Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 09T+4R35Mc+hDOYaLGl1xh8omFGnNoMg/XNner41tY8=
Subject key identifier: EC:F3:E2:9A:2E:1B:9E:15:11:42:F3:C3:AC:DD:86:19:71:34:8F:87
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01904943018874DD9E2E9602DB94E9625163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 11DB
Signing time: Mon 24 Jun 2024 08:00:46 +0000
Manifest this update: Mon 24 Jun 2024 08:00:46 +0000
Manifest next update: Tue 25 Jun 2024 08:00:46 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: sJpdPEHEuSCN6SPPZyVge9zzNeSVpZAditxLKnPk2rA=)
2: TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa (hash: w+XCCT06YsgjpDolNno8LnRxzdvXMfW6wcI2e+xABDk=)
3: aQeMD2vXO5xniZKYX0r8QdxEzo4.roa (hash: 0qRmgNnpnRbtWA+DNew1+ZGHFACyhgPR0D4jdV8UoeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:43:01:88:74:dd:9e:2e:96:02:db:94:e9:62:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jun 24 08:00:46 2024 GMT
Not After : Jun 25 08:00:46 2024 GMT
Subject: CN=ecf3e29a2e1b9e151142f3c3acdd861971348f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:c9:44:a4:d5:b5:db:4f:26:10:48:8d:4a:
8d:b1:71:f6:60:5c:08:96:a6:c0:4a:fe:d8:88:a7:
9b:9c:8b:a6:71:0e:de:03:64:c5:25:c1:e3:76:ff:
97:96:65:25:c6:07:c7:52:44:84:a9:04:57:30:c1:
f5:bb:b6:12:59:fa:52:76:61:bd:a1:c9:53:ef:db:
7a:d8:4a:21:a8:c0:67:4a:c4:8b:78:dc:12:32:e6:
0a:d3:ec:3f:4a:0e:3f:0b:aa:ad:61:17:10:3c:4e:
17:02:25:b0:45:03:86:62:09:a0:db:3e:1c:07:30:
17:03:28:65:b2:a5:c2:42:d1:25:6b:6e:90:ae:44:
be:84:4a:ca:2b:55:71:4d:7b:27:53:ca:59:d3:9b:
35:60:b4:fd:d4:bf:e1:1d:ac:74:af:40:ba:88:d0:
d8:b7:4f:cb:42:b5:7a:a3:e8:ec:be:11:c2:56:c3:
cf:26:ca:01:f0:5b:b3:db:cd:4c:4e:53:26:81:53:
d7:fd:d5:9a:ec:be:68:5d:53:7a:a6:3e:45:6d:2d:
13:fc:63:fd:b0:a3:05:43:25:d1:16:2c:c7:af:b2:
01:28:55:55:26:4d:0d:af:d1:77:97:10:bd:56:4a:
d5:d7:b8:2c:09:27:25:4c:cc:1f:fc:1f:0b:9d:54:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:E2:9A:2E:1B:9E:15:11:42:F3:C3:AC:DD:86:19:71:34:8F:87
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a7:fe:25:cc:82:64:41:9f:bf:b8:ac:50:01:03:e1:5b:7c:
57:20:7b:4d:ad:8b:e7:4e:c1:82:87:47:ca:ae:44:e5:eb:c6:
ba:16:ad:a2:10:b0:d7:3b:af:9b:4f:3c:b0:79:8f:70:e4:7a:
6d:8b:c8:ca:56:a4:cf:fa:f3:7b:01:1b:bc:79:a9:b7:7d:68:
5f:dd:8a:5e:9e:d3:04:d3:19:aa:f8:2c:8d:b1:cc:a9:c5:f3:
51:11:07:3f:a6:bc:58:38:eb:d1:83:72:7b:f2:2d:c6:a1:b7:
d5:d3:52:70:44:f2:8c:04:71:1c:a3:93:74:af:85:82:86:ac:
0a:97:28:8f:a7:f7:ab:78:83:29:d8:85:0f:3c:86:8b:bb:26:
0d:d1:88:b7:63:cb:ae:b0:64:25:59:39:58:ea:a7:94:9a:b1:
d7:25:87:2f:22:cd:ae:74:f3:1f:b0:5f:ee:06:8b:00:94:a7:
79:17:6c:13:55:e9:29:f8:53:0d:71:05:df:50:a6:79:d7:0d:
03:eb:1b:59:4a:c7:c5:7b:23:c3:bb:01:68:8e:62:a8:7d:41:
42:b1:a3:9c:65:f6:38:7e:94:8e:ea:b2:59:94:b1:88:4c:40:
24:24:6e:f5:07:0b:b6:73:b1:43:b6:d0:fa:a6:06:df:80:22:
09:12:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:03:44 2024 by rpki-client on console-ams.rpki-client.org