Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: jCyBP5yxD5RuD4gb0AuJX8J6Em482G/MdYsXELW+dsA=
Subject key identifier: 34:DB:24:0F:4F:64:5B:88:56:CD:19:A8:55:F9:B2:1D:52:5A:75:78
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 018F40B0BEC2022204D4A8ABBDCCD159A57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 051F
Signing time: Fri 03 May 2024 23:01:15 +0000
Manifest this update: Fri 03 May 2024 23:01:15 +0000
Manifest next update: Sat 04 May 2024 23:01:15 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: bOQ60eun7tSmwECaWsI+KDoeKi/gTR1oUFTq3NTWIUI=)
2: ESIPKtG6AoOSyUPwfJTZyZJsqNU.roa (hash: zR2AbNVFcmwb4RZGRN7/TAkW+GRcJUfjK0YuwiH6Esc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:b0:be:c2:02:22:04:d4:a8:ab:bd:cc:d1:59:a5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: May 3 23:01:15 2024 GMT
Not After : May 4 23:01:15 2024 GMT
Subject: CN=34db240f4f645b8856cd19a855f9b21d525a7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:2d:4b:30:fc:78:8c:4e:13:0f:0e:6f:6d:
f7:be:e2:01:f1:49:a4:6c:51:85:f8:06:e1:49:52:
91:d4:dd:a7:8b:36:3b:7d:c1:92:f2:a1:5f:69:8b:
ad:d1:c2:b4:a7:18:ac:14:39:d6:c8:7e:56:c9:40:
49:b8:75:66:a9:80:91:61:dc:34:bb:48:ef:50:df:
87:bd:76:59:f6:4e:77:b1:44:38:2e:d5:9b:a7:60:
cc:88:7a:08:e6:77:5b:2a:79:fd:74:43:9b:93:3e:
c2:80:52:7a:3f:14:ce:57:cc:06:15:b9:af:b2:08:
9c:06:29:42:8a:f4:e0:c5:45:c3:a0:ac:01:2e:83:
8e:c4:03:92:b1:35:6d:2f:78:cb:85:4b:84:ea:5e:
aa:ba:9c:5e:35:bc:f5:84:cb:45:b1:aa:01:78:f9:
15:50:1f:46:8e:2b:1c:1a:8c:92:e5:f0:25:8b:c0:
e8:fe:be:e4:a9:f6:b1:32:c8:69:0a:64:94:65:57:
6f:eb:6e:d5:e6:f1:58:3a:cc:51:a9:00:3e:28:c7:
8a:e2:52:55:c1:1b:d6:e5:9e:52:f6:a8:5e:06:d9:
66:c4:67:0e:cd:58:5f:c2:1d:66:a3:07:26:87:6e:
f8:91:5f:19:ce:31:bc:ea:7c:a6:cd:f0:54:d5:42:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:24:0F:4F:64:5B:88:56:CD:19:A8:55:F9:B2:1D:52:5A:75:78
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8b:60:68:e2:e9:d8:66:c2:e9:e7:f0:18:87:47:ac:5a:b3:
2e:38:6c:ca:f6:80:de:49:76:0f:19:52:b3:cf:54:90:2d:8d:
70:e2:ba:67:cb:cc:2a:a3:4f:24:22:a9:2e:c1:f3:a7:80:32:
03:aa:46:5c:5b:5d:62:a0:b6:a6:da:5c:b0:4e:6a:94:f8:6d:
72:4c:25:6c:0f:0a:26:f3:be:0a:89:6f:14:47:6e:7c:9a:c2:
77:66:18:11:b2:ce:4e:78:b6:95:eb:63:4a:a8:ac:2a:08:01:
46:8e:dc:20:61:b8:dd:b8:fa:e4:48:c0:06:76:5e:61:51:d1:
5f:76:dc:69:c7:fb:2b:94:61:54:3f:19:7d:4d:67:af:56:b2:
72:f1:62:97:11:7d:3c:c0:c5:5c:8c:e4:32:3e:19:ce:ab:37:
6b:4a:d9:73:90:1e:54:75:21:1f:db:fd:e1:2c:75:68:a4:bb:
fa:7c:17:c7:d2:ef:d4:66:6d:d6:46:d8:e8:88:31:7a:74:e9:
7f:87:49:f3:dc:c0:66:92:86:c3:29:a4:c7:98:6b:36:c4:ad:
85:9c:42:2a:f2:c9:0b:21:17:78:8f:d6:13:71:8a:d8:ff:b4:
16:a1:91:5f:ca:4c:b8:bb:98:49:84:79:50:92:45:32:08:bb:
c4:4a:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:57:08 2024 by rpki-client on console-ams.rpki-client.org