Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: RHQ4nFM3homoA0HFcoFpWpUhzSCqzfmhnnoX/f3xMgM=
Subject key identifier: B5:16:2A:3F:C2:27:BD:22:AA:E7:19:CE:DB:D8:B7:0B:C1:17:F9:DF
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 018F8749B5671D1F703F17DC6C9397A009F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0A95
Signing time: Fri 17 May 2024 16:01:45 +0000
Manifest this update: Fri 17 May 2024 16:01:45 +0000
Manifest next update: Sat 18 May 2024 16:01:45 +0000
Files and hashes: 1: IgCNDiq94eBMFzclPzjNkNj84no.roa (hash: 8hfOCc3dzP4pUlUFf3fI1EIYLtpzSeSU0tEUHJYsOXY=)
2: OfvB4ee17sKpCCe1yumqdMFS5kw.roa (hash: F89+ZJMqjzhlOuDccejBpmbO0rjbt0D9cT4qFCSaOZ0=)
3: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: HGZ4snx15sFTpR85Mll5NEeT/PXBiuPllRM01MyZKfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:b5:67:1d:1f:70:3f:17:dc:6c:93:97:a0:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: May 17 16:01:45 2024 GMT
Not After : May 18 16:01:45 2024 GMT
Subject: CN=b5162a3fc227bd22aae719cedbd8b70bc117f9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:b8:ea:97:74:0b:73:b8:8e:59:26:ef:9a:
09:38:80:f6:56:97:78:9a:5f:5b:76:6c:f1:f1:c3:
60:dd:53:dd:07:d4:88:0f:a8:22:95:58:a4:ca:43:
33:c1:ed:cc:2f:be:ec:9d:3a:5d:8a:f5:b5:31:e1:
a8:20:3f:60:54:15:18:b8:f3:44:87:a9:58:10:00:
e3:46:12:94:40:4e:ed:1a:fc:8c:3d:ef:e6:35:1e:
a6:c8:db:bc:76:dd:a3:c5:eb:c2:87:0f:c7:6c:49:
01:99:ca:0b:13:47:f0:a1:a4:48:09:ed:b4:98:f3:
4e:c9:b0:1c:9e:df:0f:64:35:b9:d3:cb:d1:eb:8a:
32:db:17:1d:d4:29:5b:59:02:e0:ea:df:c1:2b:5a:
dd:77:73:f6:fa:4c:a4:ae:5f:d6:1c:dd:4e:57:d7:
6c:cb:d7:f8:67:8f:9b:90:bf:65:f6:a9:e2:ab:0e:
47:d0:17:76:d9:d9:ea:b9:24:6a:ce:8e:dd:43:b7:
0d:3a:6c:2f:9d:e5:41:91:68:6e:46:98:3c:a0:7d:
e2:33:08:42:c6:dd:22:48:08:f0:f2:31:5f:77:bc:
d7:d5:df:4f:8d:f5:59:fc:5c:9a:cd:a5:66:bd:46:
f8:52:9e:95:1a:f1:6d:e4:c3:cf:85:b8:e4:78:8d:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:2A:3F:C2:27:BD:22:AA:E7:19:CE:DB:D8:B7:0B:C1:17:F9:DF
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:f2:51:48:0e:87:cd:67:82:41:88:50:b7:1c:64:9d:70:
39:b9:24:27:f7:b5:0e:ee:d8:f3:fb:ef:e6:1c:89:2a:6e:48:
92:29:b5:35:79:9c:a9:53:92:2c:55:39:9e:e0:88:62:4a:0c:
48:1d:21:41:93:3f:27:5c:66:2d:79:6d:96:13:ae:22:70:24:
cf:ad:54:cb:43:d3:81:f7:45:ad:7f:a9:bb:b9:f6:14:95:15:
86:2e:6f:5f:0a:03:1b:67:0c:d2:4b:fa:99:50:12:32:57:f4:
22:ec:f9:62:9e:6d:64:05:3c:16:b4:c3:7b:e5:52:5f:cc:63:
7d:13:ab:29:7a:45:c4:c2:db:ff:7f:2d:52:14:ed:bc:3d:62:
3a:a5:97:34:ca:ec:19:ed:ad:4c:00:dc:4e:53:33:9b:cf:11:
4b:96:7d:23:5d:4e:18:5e:51:c2:ca:02:cf:5e:f7:93:4e:0b:
16:cd:06:8f:cd:ab:d5:56:f2:90:f8:55:1e:6b:72:32:fc:56:
86:f4:c0:96:b0:a9:5f:e0:b5:7c:fa:b2:19:99:e5:93:d9:fc:
71:1c:b6:f0:39:8c:32:c3:30:69:9c:3e:a6:02:9d:8e:7c:0d:
57:d1:d3:15:27:6b:77:74:c2:1f:3c:67:b7:00:ba:57:14:2a:
ec:61:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:14:49 2024 by rpki-client on console-fra.rpki-client.org