Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 7IIFUNwJObbKdp99f8TB9zOLrpxOKvfq6kuJjEX2by4=
Subject key identifier: 95:0F:45:BF:16:02:D4:C1:1C:44:5B:15:05:16:EB:47:EF:9F:50:38
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 05A645806B5BDC044C880480B85D481E63189129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 85
Signing time: Mon 20 May 2024 18:33:32 +0000
Manifest this update: Mon 20 May 2024 18:28:32 +0000
Manifest next update: Tue 21 May 2024 21:46:32 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 3EhZb7aO4kb3/F7h5DI6XYuz5AZ2MFo1qDcGpPrMfAo=)
2: AS215828.asa (hash: 8jwqJF/4VkG4khINwR0YQLb8IEi69b/zNgUz4OwfOjc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a6:45:80:6b:5b:dc:04:4c:88:04:80:b8:5d:48:1e:63:18:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: May 20 18:28:32 2024 GMT
Not After : May 21 21:46:32 2024 GMT
Subject: CN=950F45BF1602D4C11C445B150516EB47EF9F5038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:a3:72:c8:67:a5:b1:85:14:28:be:08:62:
1e:f3:22:c3:d6:f6:1a:09:c3:a0:c1:ce:81:ab:9f:
71:4a:e4:4e:94:a3:a0:2c:10:b3:96:c7:a5:7a:94:
9a:11:9b:fe:b6:37:05:64:d1:42:54:10:06:60:65:
f8:cc:05:b1:2d:05:a8:48:b8:44:85:59:41:4d:56:
a5:61:b8:e1:b6:7e:fc:7e:ad:60:fb:39:7c:a0:d5:
3c:1a:ac:3f:68:8e:40:5b:25:e1:d1:47:f7:52:db:
db:d6:c9:b4:37:9c:69:c7:1f:a0:a3:19:e9:01:4a:
74:83:70:ae:87:d4:d0:a9:a0:76:b9:27:20:de:5f:
9c:28:75:08:47:24:23:3d:89:f7:79:45:f5:cb:8d:
af:8a:76:6d:91:c0:a4:06:7e:43:72:a6:2c:1b:40:
5b:54:40:4d:09:1e:b5:9d:46:a3:a5:6b:c2:32:8f:
5b:5a:6e:2c:80:82:00:87:d0:33:96:54:76:35:e6:
fc:c7:27:9a:c5:e3:63:70:97:40:86:b4:79:a4:27:
75:4e:72:ef:17:c4:18:8f:26:ff:77:e0:52:38:2f:
2f:bc:2e:66:d1:79:4f:11:9b:01:20:07:e4:43:4f:
6c:85:79:19:72:e7:81:26:8e:43:36:6b:8a:be:71:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:45:BF:16:02:D4:C1:1C:44:5B:15:05:16:EB:47:EF:9F:50:38
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:2c:de:f4:43:79:ef:07:c9:ae:30:44:7f:39:5b:f3:38:39:
3c:a9:eb:b5:02:c0:87:99:6d:a4:77:02:c6:74:60:eb:24:ad:
95:67:41:09:a4:d5:db:89:23:8d:68:9f:53:18:0d:68:ed:b1:
a7:26:a3:82:e0:f5:1d:74:ba:3f:70:b5:18:85:b6:15:e4:53:
68:fe:49:87:29:40:82:b0:1b:c1:41:43:78:94:7b:66:b8:f3:
98:75:71:ee:d3:ae:f1:00:2a:e9:11:12:a0:43:db:25:3e:e8:
b4:18:9f:ef:fb:98:6e:93:5b:31:a6:fc:68:96:b6:47:e4:f0:
4d:47:c1:61:45:15:25:8b:f7:f6:1a:fe:24:5d:a5:b4:5a:28:
c8:3f:25:87:c0:bd:80:b1:77:a5:01:3d:2a:9e:aa:2f:0f:54:
7c:10:68:d8:8f:5f:2c:63:a6:89:fb:d4:2b:bd:1f:e6:fc:50:
0f:e0:38:65:b2:32:f2:e6:0d:93:c7:07:ae:65:d6:4a:42:ad:
e2:57:a8:f0:ce:c3:9d:74:04:45:b9:d0:4a:d5:3e:f5:62:74:
80:4b:21:ea:32:c5:73:dd:5d:a0:ab:af:90:ab:b5:ca:b9:2b:
a1:5a:24:af:f4:1a:85:bd:b1:2b:ac:24:87:91:35:2a:4f:fe:
aa:f9:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:00 2024 by rpki-client on console-fra.rpki-client.org