Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: G2+HYkXQBTUaij6Bg7LsGC674Dtng8ZHvu2n19Q+fm4=
Subject key identifier: 48:AF:D0:A2:8D:77:B6:32:E5:4D:E6:6C:8E:98:B4:BF:64:1E:2B:9C
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019041C0D15458D5A2CB4062E1CFA668897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 11D9
Signing time: Sat 22 Jun 2024 21:01:13 +0000
Manifest this update: Sat 22 Jun 2024 21:01:13 +0000
Manifest next update: Sun 23 Jun 2024 21:01:13 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 0RA1ayjIpYQFE4/wiTml7P0uYlC2rswPlcbAaAloI7g=)
2: S18mLZ5iWMIc754wpqpHxSQiZ5I.roa (hash: CkDrUJzVjr38jBLEnPHObXPaeFZtTcIUaAzTQvqu11I=)
3: foo1sictJkMhfSVXWigaWWi3cW8.roa (hash: vaIBvASpPr7SLw28lmz0JgrlPYCiCxSZv/J+gcFerfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:c0:d1:54:58:d5:a2:cb:40:62:e1:cf:a6:68:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jun 22 21:01:13 2024 GMT
Not After : Jun 23 21:01:13 2024 GMT
Subject: CN=48afd0a28d77b632e54de66c8e98b4bf641e2b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:bc:64:a0:3e:22:1b:fd:cb:83:d2:8b:01:
c4:9a:9c:75:72:49:91:d5:c8:2c:c2:6f:2f:b6:55:
14:c1:f1:96:49:a4:89:5c:d4:ab:45:4c:9b:10:2a:
e0:fd:28:39:fd:82:57:70:9a:f1:2a:f9:1d:cf:28:
dc:3b:a3:9e:fe:42:be:43:3b:b2:ab:aa:c3:ec:62:
c2:da:e9:2f:19:a7:59:0a:b8:0b:1a:fc:32:58:71:
4e:cf:f6:99:81:ea:03:88:9e:af:f5:05:ab:19:b8:
38:e9:bf:18:55:34:26:9e:ed:39:9b:85:4b:9a:9b:
2f:b4:8f:72:da:98:ae:69:68:42:8c:da:d1:7d:fd:
44:c9:92:f3:81:ff:ec:09:28:90:68:bf:4a:b2:05:
f1:8e:be:dc:11:78:86:e1:80:9b:a0:40:dc:53:3d:
a6:49:fa:c7:84:bd:bd:fe:3a:cc:19:c0:af:30:17:
eb:bc:cd:92:3e:98:4f:99:04:e8:05:c8:38:c2:20:
27:10:7c:d1:3d:e7:50:2f:0f:de:e3:fa:4e:16:40:
04:bf:af:2f:a8:96:26:0d:19:18:93:43:ee:9a:1b:
2c:94:81:72:f4:ce:87:52:4a:1a:1f:b3:a4:d3:70:
52:3a:c0:03:c3:c1:a8:af:f6:56:23:cb:7a:dc:a8:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:D0:A2:8D:77:B6:32:E5:4D:E6:6C:8E:98:B4:BF:64:1E:2B:9C
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:46:fc:75:20:4b:cb:bb:d0:07:d6:7b:2f:5b:2f:3b:91:74:
89:27:82:ff:3a:c0:6b:8d:d2:f6:ed:80:8f:b8:7d:bb:31:ec:
28:cd:86:c7:06:cc:7f:87:92:11:77:13:17:3d:0a:e7:7d:64:
59:9d:0c:4e:19:d6:e9:af:30:77:6a:ce:ae:bf:ac:1e:78:05:
34:40:7f:00:5a:f6:ec:d1:f9:cc:19:d3:1e:b3:c6:d8:9c:51:
13:c9:d8:a4:f6:f4:3d:71:47:c8:b5:5b:b9:92:df:d3:73:3b:
b8:5b:49:4b:53:d5:62:80:30:85:00:e7:c7:31:75:c6:34:ec:
e8:2c:0e:19:45:b6:20:77:a0:ad:a1:5c:e0:cc:b5:84:73:5f:
16:be:cc:60:18:62:f7:38:dd:22:8b:5c:71:2f:95:41:d5:bd:
bd:56:8a:6b:c5:bf:23:fa:79:9f:b2:78:58:32:1f:96:39:cf:
65:88:e9:53:23:55:b9:63:5b:15:6b:25:f8:e4:9c:92:75:a7:
8f:1b:31:e2:98:76:b5:7a:71:48:2d:6d:85:3c:67:6d:16:ec:
35:91:c1:17:c8:0d:8c:f6:a6:14:13:3c:41:ec:dc:87:a1:0d:
13:0c:bc:6b:70:2c:a0:ea:67:2b:93:7f:a6:cc:99:91:65:a0:
1c:a0:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:53 2024 by rpki-client on console-ams.rpki-client.org