Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: tWvT27sU1kxi23R/B5br/UCn3MNoSvUlheMkp4Ox6wo=
Subject key identifier: DA:86:08:F6:F1:E5:26:69:8D:96:1E:17:3D:EC:CF:EA:10:5E:8F:FB
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01901D0F036F685EF607A69854B7C79C0092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 18:00:41 +0000
Manifest this update: Sat 15 Jun 2024 18:00:41 +0000
Manifest next update: Sun 16 Jun 2024 18:00:41 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: KvqaOAG9cFHUZwnRYHwxQ+dXsYlN5A9ErZwwQgQB5Z4=)
2: S18mLZ5iWMIc754wpqpHxSQiZ5I.roa (hash: CkDrUJzVjr38jBLEnPHObXPaeFZtTcIUaAzTQvqu11I=)
3: foo1sictJkMhfSVXWigaWWi3cW8.roa (hash: vaIBvASpPr7SLw28lmz0JgrlPYCiCxSZv/J+gcFerfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:03:6f:68:5e:f6:07:a6:98:54:b7:c7:9c:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jun 15 18:00:41 2024 GMT
Not After : Jun 16 18:00:41 2024 GMT
Subject: CN=da8608f6f1e526698d961e173deccfea105e8ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:05:9b:2e:89:03:28:90:8a:bd:fc:9e:10:
bf:36:7f:0e:d3:91:3c:5f:e3:72:93:49:7c:b3:b7:
da:f8:d5:32:ff:99:85:73:17:ef:a1:bc:d6:ea:a7:
1d:8f:fd:e7:db:75:f0:38:0c:32:d0:61:62:5e:9e:
af:25:3b:4c:87:6a:ac:60:97:c2:91:33:a1:5d:7c:
d7:f7:ed:3e:d5:73:25:1d:b1:7d:7a:23:91:44:7a:
b6:9f:fc:9e:47:0b:2f:7d:2f:16:7e:61:f0:37:1c:
2e:93:e0:35:7b:a7:04:b5:7a:50:11:c1:27:9e:70:
58:28:90:74:c2:60:84:e6:30:0d:aa:38:69:a8:62:
6e:30:81:54:9e:f4:74:7f:91:d2:58:7f:4a:32:88:
18:d6:15:fe:62:97:41:ee:a8:ae:bf:29:0f:d8:33:
b5:61:01:74:de:69:0c:bb:b4:43:8c:91:ed:7a:d8:
95:dd:92:68:d8:cb:11:57:10:56:d6:64:29:92:21:
9c:58:ea:17:43:d5:e9:42:2a:91:db:ca:ca:26:52:
17:7e:3f:fb:08:26:8a:32:93:41:72:d8:42:85:6b:
ae:7f:fb:12:b6:b3:9c:04:da:5e:ba:1f:27:96:e2:
14:63:45:cc:d2:38:b1:b4:b5:c2:62:4a:9a:26:01:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:08:F6:F1:E5:26:69:8D:96:1E:17:3D:EC:CF:EA:10:5E:8F:FB
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:9d:7d:86:89:60:20:d6:78:98:86:4c:70:2f:fa:b6:ca:
fa:6c:3e:22:b1:7c:7c:d4:36:50:fa:1d:4b:08:77:8a:6a:c1:
fa:24:5d:ca:96:68:3b:0b:7a:0e:83:ae:a6:28:7c:75:01:ce:
44:0e:3c:4e:90:2d:41:94:c0:66:6e:3d:c0:6d:60:92:fa:b8:
89:19:30:9a:3b:18:e6:26:eb:0b:20:89:34:fa:f4:f4:1a:82:
65:62:7c:a5:a5:50:a4:a4:ef:91:d8:08:7c:87:22:e0:56:10:
4d:32:5d:01:e4:e9:f2:e1:ab:1b:2e:cc:30:9d:48:3b:61:10:
3f:3f:eb:3c:3d:d9:a4:a8:52:c2:72:b4:93:f9:e5:88:cd:7d:
20:80:c8:81:5f:89:31:9d:5c:07:96:50:6c:61:07:91:1b:bf:
4f:9e:6a:51:b8:cc:51:b6:19:2f:4d:f4:82:0a:7f:00:7d:b5:
8b:16:39:50:d2:3c:a9:c7:e0:23:97:db:2b:a8:74:f7:0f:4b:
1c:fb:06:0e:fd:7f:5b:9e:1d:68:c2:3f:e5:f7:65:b9:fa:af:
27:f1:0d:85:3a:d6:e2:08:af:b2:60:36:86:46:c0:fe:9b:95:
3d:1d:96:1d:bd:41:f6:b7:21:4c:4f:48:30:b6:7f:bb:9e:51:
29:86:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:01 2024 by rpki-client on console-fra.rpki-client.org