Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: KblCTdbW6rbHF8i0XUdgfl1Vq88tq91ys8qwe+EHjb8=
Subject key identifier: EA:91:35:31:55:CD:2E:4D:92:D7:0D:AC:8F:F0:64:12:34:1E:F9:41
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 018F3FD6C70B804A9CFCCA910D6EB28BCA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0AF7
Signing time: Fri 03 May 2024 19:03:11 +0000
Manifest this update: Fri 03 May 2024 19:03:11 +0000
Manifest next update: Sat 04 May 2024 19:03:11 +0000
Files and hashes: 1: 12u8x8vGMDut6WgDoJrI_AYGx04.roa (hash: c2dgG8q+P7F/wcg44F6shoIpqRUMO0QPGPCSxZ3X3SM=)
2: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: 62LSXLbi/1RIBRBaIIdyOJwAHEiXXlX+UO7Zr19Z6sI=)
3: nvSKQC4enRQvOWpiYUoyaCuLDaU.roa (hash: FKHmSpbqoLL9LSXAFM++mO91SIsWppSHEQnG4xGF8Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 19:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:d6:c7:0b:80:4a:9c:fc:ca:91:0d:6e:b2:8b:ca:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: May 3 19:03:11 2024 GMT
Not After : May 4 19:03:11 2024 GMT
Subject: CN=ea91353155cd2e4d92d70dac8ff06412341ef941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:d5:5d:c6:15:2f:60:f0:d4:bd:20:06:2e:
99:ba:68:6e:34:bb:51:3f:ec:9a:29:57:6e:fc:cc:
b2:0b:27:98:b7:e3:fc:a9:44:1b:14:52:f4:74:0b:
8d:10:6e:fc:43:0c:e0:bd:28:80:67:91:06:86:d5:
82:c9:17:db:39:59:c8:7e:3f:66:c2:b1:69:0b:28:
a3:3d:3c:8e:d5:e7:c1:4c:63:52:6c:62:6b:6d:0f:
f0:a6:1a:81:44:2a:03:4d:67:9e:b1:b0:fa:58:d6:
b3:03:2f:9d:bc:c2:02:70:c1:57:88:95:22:ac:74:
ee:9d:87:7b:e7:61:c4:df:bf:21:29:08:d5:15:63:
b1:26:f9:5b:ee:ef:33:d6:20:f3:fa:8f:76:40:e2:
d0:8d:c0:bb:33:58:ba:70:7c:66:90:ed:a9:e7:dc:
28:d6:c0:87:39:dc:5c:db:3e:6d:5a:69:b6:57:e1:
ce:5c:82:52:39:0a:0a:0c:15:fb:df:82:a3:f1:ee:
27:24:9b:d9:15:59:5d:99:3f:24:ea:db:6a:14:c2:
6e:41:3a:38:92:07:f3:bd:89:55:78:d3:ca:a5:9f:
59:f7:81:61:b7:30:57:39:e5:d5:57:90:08:9c:38:
e5:5e:70:29:1a:e0:e5:30:03:7c:72:87:87:40:66:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:35:31:55:CD:2E:4D:92:D7:0D:AC:8F:F0:64:12:34:1E:F9:41
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:bf:b3:43:7d:43:48:f0:c2:c2:32:71:cc:89:10:bd:f5:
1b:cc:a1:a7:7e:dd:7b:36:46:35:09:51:68:ab:85:e1:60:59:
ed:28:94:2d:20:57:18:ff:ed:a3:42:7a:bc:f1:49:69:53:99:
80:13:bf:39:f3:27:83:e0:4b:12:ac:e4:37:75:2d:4d:c3:21:
80:04:83:51:c9:d8:f3:14:cc:b7:f5:fb:09:a1:4f:8a:ae:cd:
c2:36:aa:6a:0a:be:de:73:10:82:50:55:79:80:d1:41:ec:76:
74:8e:f4:0a:d5:d0:f4:e8:9c:fc:2b:5c:bb:7e:91:db:3b:7d:
7e:91:b0:0d:c9:49:ca:7d:e6:7f:d8:13:97:b2:21:62:79:72:
3e:4e:c1:8b:72:d1:6f:ad:6d:9d:a7:79:45:5e:86:e2:f8:07:
d0:72:90:f6:6b:2a:4f:96:b6:00:8b:86:5c:69:61:cf:8b:dd:
62:9c:fe:81:d2:6d:bc:66:9c:2f:07:8b:76:33:d6:d4:8a:3c:
68:90:1f:b5:5f:6b:21:7b:84:62:61:15:c3:d3:2d:a2:8c:ab:
bb:0e:9a:78:b0:f9:a9:7b:8e:3d:c6:99:8f:24:04:e2:50:6f:
4e:3f:46:fe:86:eb:7e:ea:dc:b1:a8:50:09:95:f5:7c:3c:9b:
d8:c2:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:55:19 2024 by rpki-client on console-ams.rpki-client.org