Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: kIJ4j4Uv/w5AqjFl4VrhTPwvWJaP5IJZEyjrF9QWG6I=
Subject key identifier: 35:30:E3:69:33:C4:C9:74:2A:F4:F6:97:E1:C3:2F:F6:14:D9:8A:7D
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 018F885B372FD301640B7ABE4DA4A9179FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 21:00:30 +0000
Manifest this update: Fri 17 May 2024 21:00:30 +0000
Manifest next update: Sat 18 May 2024 21:00:30 +0000
Files and hashes: 1: X09m5veglZVTaGBhiz8yhFMk29g.roa (hash: 0IDbpR/yWp9Tn2zlquMIJEcqNoFGnW94gI3tb5h8hGM=)
2: XsUJz6q2mgu5GYYvhy46s3JTAYc.roa (hash: fEco5yjs3CTshdCds24mI3Ob6CKrcbl+s71pYpVAbPA=)
3: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: 6N0MklB6XcyJLcg1aDC66CAqXnRA8yMCjTkmITQHwjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:5b:37:2f:d3:01:64:0b:7a:be:4d:a4:a9:17:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: May 17 21:00:30 2024 GMT
Not After : May 18 21:00:30 2024 GMT
Subject: CN=3530e36933c4c9742af4f697e1c32ff614d98a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:91:cc:e1:c5:35:04:64:b9:b2:f4:49:52:
32:5b:a3:af:51:0b:1a:c3:e6:55:7c:c3:e5:a5:4f:
7c:7b:80:2e:24:35:0a:ee:32:42:6a:59:75:ec:6f:
66:e7:a0:9e:51:50:0f:45:58:05:3b:f0:52:ce:e9:
62:ff:e7:71:62:c5:07:bc:a6:8f:b2:1f:61:0d:2b:
ac:93:46:ad:0d:8c:6f:62:60:90:be:f5:fa:06:a9:
bf:f8:79:ce:8d:f2:3c:b3:0a:8b:0a:d6:90:42:4c:
69:d2:03:d0:82:22:33:24:9f:78:e7:f6:ce:24:f0:
9c:54:b1:b5:3b:67:04:a5:73:e9:28:18:26:17:c4:
e7:80:2f:36:36:05:92:f4:87:35:29:43:7f:25:c8:
ce:2d:2c:d0:96:bb:7e:94:de:34:44:98:5e:bd:e0:
c7:15:29:7f:db:28:1b:4f:fc:34:cd:f8:64:d2:de:
3e:13:ce:1a:43:30:e4:c6:31:46:0c:d4:7b:18:74:
20:85:12:08:5c:27:f2:66:73:45:e0:d5:6e:db:66:
81:eb:6b:80:38:c1:05:42:ed:22:67:f6:9f:cb:25:
a8:5c:ce:8b:fe:2b:f6:2d:38:d0:a1:25:99:68:4d:
34:e4:45:ea:f8:70:86:4f:a7:6f:4c:b1:96:7d:f9:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:E3:69:33:C4:C9:74:2A:F4:F6:97:E1:C3:2F:F6:14:D9:8A:7D
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f1:0a:29:aa:04:05:58:4b:f1:da:50:b4:83:0b:c5:49:c3:
74:2d:5e:19:b3:b8:8d:5a:08:0d:6c:10:7f:00:25:27:ec:87:
c8:55:13:2a:23:10:f1:14:da:18:db:a7:1c:8e:bf:e0:52:86:
ce:17:05:6b:43:fb:30:ef:96:66:8c:ef:37:4f:b6:cf:6a:25:
43:13:29:f3:89:14:23:24:01:2a:9d:27:40:f7:5c:30:cc:3a:
1f:6f:97:32:98:90:81:db:10:52:28:ab:bb:a1:83:28:47:9d:
fa:16:1c:f4:21:66:af:0a:4a:75:a3:56:ff:fb:7f:f2:0f:13:
2a:fc:0a:c1:8a:f0:61:02:d1:b5:36:13:7e:ab:d9:94:8e:e9:
b4:e0:43:96:9a:fb:e2:a9:9c:33:48:a3:20:af:70:46:09:c1:
b5:7f:ef:af:2d:46:95:7e:6b:5a:e9:a1:cd:1c:62:f8:d3:41:
b8:e1:bc:a0:b9:9c:46:e8:78:cd:57:82:42:a7:b2:fa:6d:00:
9f:52:fa:c0:21:54:89:45:b7:71:7a:8b:b4:78:9c:1c:04:35:
2a:57:9f:fc:73:71:d3:ce:88:2a:e7:7e:f5:89:e1:24:1e:02:
9c:fa:eb:5d:7b:5e:93:ab:35:57:11:18:c1:aa:10:39:09:b4:
33:39:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:50:38 2024 by rpki-client on console-fra.rpki-client.org