Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: vfX7mdUsrEOztpPIHHQcR2h5sb3PLzhG3TjRkVYXfms=
Subject key identifier: 2A:E9:1F:63:57:6B:0F:2F:FD:91:A8:01:EE:C5:89:24:85:0B:4F:58
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 0190448CD0F2C657F52FB22602816F12BFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 101E
Signing time: Sun 23 Jun 2024 10:03:17 +0000
Manifest this update: Sun 23 Jun 2024 10:03:17 +0000
Manifest next update: Mon 24 Jun 2024 10:03:17 +0000
Files and hashes: 1: AFNvdpTozU-HSpE2Z117hQEmUAY.roa (hash: YPwhydqe5oJGCjoiGw7evElKiJE69427BiZ6370kXq8=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: QGxydornOph5CFSCgNanWwxtU9yeOGq/8AR1D+3c0lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:d0:f2:c6:57:f5:2f:b2:26:02:81:6f:12:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Jun 23 10:03:17 2024 GMT
Not After : Jun 24 10:03:17 2024 GMT
Subject: CN=2ae91f63576b0f2ffd91a801eec58924850b4f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:3d:a0:e6:ce:55:dc:59:63:85:a5:12:87:
e1:07:3d:c2:7f:d3:9f:d8:0e:37:57:f1:cd:69:0d:
f4:5b:55:d2:ce:dc:f5:94:08:17:1e:43:a2:ca:21:
4e:98:df:86:da:75:b9:d5:df:ea:62:e2:97:da:b6:
f5:11:d2:b0:07:ac:0c:2f:33:b8:df:d6:b7:ea:2b:
ac:eb:27:9c:5f:74:a5:97:88:65:4c:ab:8b:4d:87:
34:3b:b4:1e:81:32:3c:32:5e:57:2e:8e:d6:d5:e7:
c8:cd:0d:72:4d:79:d0:ce:08:6e:4b:f3:c1:90:7c:
b6:2a:36:bd:c0:19:7c:2e:1e:90:d5:df:77:32:04:
f5:eb:69:22:8b:a3:be:99:54:41:5a:2b:24:15:b8:
44:cb:ab:a3:e0:23:9f:8e:98:e9:1b:34:e7:55:3c:
3f:32:ad:95:b2:01:38:ac:30:f2:a3:5f:c6:db:ff:
cb:a4:d6:58:1b:4c:40:ee:4c:8f:6c:e3:71:bc:07:
96:c8:2a:21:d6:d8:24:a1:dc:69:19:56:e4:d6:a3:
80:42:b8:67:de:ec:47:25:4b:81:44:90:5e:c5:60:
ef:63:d9:df:3d:fe:bf:8a:7a:73:3c:35:fe:f7:f3:
a3:7a:aa:f5:07:7b:39:ee:eb:ff:76:70:b3:83:b5:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E9:1F:63:57:6B:0F:2F:FD:91:A8:01:EE:C5:89:24:85:0B:4F:58
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:d6:85:e6:dd:80:20:75:9b:e8:00:3a:d5:38:d0:66:cd:
b0:d0:bd:e2:3e:d5:99:63:aa:51:71:90:3a:a0:46:fe:ea:43:
ce:53:8e:26:63:c1:69:d9:ad:aa:11:c9:46:48:14:c2:b0:a7:
59:10:12:ed:35:69:ee:5a:18:dd:2b:13:87:db:83:a7:8a:82:
ee:0c:ca:54:98:93:d0:36:fe:0c:90:9d:2c:14:8d:01:97:79:
3e:f1:59:51:c6:ac:50:63:68:9d:bf:78:79:21:48:c6:52:6c:
e5:55:3c:cd:cf:41:8b:4b:7a:f8:57:d6:0c:e9:88:22:00:9f:
57:3b:54:bf:3b:6c:12:ef:12:db:42:09:3a:2e:41:dc:d9:c6:
41:70:80:d5:41:00:53:40:12:1e:4d:9d:1b:44:86:38:4d:56:
ac:62:b4:e4:74:b4:f5:08:d2:64:53:05:6d:3c:3e:1f:2d:0d:
a1:88:7f:c5:0e:53:79:5c:1e:de:b4:a3:d1:72:ef:a6:e1:79:
aa:f5:9c:22:c9:2a:6e:61:a1:08:15:dc:8a:63:1d:e4:4f:0a:
7f:28:74:00:5d:f8:00:fb:64:18:e3:14:2d:3f:cb:28:09:1e:
f1:ee:e9:33:9c:7f:04:b0:80:eb:c6:9b:5c:49:d2:6a:d9:44:
f0:74:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:24:34 2024 by rpki-client on console-ams.rpki-client.org