Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: BHu6j0p+CluZtTfHzcO6CWWqXiL0fJJD0wLnBJN45uY=
Subject key identifier: 14:68:84:A6:98:11:44:82:AB:2E:FE:FA:D7:CA:48:D1:47:32:00:18
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 018F41C3DB94FC53AC20AD6B792476B765E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 115A
Signing time: Sat 04 May 2024 04:01:45 +0000
Manifest this update: Sat 04 May 2024 04:01:45 +0000
Manifest next update: Sun 05 May 2024 04:01:45 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: 8oc4tB53ChsmKwXqZtA7I45RBEDm9z5LOuoL3M3jx6A=)
2: _4SdtYgwornflH0iPJrvWJoA3y4.roa (hash: 275vhxsObzLKxm+j2A8f9rXQHuNP+vDl4uTbmqbs6Sc=)
3: b5x8sPsVQYwGUUMSgy83OocwujU.roa (hash: iaZzduoGCrgXxTasTlKyjfvIsLTmaHcSdRfrLBQ1VSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:41:c3:db:94:fc:53:ac:20:ad:6b:79:24:76:b7:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: May 4 04:01:45 2024 GMT
Not After : May 5 04:01:45 2024 GMT
Subject: CN=146884a698114482ab2efefad7ca48d147320018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:0d:71:de:9e:0a:ae:b8:6c:6b:d8:21:d4:
ec:c5:28:c4:86:c3:c0:72:37:9a:a4:bc:be:40:ea:
98:c2:1c:00:93:9c:b0:74:41:83:de:31:b9:4e:35:
50:6f:69:8c:5c:8a:d9:72:f8:1c:3f:38:9a:95:d1:
68:f0:b7:ba:ad:ea:ea:dd:0e:9a:e0:1b:66:9a:58:
f8:04:24:02:50:de:5a:37:e9:d2:64:b0:d3:e6:14:
29:88:4d:b4:e5:4f:02:0e:7f:79:38:a7:52:3d:52:
96:ba:e0:9b:a6:2b:75:85:3e:53:1a:45:8b:51:de:
41:86:5c:7b:e6:14:97:c4:37:d8:57:88:94:3d:26:
9e:ae:35:4b:d4:fe:99:3d:e9:15:c5:9d:51:8c:60:
17:a6:c0:13:74:54:cf:07:d1:eb:08:12:bf:89:d7:
0f:9b:6b:05:ef:c8:a2:bb:83:e4:67:9a:73:1a:14:
0d:9f:41:d0:86:53:11:59:44:6a:1a:96:67:6f:4a:
da:dc:0f:17:a0:72:ae:98:44:54:9e:ed:2a:4a:0d:
4c:28:7b:fa:9c:16:a3:cd:d1:d2:99:18:52:43:ae:
8b:52:d9:d0:ba:ff:2a:68:3c:f9:ed:ba:36:e1:ae:
58:3d:9d:40:e5:42:5a:d9:92:1c:7f:78:d7:53:39:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:84:A6:98:11:44:82:AB:2E:FE:FA:D7:CA:48:D1:47:32:00:18
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:08:c1:9a:83:94:48:50:13:f7:a3:67:f0:c4:35:f5:58:e3:
cf:b1:9a:d4:03:b0:96:fe:d7:6e:c0:4e:c1:cb:82:9c:56:ca:
75:be:8f:d2:b1:91:40:08:39:f6:8b:4b:66:57:b3:a2:4a:82:
f8:79:ea:35:bd:59:a6:39:4d:79:b8:3f:c3:67:a2:87:ec:27:
5b:fe:b0:52:e1:7b:3b:d9:48:aa:64:fd:9e:75:a9:60:b1:6e:
c9:86:8b:4e:ec:1e:ed:5d:cf:a6:41:41:5a:5b:36:9c:e8:08:
2c:67:1d:19:48:6b:b1:e0:51:e9:58:57:5f:18:e8:7c:2e:27:
e6:5c:bd:08:bc:47:9c:41:c8:44:cc:a6:9b:ba:cc:2a:92:33:
0e:7e:e4:fa:02:5a:81:74:ca:c4:b6:eb:e8:19:b0:70:8d:70:
93:5c:40:9f:73:f3:3a:8d:d5:d9:4e:47:fc:3c:0d:ca:c4:c2:
7d:0b:a9:46:f4:c7:6f:92:63:03:5e:7c:7b:b7:8f:c0:fe:05:
cf:ab:0b:96:27:ed:0b:c2:47:a1:54:b0:bb:fc:1b:d2:9b:6a:
65:6f:b8:ab:0b:5f:13:53:d6:be:86:3c:1b:74:b1:a3:7e:d4:
47:76:85:ec:4d:e9:4b:93:37:ac:6d:d0:5b:79:35:96:46:c5:
c2:ec:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:00:37 2024 by rpki-client on console-fra.rpki-client.org