Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: aQU6igZwOhef2gGgtwh4lS6s+bBThwXs+rTeOVqJDI4=
Subject key identifier: 2C:9C:07:09:52:E1:36:7A:91:EB:18:36:20:33:ED:6E:21:4E:80:E2
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 018F40B0EFD50DEE101118DDEC008C3C012F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1155
Signing time: Fri 03 May 2024 23:01:28 +0000
Manifest this update: Fri 03 May 2024 23:01:28 +0000
Manifest next update: Sat 04 May 2024 23:01:28 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: YutTjwtYZVC9I1kd7Eo3IBV2bpT00D3oTbEtIXIZHU8=)
2: FBevNVdGzc90SmREOehrkifzTQY.roa (hash: q3uETH2B+BYaB5gpQvVxjFLw2k6GuRijGsgPY3vkBII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:b0:ef:d5:0d:ee:10:11:18:dd:ec:00:8c:3c:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: May 3 23:01:28 2024 GMT
Not After : May 4 23:01:28 2024 GMT
Subject: CN=2c9c070952e1367a91eb18362033ed6e214e80e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:2b:64:93:18:e8:40:4c:77:63:5a:67:85:
c2:f9:e8:66:3d:bd:d9:1e:39:fa:b9:ca:a3:91:2d:
a9:40:77:d9:4e:5c:24:86:2e:c1:ee:5b:77:c4:30:
5b:08:68:53:ea:b4:52:78:22:28:d7:00:4f:50:32:
99:5b:1e:10:d4:5f:2d:0a:cd:5b:da:0e:c5:ca:85:
e8:18:36:8c:6f:b1:17:71:05:c1:dd:71:e1:21:4d:
dd:f8:92:23:1a:90:ce:4b:d4:bb:eb:7c:e5:84:6e:
1c:14:f3:1a:d3:a7:d3:8d:27:9c:ae:1a:db:cb:9f:
5d:76:2d:1b:c0:1a:28:0e:7e:56:46:73:99:f9:e5:
46:42:fb:72:eb:7c:56:41:c4:47:7a:60:b7:82:5c:
15:be:ac:86:51:73:49:9c:4c:f7:90:f5:6d:a8:fd:
85:9c:15:4a:21:59:61:7d:a4:fe:77:9b:11:97:d3:
f5:c1:4d:fd:be:06:0c:d3:8f:54:b1:28:f1:8d:c2:
9d:02:5c:02:04:e2:cf:0f:89:85:b4:19:b1:75:55:
d0:97:11:e8:21:6c:a4:a5:6e:34:86:ea:e4:cb:a0:
8a:1d:97:e4:e5:19:5b:76:ab:4f:2b:7a:d7:01:e8:
2f:52:c0:37:90:1d:c5:66:63:76:3f:cc:71:aa:df:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:07:09:52:E1:36:7A:91:EB:18:36:20:33:ED:6E:21:4E:80:E2
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:35:99:37:79:9e:93:10:43:98:d2:d8:14:14:29:c2:09:
6e:82:cf:b1:ac:ed:10:bc:a1:3e:5d:a8:e7:ca:8e:ba:4d:3b:
2b:85:94:8c:1f:c7:af:d1:c3:39:03:4e:7e:8c:a4:ff:19:a1:
71:af:0b:87:a7:0e:75:60:41:4f:4d:1f:06:00:79:8f:4d:60:
95:19:91:ca:68:3c:8b:37:e9:23:4e:9e:1d:17:31:6e:78:9f:
92:f8:c2:a2:04:94:c5:fe:ef:a1:fc:77:11:b2:87:03:9e:3c:
a6:9c:56:a1:70:9e:58:3f:84:ac:ac:fa:d0:c3:24:a7:33:c7:
77:5b:1a:ef:7d:70:2f:89:dc:46:a4:51:11:57:62:ea:ac:ac:
db:cc:b9:d3:98:8f:2f:df:f2:7c:d4:76:45:12:df:cc:bd:d3:
a1:a7:8a:91:8d:9b:de:32:e4:a5:dd:28:ff:1f:7e:15:b6:c0:
e4:af:50:0a:22:c0:46:cc:0a:e3:61:e6:65:7c:10:60:0a:7a:
d4:0e:ec:d9:01:c8:0b:83:61:7a:eb:87:56:fb:e8:61:dc:03:
c6:60:f8:91:59:99:88:93:26:67:d3:68:2e:f9:83:30:96:6a:
f7:c2:c0:bc:67:3c:d6:a7:7b:47:0e:8b:b0:21:ba:9a:1c:6b:
34:25:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:24:32 2024 by rpki-client on console-fra.rpki-client.org