Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: zTf8M2jWznhBIRFBUvGLZornIQe1+jQPhSZ5k8Oh+d4=
Subject key identifier: 8D:A6:44:5A:BE:AF:7E:36:C6:30:ED:38:C5:4F:C4:01:99:4F:91:5F
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019037068D07DA29ADB21E23B55C68DCBA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 11D4
Signing time: Thu 20 Jun 2024 19:01:34 +0000
Manifest this update: Thu 20 Jun 2024 19:01:34 +0000
Manifest next update: Fri 21 Jun 2024 19:01:34 +0000
Files and hashes: 1: 1-7Pca8BflNXHnRE5tquO5WPOWsQ.roa (hash: OLX9SclkMAdwoNxBfpLKWDWPM/kMni5pwd5w16pwo+s=)
2: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: ZwadO3e2W76DEzVBEYSqrR21F4fZdyHyjoxMdM8H+Es=)
3: uEClDvqyPr1x6Hm-rdGkzJPICbY.roa (hash: 44+N1umP7sSdKnKPaFY6nsFi+b9ErSzLRD4FCQlLnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:06:8d:07:da:29:ad:b2:1e:23:b5:5c:68:dc:ba:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jun 20 19:01:34 2024 GMT
Not After : Jun 21 19:01:34 2024 GMT
Subject: CN=8da6445abeaf7e36c630ed38c54fc401994f915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:b2:d5:c1:77:86:54:0c:e6:7c:30:e2:e7:
47:b4:79:43:18:24:55:22:82:e7:24:d5:73:d7:ee:
48:7b:d4:fb:7d:bb:fe:5e:12:ee:f0:3c:88:28:46:
c4:6a:c5:10:4a:e1:33:79:a9:46:f5:2c:53:39:94:
f3:49:1d:ad:bf:4f:1d:71:b0:d0:98:77:d6:73:d2:
5b:3f:37:33:39:66:2b:d4:fc:0f:3f:ec:e0:fc:77:
d7:1e:83:5d:21:54:f2:e4:3a:df:87:ab:01:b5:37:
1f:82:77:42:c5:f3:65:9f:4a:a9:a0:85:71:73:b2:
6f:a7:14:3f:9d:7d:99:09:e4:b4:1b:9c:e5:ef:d5:
02:ee:8a:5a:d4:1b:59:de:66:e8:32:05:2d:92:fd:
f5:9a:c4:ec:54:50:22:d7:0e:0f:dc:36:65:09:33:
34:9c:ff:4e:3c:69:51:42:9a:99:a1:87:8c:58:59:
32:0b:ad:05:0a:9e:77:cd:59:50:64:17:dd:a6:bc:
3f:e1:17:b7:93:76:e6:f1:44:bd:86:c4:ab:36:04:
7e:34:d7:20:5d:ab:b8:c8:0a:42:24:cc:fd:0f:7a:
0c:e3:10:b7:6c:eb:d2:b5:67:b1:c2:19:94:eb:7e:
3e:1c:a9:9d:32:78:9d:b5:49:95:95:1c:16:47:9f:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A6:44:5A:BE:AF:7E:36:C6:30:ED:38:C5:4F:C4:01:99:4F:91:5F
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:ac:55:22:41:8a:6f:62:05:b7:c1:35:e6:cb:7e:74:f2:
ef:96:2c:ed:f1:81:36:fe:89:92:b3:d6:22:28:7d:2c:12:8a:
0f:04:27:e6:51:41:90:a7:01:09:fe:6b:eb:10:f2:88:76:02:
01:e0:f3:0e:26:81:88:62:58:93:39:8e:e1:06:3f:0a:11:9d:
17:21:8e:88:8b:b9:76:ac:9b:0f:40:7b:af:9e:a2:67:7d:e4:
2a:a6:54:fe:c1:ec:7e:95:78:e9:7f:f6:4b:bf:16:8d:31:a2:
4f:10:1b:18:f2:d3:14:e4:38:8c:14:76:90:0e:e9:04:7e:74:
4b:38:fe:7c:57:b5:63:a0:43:4b:a8:e9:30:bd:c5:4c:85:ce:
dc:1a:0b:ac:b2:c7:31:3d:f9:86:c4:4f:b8:26:ee:fd:70:de:
4d:8b:f7:a0:bf:7d:50:e9:c7:95:ad:24:ef:65:55:0e:c2:71:
8d:ef:a4:90:28:6e:6b:d5:5b:54:28:69:41:6b:00:49:8a:aa:
ac:9f:b6:36:89:e3:b1:ee:a4:3a:f9:bb:cc:51:2d:86:b8:9b:
7c:f9:da:ba:ce:72:d0:0b:fd:d2:5d:d2:6a:ce:37:3a:59:61:
40:f0:07:c0:d0:9d:0e:03:66:a6:f8:c3:36:c6:b8:5a:7f:22:
af:58:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:15:47 2024 by rpki-client on console-ams.rpki-client.org