Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
File: D7BE9D3520750EF280E734F41346D051C8B2F524.mft (raw, json)
Hash identifier: XTQI0bvUOBGUTeyGmh2afWI2XiHBLts7LGyh1cGY6Xk=
Subject key identifier: CB:95:93:20:19:EF:45:B2:D1:4F:39:9D:C4:74:13:74:F1:69:98:37
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 7DD1372AAF2E6D0C1AC31B2261F6393D332BE1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
Manifest number: 0223
Signing time: Mon 06 May 2024 09:21:42 +0000
Manifest this update: Mon 06 May 2024 09:16:42 +0000
Manifest next update: Tue 07 May 2024 10:40:42 +0000
Files and hashes: 1: 37392e39392e32342e302f32322d3233203d3e203232373831.roa (hash: 4Ktbj5SztfEsL71dp37p3H1Z6Fya0yT2ZD5LMSBbcCU=)
2: 37392e39392e32382e302f32322d3232203d3e20323039323432.roa (hash: Fyk0QrPavExp5uqIPjqpBUAPrC1s4WvPbRDu1VTOPbk=)
3: D7BE9D3520750EF280E734F41346D051C8B2F524.crl (hash: 8MgLgbeRJOeipKdb8x8Mrnbar07n6+d80avaVx60j8g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d1:37:2a:af:2e:6d:0c:1a:c3:1b:22:61:f6:39:3d:33:2b:e1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: May 6 09:16:42 2024 GMT
Not After : May 7 10:40:42 2024 GMT
Subject: CN=CB95932019EF45B2D14F399DC4741374F1699837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:38:90:f9:8d:fa:de:7b:b5:ef:25:79:ac:
d8:e2:38:38:93:fd:b6:d4:07:58:22:6c:a2:e9:bd:
52:0f:d6:cf:be:e1:a2:91:91:47:67:21:6c:97:f6:
b5:bb:eb:b5:82:3e:07:fd:b0:d7:d2:e1:37:df:9e:
b7:bd:4b:df:49:6b:98:c5:e1:1b:52:f7:85:20:d7:
40:22:ad:81:ad:8b:01:f1:e0:a5:67:5d:04:23:48:
53:93:13:90:a9:86:a3:e0:fe:09:40:7e:e0:cd:e3:
d1:fc:65:90:b5:19:28:42:e2:bb:3b:ac:53:9c:11:
f8:18:98:5d:30:be:a5:5c:c9:6c:9d:3e:95:6c:0c:
da:4f:95:2d:a5:cd:97:91:6d:c7:53:43:f2:2c:d4:
02:fe:04:67:47:53:ed:5a:4c:a5:35:04:9d:61:67:
84:76:7a:08:46:f1:b6:43:d3:ef:d3:05:08:08:5a:
f7:c4:18:ed:0d:e6:35:db:af:6e:b2:2d:00:07:75:
a1:e3:f9:87:53:dd:ff:b4:70:21:d8:fe:9d:24:15:
87:11:aa:44:b6:71:d6:74:47:7e:87:3c:b9:51:64:
c3:21:05:d4:ba:05:5c:68:75:07:33:db:2d:c3:fa:
d9:60:87:3c:f1:fb:c1:4d:7e:e8:53:9f:c3:a0:39:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:93:20:19:EF:45:B2:D1:4F:39:9D:C4:74:13:74:F1:69:98:37
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:14:29:d5:4b:18:85:40:3d:b7:1d:5a:fb:23:dc:47:1a:
bc:26:ba:dd:78:26:6a:36:c4:f8:33:08:a7:4a:2c:4e:bc:1b:
06:b5:9c:15:42:0e:e7:1e:b2:9f:da:8e:a6:69:00:e4:78:48:
8c:b7:73:bb:2b:6c:91:22:55:d5:4a:e8:e9:7d:ad:70:c5:74:
d7:9c:58:8a:b1:08:9e:11:43:41:b1:73:1c:f7:13:6c:01:14:
15:ee:0b:fe:d3:95:3a:08:df:0c:45:bf:3b:c1:5a:55:05:87:
7e:02:58:0f:d2:b3:41:08:f2:1f:08:b7:1a:db:a2:6c:16:f5:
2a:43:e6:49:af:c4:55:02:e3:71:b6:a7:c4:76:97:6c:20:56:
af:27:60:02:df:87:28:6d:e7:3b:4a:a2:41:f9:2d:49:c6:9d:
51:e5:fd:8a:ac:ce:b4:40:46:34:83:6d:74:a0:3d:f9:a0:e3:
86:09:f0:72:82:b0:cd:44:68:6f:69:64:54:7c:8b:9d:6d:aa:
3f:78:35:d0:f5:e1:ff:3a:1b:d2:95:94:8f:1a:7a:87:33:6d:
50:ed:92:a8:11:90:53:49:d0:51:15:ba:90:bd:f6:00:8b:cc:
f6:88:a1:07:df:75:ee:3e:62:20:78:a4:ed:ee:32:4b:da:0f:
05:a2:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:49:35 2024 by rpki-client on console-ams.rpki-client.org