Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: EZ5Oz8Oaimv3UMnhFTHHQ+P74VfPowu1A9AaibmBIsQ=
Subject key identifier: 33:DD:D6:1E:26:89:D9:78:2C:BE:30:E5:89:61:EC:0C:E7:E4:B0:63
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 018F3BF812C0B66C38DD1A9AB279768B6FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0846
Signing time: Fri 03 May 2024 01:01:04 +0000
Manifest this update: Fri 03 May 2024 01:01:04 +0000
Manifest next update: Sat 04 May 2024 01:01:04 +0000
Files and hashes: 1: 0Rx7VkMFwienSOgoWnQSo3FXTH4.roa (hash: bX46MTviqFpdzpx/kINqQjPdm6sxe/j6nWTT1FwZLx8=)
2: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: OKI9/1Atv8mwN5XfWsGYKd5I8Hqil0F7yr9qMugXbWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:f8:12:c0:b6:6c:38:dd:1a:9a:b2:79:76:8b:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: May 3 01:01:04 2024 GMT
Not After : May 4 01:01:04 2024 GMT
Subject: CN=33ddd61e2689d9782cbe30e58961ec0ce7e4b063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:38:01:51:b3:a1:2b:c0:90:c9:d0:0a:e9:
05:2a:69:0d:f9:35:14:61:8d:1c:7d:e0:53:c1:dc:
59:35:38:5d:94:4a:4d:34:53:3b:23:84:ec:fd:e7:
06:b1:b8:aa:e2:e0:47:69:d5:b8:0f:62:50:0f:9d:
b1:2c:82:c3:77:9f:a6:7c:2b:4d:d5:b7:a0:33:16:
48:b2:8b:9e:04:a3:88:d5:e1:ab:7e:a1:9c:40:64:
ed:fe:b6:d5:7b:42:c8:01:87:7e:1b:62:39:33:6e:
5b:3c:ff:89:15:7c:dc:47:a0:c8:d6:34:53:50:8e:
9a:5f:ba:09:4c:d8:31:b5:ca:33:b7:2b:06:69:c8:
14:13:56:b1:72:30:14:fa:f8:e1:09:97:89:41:56:
4c:8f:3c:5c:1c:d5:ca:32:2d:3e:7a:5d:4a:b6:8e:
9c:06:1a:6a:c3:c6:a8:2b:88:2d:d7:d1:18:61:0b:
c7:a8:63:63:36:50:ff:c7:76:dc:20:85:b6:91:57:
e9:52:39:97:9e:d3:21:69:45:f4:20:9c:8d:5e:f4:
91:fa:ef:b1:ec:23:d9:25:bc:5e:95:b9:bc:50:4b:
eb:46:1b:5d:9c:5c:92:9c:cf:23:dd:28:7a:e7:8c:
49:7d:c2:c2:77:5f:ae:e4:da:48:25:b3:75:04:fa:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DD:D6:1E:26:89:D9:78:2C:BE:30:E5:89:61:EC:0C:E7:E4:B0:63
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:89:0a:97:a9:8a:c5:3e:c4:ff:38:36:3b:a5:4c:61:0d:a6:
d2:3e:0a:10:42:7d:96:24:42:91:61:66:a9:65:1a:d0:3e:72:
6c:18:9f:76:10:63:1a:eb:3f:13:bb:ec:79:6c:74:a7:fe:20:
05:6a:c6:01:78:f6:3e:e2:06:63:82:6c:b8:0d:43:79:16:4d:
67:80:f1:4e:93:c7:ff:99:69:61:2f:74:46:bb:51:82:49:18:
72:59:58:de:e7:a1:71:15:aa:9f:07:40:bb:6e:89:28:8b:d9:
0c:08:b3:c9:ee:78:53:b4:2e:ef:ef:06:a5:6f:e8:c3:dc:9b:
18:0c:f8:2d:24:35:ca:e4:2c:49:e5:76:df:63:34:07:5f:82:
c9:92:57:2a:83:fc:f2:68:c8:bc:45:2c:a2:7c:72:99:73:d3:
35:7c:0d:55:27:f6:17:7a:17:a3:7d:93:4c:70:71:89:05:7b:
a1:b7:3b:13:37:80:96:02:fc:8c:fd:cd:40:c8:08:9d:41:39:
72:5a:ee:86:8f:1b:e5:aa:65:37:54:08:12:28:2e:6e:cb:25:
b4:10:72:c8:80:8a:51:a1:cf:ed:92:bd:d7:08:f4:80:18:b8:
9b:af:35:2c:0e:3f:b7:63:44:da:26:fe:79:d1:3a:dd:ed:f6:
9b:d8:9f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:07:54 2024 by rpki-client on console-fra.rpki-client.org