Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: 2nGiaD57R8aGEMqmyC0q7XWQKelaqp4ZkPNkxArTnQg=
Subject key identifier: 54:A6:15:7E:3E:7C:D5:50:62:55:94:55:81:FD:81:E7:55:03:EA:2E
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 018F37092B20FCF65158C25739E7560ED6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 114F
Signing time: Thu 02 May 2024 02:01:38 +0000
Manifest this update: Thu 02 May 2024 02:01:38 +0000
Manifest next update: Fri 03 May 2024 02:01:38 +0000
Files and hashes: 1: 00f52rJWZHoEhyAc0cMjhbELFdc.roa (hash: +FbHsbGVuLEvfW3rSyCrLs2JA4sUBc1RheZ4McGckEI=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: AopouuWUE1cUSiVybQI0pI/lGh9+nC/StjCb/ea1V5Y=)
3: qzolONgpdLduC_iwA77zEKUS2JM.roa (hash: D1Dg5EXj9ubiUMBjFgMweNEMaKLNb4xk3iFn1Ubg40Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:09:2b:20:fc:f6:51:58:c2:57:39:e7:56:0e:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: May 2 02:01:38 2024 GMT
Not After : May 3 02:01:38 2024 GMT
Subject: CN=54a6157e3e7cd5506255945581fd81e75503ea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:6e:3b:eb:22:a2:96:51:25:e1:12:e0:6d:
ca:79:46:b4:3d:2e:b0:10:50:bd:e4:41:1b:29:d0:
42:f4:ad:dd:6d:e9:82:43:7c:c2:b8:d3:ea:06:35:
4c:23:2b:6a:fe:1c:06:e0:86:19:10:33:3e:ac:62:
d5:d2:09:b4:5e:00:ab:9f:dd:0b:b9:21:b9:cc:ec:
77:54:be:f3:9b:77:75:bb:c5:fa:34:32:60:9c:f1:
9f:91:ae:83:e8:fb:96:62:20:cf:b6:67:57:d0:e1:
81:40:26:d8:bd:41:71:22:c7:c1:bb:cd:71:e6:d2:
0e:11:0d:95:8b:7e:25:17:54:13:d5:ef:27:3f:52:
fb:02:62:1c:5a:91:64:bc:7e:75:e5:da:66:d4:61:
81:32:d5:fa:8e:99:1d:88:b0:e0:00:09:29:c8:6a:
b9:be:ea:9c:3e:48:f7:bd:14:07:40:87:e8:28:ad:
fc:3e:44:6a:01:f7:d5:55:d9:e2:ab:58:50:40:62:
32:32:18:c9:33:37:2e:3b:d4:00:2a:60:9d:01:b0:
74:33:f7:bc:53:ff:7a:30:0b:e7:ba:b0:03:5d:ea:
a3:ae:99:63:2d:36:69:96:94:23:15:4e:76:a9:36:
63:d1:49:b1:6c:c3:39:58:a7:0c:89:ab:60:61:ad:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A6:15:7E:3E:7C:D5:50:62:55:94:55:81:FD:81:E7:55:03:EA:2E
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ea:7b:62:0a:6a:a5:ed:76:a2:a0:6d:2a:d4:00:94:4f:04:
d5:b8:8d:0d:e3:a5:9b:1a:a1:63:3e:f1:9b:4d:84:ce:17:be:
8e:57:5f:5c:f7:53:20:5c:c4:56:27:38:ed:dc:a8:73:36:f5:
81:45:2b:85:b4:aa:3e:65:0f:bf:46:36:52:08:4d:cf:a4:7c:
21:6a:a3:70:5b:58:7e:ff:f5:e0:47:a2:71:8a:d6:4e:86:a9:
5f:23:9d:34:1e:1c:0c:e2:24:ed:06:7f:9e:a7:6d:dc:21:3e:
29:23:8b:ca:26:ea:ac:86:5e:92:68:03:b2:73:1b:75:b5:54:
b6:7a:af:7c:a9:b8:09:98:bf:ca:7f:cf:e4:fe:83:8e:f8:c3:
a9:ff:66:bc:f4:53:cf:82:8a:87:19:18:0a:f9:9b:65:3e:05:
6b:68:1c:a7:2c:a3:bc:64:6e:ca:09:ee:7a:78:9c:21:a7:46:
1a:82:98:6a:ab:c5:b8:2a:14:27:35:11:4b:cf:b8:e0:dc:4f:
2c:f0:c5:41:e0:03:0d:ea:18:b9:a4:9e:15:19:6d:2e:10:09:
dd:d9:a1:0a:bb:7f:74:fd:1b:19:22:a5:c8:c3:54:17:f5:3a:
d6:d1:ac:6b:21:ee:a4:2b:b4:7f:af:85:93:f7:d0:ac:83:5a:
e2:98:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:42:41 2024 by rpki-client on console-fra.rpki-client.org