Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: OQtyLSK7h13Yx+kNVsvWaejFSyC1N1D5Tp2rpVm2Z4o=
Subject key identifier: 09:AE:CE:2E:A9:8B:02:6A:1C:B8:8F:99:C4:BE:9F:D0:B3:48:2A:98
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 018F3E8B5AB67C02FFF4BD1E2F53F004C7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 0E8B
Signing time: Fri 03 May 2024 13:01:10 +0000
Manifest this update: Fri 03 May 2024 13:01:10 +0000
Manifest next update: Sat 04 May 2024 13:01:10 +0000
Files and hashes: 1: 5tJ2W2uwWc0n9FkAYcLf3oGDcOA.roa (hash: D/nzFRW7ke30VxAfckoxafQTkQZ3F6WQy7ygmwyfEfk=)
2: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: M18UOzhHLvu+VR/uyFV+Of4272Y9P/mId8cB2RhW6gk=)
3: yjZjzoiV6eRSgmwgqXiWXMMyphI.roa (hash: XlzdyYLcw8SOdO4YHsBQYKz3zDU2AgKaTFlKRE6bamc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:8b:5a:b6:7c:02:ff:f4:bd:1e:2f:53:f0:04:c7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: May 3 13:01:10 2024 GMT
Not After : May 4 13:01:10 2024 GMT
Subject: CN=09aece2ea98b026a1cb88f99c4be9fd0b3482a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:6d:59:f7:6a:ad:87:80:22:56:cb:8c:29:
b5:f0:22:b6:d2:1d:88:80:c9:2b:fd:a9:3a:43:90:
52:9f:dd:4b:28:4c:24:91:df:33:96:a6:d7:04:37:
54:11:ee:aa:ec:0a:68:1d:0b:c7:3e:27:35:79:25:
47:40:ae:75:fb:b4:8d:0d:99:a1:ab:f1:df:97:12:
74:e1:cf:2d:2a:f7:76:c8:5c:64:a6:78:e5:04:eb:
fb:0d:96:e4:fc:4e:aa:7a:83:90:80:a4:43:8b:00:
59:39:17:44:a6:99:f9:4a:ca:26:03:74:67:f9:e6:
cd:b6:7d:48:87:16:a7:bf:39:44:30:20:34:e5:ce:
35:b1:84:34:3f:ba:a2:81:ff:c8:e5:79:3b:7a:fb:
d0:41:53:14:5b:2a:a3:3e:89:7b:dd:46:32:b5:41:
cc:81:11:77:2c:19:5b:29:f1:b0:1e:7e:13:95:c1:
84:0d:ec:46:1a:0f:0b:6c:db:b3:97:eb:23:ce:d2:
05:06:21:73:43:eb:c9:54:62:83:39:01:9a:01:4a:
2f:57:7a:f9:16:3c:6b:0e:ab:32:c4:3e:36:ff:83:
4c:0e:d5:81:24:c6:fa:b8:29:eb:96:a0:35:83:d4:
ff:4d:66:14:23:d4:6e:01:35:0b:01:d3:e0:4a:3a:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:CE:2E:A9:8B:02:6A:1C:B8:8F:99:C4:BE:9F:D0:B3:48:2A:98
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:95:59:9f:6a:0e:25:94:50:c3:45:5c:af:c3:7c:c8:5e:ec:
3d:9a:d3:61:7f:2c:7a:b6:74:b0:4b:e9:07:83:61:54:da:b2:
8b:e8:ab:30:79:e1:7b:d0:ad:e8:72:2a:b7:76:1c:3a:0e:26:
0f:76:22:9b:d6:78:95:58:0c:29:f3:bd:e3:b4:82:95:cb:d3:
da:b8:16:be:92:64:14:7e:f2:89:ea:85:3a:14:72:cf:42:6a:
dd:b5:be:db:bc:cc:f9:dd:f0:2a:d4:7a:86:44:1b:64:48:cf:
19:9d:0a:6f:db:0e:d3:a1:62:22:57:e2:60:a2:e4:3e:32:7b:
f4:c1:5a:a0:af:f7:1a:0e:df:7c:47:48:79:f6:32:c0:34:66:
04:38:ec:97:47:4b:3a:a3:32:c4:71:fe:b6:ce:59:85:5d:64:
c2:90:79:e4:d3:11:0a:8c:9d:0e:81:49:10:55:ba:65:e7:25:
08:63:61:ee:46:55:89:b4:cf:f1:33:00:13:ae:aa:a2:a8:57:
2c:e3:18:db:6a:d6:42:2d:58:8e:de:5e:2a:6b:36:a4:8b:fe:
88:ae:a5:f0:3e:b7:0e:d8:fa:a8:24:01:1c:d1:5e:0e:bb:17:
c0:66:2f:23:5c:97:2b:75:49:d7:2e:b2:83:76:3a:23:12:5a:
a3:ef:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:46:23 2024 by rpki-client on console-fra.rpki-client.org