84:2d:54:27:5e:
e6:22:5a:67:23:98:c0:b5:72:a4:04:52:a2:4e:7c:
23:59:f6:1a:8e:0e:49:9c:a0:90:58:b0:84:73:de:
e4:bc:f1:f4:c1:06:05:bd:0e:6c:a9:16:a2:72:41:
0d:29:dd:52:96:53:bc:4a:95:d6:1c:4e:92:ea:91:
70:1d:fb:e6:e2:7b:72:da:24:51:20:8d:f1:4d:10:
ca:17:25:d1:60:d4:9b:e4:d4:a3:e0:48:1e:43:cc:
fb:b8:06:0a:da:02:09:9d:44:28:5c:96:7d:aa:bf:
b7:fe:23:3e:a8:97:09:9d:c7:d4:cd:94:37:61:9c:
60:5f:f7:11:d7:27:a2:31:c1:74:7a:30:69:8b:75:
c5:67:8b:bb:ec:fb:fd:0e:66:e2:45:c6:48:57:55:
78:19:f6:7d:2e:9d:7c:fe:81:c9:3d:7d:52:89:35:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:3D:87:D0:65:F9:C3:84:F8:11:C1:C1:11:A4:76:F4:5D:8C:C1
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:46:bd:ca:a0:17:66:66:a7:0c:41:68:41:9e:79:f3:5b:
c2:a6:d2:54:3e:65:c5:45:17:b7:b2:46:18:45:57:34:3f:ce:
d6:ae:8d:f5:a1:a6:92:cb:b5:f8:13:1d:b2:84:99:94:dd:93:
aa:0c:93:5c:03:4d:f9:3d:f1:19:03:94:ef:44:d4:76:94:ca:
40:93:ed:a4:4f:45:6c:d3:6d:83:60:a0:97:67:51:8c:85:19:
77:14:57:31:5c:2a:99:65:ed:04:5e:b5:60:9c:7b:2a:10:14:
a5:ba:0b:a0:85:07:cf:cf:b2:bc:e9:41:02:4a:23:83:0e:d9:
27:d7:22:9d:0c:f8:76:46:f3:f3:17:cd:87:df:a6:26:ee:b7:
6e:ec:c4:64:1e:ff:42:45:07:a3:a6:a8:78:53:12:8d:c1:8e:
e7:7d:9f:42:58:68:68:81:80:5d:7b:d2:94:2a:7f:34:45:fd:
95:7a:14:ee:6e:80:5f:42:62:f1:32:b3:3a:2a:9d:16:c0:4d:
da:96:28:da:bd:06:1b:f2:53:70:95:06:55:65:42:2b:7a:f3:
c3:da:bc:22:53:32:4c:0f:a0:6c:45:13:ad:61:b3:fb:05:b0:
fc:ee:48:15:d8:96:f7:6b:09:08:b1:9c:89:42:f9:ea:21:4f:
ca:5e:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:55:17 2024 by rpki-client on console-fra.rpki-client.org