Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: opCMYnrDPUwOEB4bxMIiIV4yTx31aWgFxS1c/qrSL/E=
Subject key identifier: ED:9D:03:02:23:2D:70:4C:A4:B7:1F:13:23:D4:DA:F1:49:9A:17:F5
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01903404AB39E8C4F4AC10D0FDBF6446C5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 11D0
Signing time: Thu 20 Jun 2024 05:00:39 +0000
Manifest this update: Thu 20 Jun 2024 05:00:39 +0000
Manifest next update: Fri 21 Jun 2024 05:00:39 +0000
Files and hashes: 1: FsqLfTKSTR7jg5YzxRHxojUoUrs.roa (hash: RsCfCUxGPx1OqIeQl6wKqHpeCD2ias1aMZCXs4M9Wx4=)
2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: tcjNJAXUSNELUHdHlDFb3Afw5AD4S7OchycBQO7/ASU=)
3: oeBFA6ff-7CkUaAbzHGA1_vxB6A.roa (hash: 6wPHO4CKkQ3qCX/ENpO4xoQO3ZZWcb66+n/AYHu6utM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:04:ab:39:e8:c4:f4:ac:10:d0:fd:bf:64:46:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jun 20 05:00:39 2024 GMT
Not After : Jun 21 05:00:39 2024 GMT
Subject: CN=ed9d0302232d704ca4b71f1323d4daf1499a17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:c8:c0:71:9d:ae:96:4e:54:77:54:92:36:
07:a8:2f:43:a0:6d:20:43:02:97:6b:8e:0f:80:88:
be:06:13:16:1d:10:62:f7:71:4a:5d:de:53:73:05:
46:4d:87:eb:3a:91:b2:1f:cd:c5:48:b2:ea:39:3a:
3f:3c:6e:bd:96:1f:ca:86:76:08:b5:27:f4:d1:e8:
2d:e3:13:e4:c8:c4:7d:c2:40:9f:c2:73:b1:28:b6:
31:a9:0a:8f:60:90:f4:7a:22:05:44:0d:f9:73:69:
e3:e6:46:b8:a2:a7:66:30:0d:8a:61:41:d0:7d:3c:
92:ca:45:77:4a:17:3d:88:f9:82:4b:4f:b3:69:6c:
76:1a:b4:01:ae:d2:8e:8f:c9:0b:0b:b5:e7:3f:e5:
5f:5a:d8:26:06:fa:75:58:55:4e:62:5b:57:21:72:
79:7d:c3:ea:49:31:46:f7:5e:12:87:d1:ee:b0:dd:
f4:6b:22:dc:67:7c:f0:71:53:6b:96:80:1c:fe:67:
69:c7:de:c6:26:d3:ad:89:2b:6d:d8:2c:f9:61:53:
01:9c:7f:a9:79:c2:18:68:79:83:55:a4:a7:90:0f:
5f:04:2e:6c:a6:b5:0e:b2:dd:fe:ed:31:15:4f:c3:
4e:f3:c7:3d:86:db:47:d2:a6:77:f7:5a:38:d1:74:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:03:02:23:2D:70:4C:A4:B7:1F:13:23:D4:DA:F1:49:9A:17:F5
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fd:da:f2:50:5a:a6:76:6e:fd:9f:56:6f:ed:aa:74:36:c4:
32:9d:ea:43:1f:3c:30:75:4b:76:41:45:d8:7c:ac:3e:cd:e8:
3d:28:ea:27:2b:3f:8c:8f:50:06:1c:62:6a:fb:ac:19:09:23:
b5:66:a1:01:c2:46:a4:d9:8e:2a:c6:50:6f:15:39:a8:26:ff:
33:f5:28:2c:13:36:05:c8:34:b0:f4:9f:e2:50:8d:ec:55:21:
8e:37:76:59:eb:ad:0f:39:0a:60:56:0e:1c:df:40:22:a7:9b:
f4:e1:01:84:58:55:b2:e2:09:ac:8b:78:6c:8f:a5:ca:cf:ad:
e0:1b:b9:55:04:7d:d9:56:9a:35:2b:0f:ac:09:8e:92:7f:bd:
03:4a:89:8b:d3:17:61:43:b4:d9:24:16:74:a6:1b:3f:61:c1:
2d:50:3d:df:b6:a6:d7:21:5f:3f:31:3a:d0:0a:a5:46:13:c4:
79:c9:11:6f:b2:09:b4:93:f7:60:a5:5d:97:96:76:63:38:7a:
87:52:9e:c7:d3:28:ee:3d:9c:b2:f6:8b:81:9c:ce:f4:65:3a:
43:b2:2c:bf:39:27:1e:98:47:37:fe:68:77:c8:27:19:d7:bf:
db:b5:59:75:79:fb:37:8b:76:36:4d:3d:a5:ae:47:b3:63:1d:
12:c2:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:21:51 2024 by rpki-client on console-fra.rpki-client.org