Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: apV2b5n/JxJLTirLghLgUTDlifOQ9hRG2tNZwCNbTgM=
Subject key identifier: 3A:B9:45:BC:17:57:A6:BD:AB:D2:AA:67:7F:D2:C5:13:D2:11:12:90
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 018F874847598BEEA3010244D5D4EBCC3D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 117C
Signing time: Fri 17 May 2024 16:00:11 +0000
Manifest this update: Fri 17 May 2024 16:00:11 +0000
Manifest next update: Sat 18 May 2024 16:00:11 +0000
Files and hashes: 1: GllneJsOvkbNWGFoIpSB46bkf40.roa (hash: Ye1KUdV2nIqvT74ScmbpLZeA5G+fCHiqth7X+a5b2SQ=)
2: IpEVMyNqW7hxc4zShK2ZSuOl0nQ.roa (hash: pycniZZSfh5l1bTeOmLpuBa25Hf5f5HBO08nF4dGNxQ=)
3: KPIGTz0WSENQCh6uJN7IdWjJ5oU.roa (hash: q/4pfSZAG3LYOVTpAnJm7KSEFurpUhYTbRb7URc7zKI=)
4: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: KOas6JilZxRuPRd6MdUAdHyQ0DnQVp7cuIekaDaEPt4=)
5: qL27UohQTzm4QCE38AYMY8jF020.roa (hash: qbZEfi3sgrwfezgKn66BSvMt5Bkdpo+Y1aMmbtPIIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:47:59:8b:ee:a3:01:02:44:d5:d4:eb:cc:3d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: May 17 16:00:11 2024 GMT
Not After : May 18 16:00:11 2024 GMT
Subject: CN=3ab945bc1757a6bdabd2aa677fd2c513d2111290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:69:91:da:5c:78:9c:e4:28:5b:e1:e9:8e:
cd:de:0e:b3:74:04:d5:7f:40:95:0e:d4:9b:46:b0:
2b:1d:e6:f5:9b:9e:92:16:ba:b1:c0:3e:51:d1:59:
b8:6c:88:bc:ed:e5:8c:fa:f2:b6:e1:59:4c:d2:a6:
a2:25:68:ea:ca:d3:53:2f:dc:9c:55:a2:bd:81:16:
03:02:8b:38:5f:56:54:45:44:ca:c4:32:ab:11:37:
e2:86:d8:a8:66:80:df:af:4f:ad:30:2f:9e:72:4a:
24:8d:88:f9:55:1e:29:3a:0e:f2:64:ad:f1:9f:94:
dc:c0:a0:63:2d:c1:be:a2:6d:f3:2e:ff:59:3e:0a:
86:f9:bd:f2:6b:87:af:4f:8f:61:9e:36:47:cc:8a:
b5:c0:c8:f4:f0:a6:b5:99:7a:92:b9:a5:d3:c9:62:
d2:4f:01:78:8c:5e:32:cd:ac:5f:a6:4c:93:29:e5:
d7:93:38:bd:32:b8:f0:48:2a:df:29:78:0d:f0:fe:
2b:42:90:14:6b:98:de:77:9a:62:d5:47:e6:dc:6b:
80:f5:26:bd:12:4c:c7:d9:20:9b:c4:51:50:8a:33:
b0:b6:a6:9b:ef:12:f5:39:7a:cf:51:af:a5:26:f1:
72:3d:c5:78:0a:20:24:16:71:49:48:3f:ec:ed:75:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:45:BC:17:57:A6:BD:AB:D2:AA:67:7F:D2:C5:13:D2:11:12:90
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b6:75:79:3a:63:66:df:99:9f:d3:8e:05:be:e9:6c:ca:97:
05:eb:3e:93:07:fe:3c:c7:b9:69:86:97:2a:06:21:1f:d6:01:
94:11:04:20:e0:79:e0:fb:a6:1d:f6:06:a3:dc:80:00:c7:52:
21:5a:75:b1:c9:5c:99:5e:b5:8f:85:a7:74:18:89:ce:a9:cd:
a7:2c:7b:ef:8d:8f:bf:15:b3:3b:61:ab:cf:a7:ca:29:9f:ad:
07:4f:2d:0b:ac:a9:5c:e3:25:53:94:1e:d7:70:75:c7:83:09:
64:6c:2f:39:be:ed:1d:7d:25:c3:c8:c3:6f:12:09:94:da:da:
f3:10:89:12:58:cf:61:b1:c4:dd:0c:ce:65:5c:f4:49:34:b6:
c0:d8:d0:fc:c7:33:14:20:a9:38:d6:f3:c2:df:11:d5:0f:10:
00:a2:20:69:f4:b9:b6:cc:db:ac:05:8c:9d:df:bc:76:de:10:
e3:de:ea:a8:c6:5a:62:74:ba:e7:e5:1f:97:31:aa:cf:83:0f:
94:17:1b:62:10:b3:8b:d9:24:61:5c:dd:7f:5c:8b:86:cf:51:
68:72:21:ff:10:d8:13:23:bb:ea:20:33:55:cb:fb:3d:66:81:
75:c9:22:bc:40:2b:17:bf:0a:16:87:47:a8:26:9d:3a:8a:da:
79:00:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:17:24 2024 by rpki-client on console-fra.rpki-client.org