Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: 1uGsvPhbdJ7+qqSS47jOOnBYqVXbMkrGnv9T6qvK4NQ=
Subject key identifier: D2:7D:86:63:92:69:FC:73:C0:97:1B:B0:A0:70:51:9B:36:D2:13:92
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 018F8410C9A38AB806833506FCAB12E72FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 0137
Signing time: Fri 17 May 2024 01:00:43 +0000
Manifest this update: Fri 17 May 2024 01:00:43 +0000
Manifest next update: Sat 18 May 2024 01:00:43 +0000
Files and hashes: 1: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: azdDcS1rh8TMIZbmelrvx6tCItX0LMRA0AIzzXQ8r1U=)
2: sxg6VG3fdX60i8fagXcDs1e6AA4.roa (hash: 0SADIXyCeZm7tJ51Yv80vbXKlCzTPiZB9dLgnsZReeU=)
3: yixdNNBL7KF0B4qxmhviXksxk1I.roa (hash: BoKbk5HtjpkwtTLtCnsoW25K+z8jpIHQF+MvNroJspk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:10:c9:a3:8a:b8:06:83:35:06:fc:ab:12:e7:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: May 17 01:00:43 2024 GMT
Not After : May 18 01:00:43 2024 GMT
Subject: CN=d27d86639269fc73c0971bb0a070519b36d21392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:2d:0f:02:c9:4f:b2:da:54:78:ba:c0:19:
43:3b:ee:79:8a:f5:5c:b9:f0:9f:b2:aa:4e:41:20:
69:f4:75:32:2a:b7:97:ca:77:0f:ec:35:0d:60:55:
e2:36:d0:af:c8:50:04:b7:d4:1f:85:e2:3a:26:53:
3c:ba:a5:e7:26:a3:09:5c:f6:98:3d:de:72:d9:2a:
40:e3:56:69:a6:78:f2:c3:a8:84:7a:9d:f5:9c:2b:
53:ba:a6:20:34:00:42:9f:f7:37:3c:33:64:dc:c8:
47:80:1b:06:4c:60:16:75:65:ec:0a:ef:1e:89:08:
71:77:21:8b:db:90:00:a5:90:73:ae:3a:5c:ad:f7:
d2:2c:53:27:81:4c:e7:05:dc:2b:40:af:c5:09:34:
ab:3b:d0:16:8e:34:9a:f1:a1:c4:fa:68:4e:a1:51:
47:c9:46:6d:f8:6b:8f:f0:6c:8e:0b:b0:e6:56:a6:
ec:c0:9e:84:6e:59:79:9c:3d:7b:4f:d8:e9:b1:57:
f1:f0:83:aa:f3:ef:08:f8:5b:8b:39:23:b7:d4:0f:
b8:8a:c2:8c:e5:4c:1d:03:e5:62:38:31:49:a5:05:
74:7f:f5:98:ad:1c:50:8d:a2:47:8e:df:91:fc:34:
88:5e:34:27:f2:d6:a6:15:dc:0e:c2:5e:f5:9d:46:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:86:63:92:69:FC:73:C0:97:1B:B0:A0:70:51:9B:36:D2:13:92
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:a3:98:e5:d9:ad:90:04:3b:fa:45:5a:b1:65:ad:c4:c8:
f3:42:df:f8:2b:34:d0:ec:36:80:ee:08:cb:28:40:ce:89:fd:
4e:47:62:4f:55:b5:6e:28:cc:5c:8e:34:1d:8c:bb:23:4f:a4:
dd:4e:99:4b:b2:5c:e0:d5:46:a7:2c:ae:37:3d:a7:d7:43:a5:
dd:2a:f6:3a:46:36:64:75:aa:8f:db:a2:15:02:58:61:57:7b:
12:e7:48:4d:0c:b1:9f:a9:71:9e:dc:03:25:61:3f:b0:39:70:
40:1d:ef:85:6b:df:ea:82:d3:c4:c2:4f:6f:99:cf:41:08:f5:
78:eb:d9:b4:c4:4e:a9:1c:03:85:75:6d:b4:41:ce:01:87:ca:
eb:a9:30:88:f7:cb:b8:83:0a:e9:3e:0f:27:b4:5a:78:7f:42:
b8:5b:11:51:39:e5:08:8e:ed:43:d3:68:e3:45:18:32:34:58:
f9:d7:0b:b8:39:11:1a:63:91:56:c7:75:73:76:17:c0:99:d4:
ce:51:4f:8e:71:20:a7:1a:7b:aa:2d:a4:95:4b:3f:0e:27:ca:
11:11:37:f1:ea:fb:d0:77:8b:8f:cc:3e:99:39:99:b6:10:87:
46:08:ac:87:9c:33:65:4c:de:40:e4:81:02:c6:ee:30:19:f9:
85:62:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:16:42 2024 by rpki-client on console-fra.rpki-client.org