Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: zRkdAPRYe0qk0vPj54WCUonQEhBC/4p5xTjyWFGX5TI=
Subject key identifier: 12:A2:1F:D0:02:89:87:65:7D:F8:34:DE:E1:73:65:E2:53:D3:D0:74
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 018F362DE8415879B05F2CB59781C4B7910E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 08DB
Signing time: Wed 01 May 2024 22:02:09 +0000
Manifest this update: Wed 01 May 2024 22:02:09 +0000
Manifest next update: Thu 02 May 2024 22:02:09 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: oJEg+pI4hQJaBqY8zOn9rZIv3WrquZe4L+yFdZEdNes=)
2: qWj1lixQS_dOpQe0u23TprWVCsk.roa (hash: CQVKtI7zMt/dRaac/fM1mLh6HwLZzNsgWbyDT90FgCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:36:2d:e8:41:58:79:b0:5f:2c:b5:97:81:c4:b7:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: May 1 22:02:09 2024 GMT
Not After : May 2 22:02:09 2024 GMT
Subject: CN=12a21fd0028987657df834dee17365e253d3d074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:af:73:91:86:7b:49:4d:e3:13:66:d2:e7:
00:f4:09:6f:5c:16:c8:17:2f:7c:cd:d9:64:f4:6f:
5d:b4:b4:77:d6:ff:29:35:9b:64:a2:c0:13:49:e7:
d5:4a:e2:a4:41:c9:78:ee:aa:4b:77:11:34:82:f4:
2c:cd:f3:83:bb:b8:66:d3:09:bb:1b:b5:16:9c:db:
e8:17:84:84:9f:0a:67:22:86:f6:43:d9:de:3a:bb:
9d:3c:57:9a:f0:81:79:ad:dc:79:ee:d3:63:99:1c:
97:b8:7c:3e:bd:b2:7a:54:91:2e:c9:69:7e:80:1b:
d9:9f:d2:f9:46:7b:f8:7b:53:61:9e:4b:ef:45:4f:
c3:0d:3d:6f:d2:6f:e4:fa:2d:e3:0d:28:dd:92:d1:
54:f1:c2:af:2b:82:ba:ef:87:1f:6b:4f:d6:eb:11:
71:91:1b:ff:43:74:64:e4:43:c9:8a:af:78:d8:6a:
92:0e:8c:b3:96:47:fc:7e:6a:53:49:15:77:f6:3a:
ec:a1:71:7d:f8:7f:62:95:07:7a:8e:89:b2:c7:70:
f8:a5:21:6e:79:9e:2b:40:20:68:2d:5f:f0:d9:7c:
29:30:21:a3:7e:a2:4b:73:a0:f3:61:28:fa:24:fb:
c5:22:a8:b8:07:81:1a:48:34:22:64:f1:94:a5:e8:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:1F:D0:02:89:87:65:7D:F8:34:DE:E1:73:65:E2:53:D3:D0:74
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:f5:e4:3b:c4:f1:ec:e8:c9:1c:d5:92:a4:0d:1e:58:7c:
6b:7f:25:dd:af:5c:5a:86:f4:e7:2e:e8:f2:5e:b5:c4:8f:ec:
0f:87:7d:83:89:d2:97:9e:61:f5:71:70:96:a9:a4:33:12:70:
8d:ed:44:c9:0c:ac:58:e9:c1:cc:eb:e6:68:a7:61:ee:96:03:
4d:8a:3f:05:7b:93:d4:78:cc:66:3d:3e:00:89:22:f9:e0:1c:
3a:2c:e2:a9:f4:80:2e:44:d4:da:90:94:d2:e9:04:b4:4a:14:
1f:7f:0c:61:81:5b:6d:da:e8:29:de:e3:3f:ca:1a:45:96:b9:
09:ea:a3:6d:7e:ce:da:09:d5:b4:61:71:b4:ce:80:07:94:eb:
9a:89:fc:26:a5:3b:0b:c8:50:ff:ab:39:0d:16:69:66:b9:11:
41:80:39:ed:95:58:23:52:91:37:68:85:06:57:12:4d:6c:83:
db:56:de:f2:7c:7d:c4:73:55:46:f1:98:54:3b:0f:9e:46:bd:
a3:f9:67:84:a5:4a:23:b1:fb:2a:ee:e2:9c:cf:47:cc:e5:12:
8f:bf:43:9d:12:bf:29:95:58:e0:f3:36:3d:bf:d7:59:9b:2b:
c2:8b:3d:51:cb:3a:1e:f8:72:fb:ed:06:a7:f3:74:14:89:3f:
2d:d3:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:45:55 2024 by rpki-client on console-fra.rpki-client.org