Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: 7gYJOMXbKilsgR+USU7YzDPR6N552U7jyJcVRJrpsdY=
Subject key identifier: 85:B0:35:FA:91:7B:06:76:A6:5A:08:C4:E5:12:1D:DE:9F:5F:1A:67
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019045D486A7BCBECD1C383B1BFF0CF18E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 16:01:14 +0000
Manifest this update: Sun 23 Jun 2024 16:01:14 +0000
Manifest next update: Mon 24 Jun 2024 16:01:14 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: PZUfNrl8WnLaJNVGFVuI2agNFwxdvPG5xugPbqK1yLk=)
2: ackA7jXS5Z9Pz-5Zxgsfx61Ke58.roa (hash: ixJTggagT/nnyOWjEHOLzbGwziW1jOLS5sFJwMifay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:86:a7:bc:be:cd:1c:38:3b:1b:ff:0c:f1:8e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jun 23 16:01:14 2024 GMT
Not After : Jun 24 16:01:14 2024 GMT
Subject: CN=85b035fa917b0676a65a08c4e5121dde9f5f1a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:56:47:59:3b:c8:1f:d6:a7:4b:ff:e3:94:
c8:af:29:5a:73:c5:d9:3a:45:c8:0b:18:1f:ff:66:
3e:3d:19:13:79:fa:16:f2:dc:59:ed:37:3d:6e:b6:
51:5c:34:78:71:60:7b:10:53:9f:4e:9b:be:0d:a9:
f2:7a:65:47:9e:54:c5:f5:17:9b:21:9a:6f:83:e3:
57:d3:bc:2f:f2:b1:cb:8c:a1:8d:b8:14:8a:0a:f1:
6e:81:a9:9b:6e:b7:a2:7d:9e:28:b0:b5:ed:7b:17:
dc:34:20:7e:2d:07:5c:d1:33:25:9e:6c:0e:36:7a:
a0:15:42:25:af:43:dc:82:8e:b1:e4:bf:bc:fa:53:
e6:b7:7e:97:d5:1c:ec:27:ad:63:4a:bf:3d:b6:77:
44:79:e8:0f:e0:0c:c4:f9:a3:80:c7:d0:9f:2b:ad:
9c:b6:82:64:f9:d5:0a:ee:d0:55:cd:17:f2:7e:5c:
5d:48:5e:f7:0e:61:12:24:95:08:7a:30:a6:f7:85:
f3:46:57:7e:7d:6c:83:4f:3e:65:18:61:92:ca:9b:
9e:19:a6:fb:f7:fb:72:ae:7a:9b:4f:4c:56:6b:b6:
9d:ab:92:d1:06:7f:34:ae:cd:69:49:be:8a:b2:cc:
62:59:14:b8:1d:8b:1f:60:7a:a1:f7:a5:c8:3a:b5:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:35:FA:91:7B:06:76:A6:5A:08:C4:E5:12:1D:DE:9F:5F:1A:67
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cc:7b:17:4d:8e:38:3d:08:c1:3e:96:36:c8:93:92:78:d7:
d9:e8:ee:ac:ff:dc:02:a4:04:86:1c:bc:77:d5:b6:40:8d:0b:
da:07:fd:dd:a7:fa:0d:4a:72:70:eb:87:da:1d:64:92:3f:2f:
18:ce:53:13:11:0b:5f:94:66:be:3c:29:5b:05:aa:f1:6f:aa:
fd:5f:f7:65:61:5c:31:93:b6:fe:2f:88:91:b0:1a:b8:59:fb:
0b:93:2d:ac:8f:b3:eb:ce:20:b1:a1:54:85:5b:18:dc:f8:56:
0e:dd:31:35:70:3d:d1:cb:15:34:12:a3:20:76:ec:7c:71:61:
e4:a1:58:3f:ea:ed:86:56:b1:69:96:03:1e:a6:f5:df:6f:e9:
30:fd:89:00:95:47:49:cf:46:a1:9a:a4:85:16:1d:60:25:04:
1d:f5:4e:54:2e:04:05:6f:3e:02:53:08:91:f6:c0:78:53:a0:
10:8a:98:08:0f:1f:a4:a3:44:aa:77:2b:5a:4a:61:c6:4f:aa:
d6:c4:85:d6:57:c5:82:59:1f:28:76:11:80:af:0a:8a:d0:89:
d8:e9:27:70:d2:9a:96:ea:d9:7f:86:5a:1b:39:38:24:56:b9:
8c:5f:3e:01:aa:0d:3d:25:ac:0e:7a:57:5d:a5:2c:4d:20:ef:
b2:a6:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:03:07 2024 by rpki-client on console-fra.rpki-client.org