Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: 4fIk7A1UmePgF2dGTC3TAm0KVBPPLukFiTjtQu5MG/s=
Subject key identifier: F0:C9:5B:05:CB:AC:7A:EB:09:8A:86:65:A7:77:0D:17:7A:4C:AB:80
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019033CDE0BB41EC716994E19B0B88A82CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0A3E
Signing time: Thu 20 Jun 2024 04:00:48 +0000
Manifest this update: Thu 20 Jun 2024 04:00:48 +0000
Manifest next update: Fri 21 Jun 2024 04:00:48 +0000
Files and hashes: 1: 0GPVJ08zRt3_JDJPWJ3FSPLiBcs.roa (hash: RdUyjJY96WG8x6Qa6Vgbx7gsHdSd5j0VsnsQbRexs54=)
2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: 7GB6buFAJHdbSs45w6OGit6zdEYPG6FNj4jF5uH/qKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:cd:e0:bb:41:ec:71:69:94:e1:9b:0b:88:a8:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jun 20 04:00:48 2024 GMT
Not After : Jun 21 04:00:48 2024 GMT
Subject: CN=f0c95b05cbac7aeb098a8665a7770d177a4cab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:ad:71:41:ac:2a:66:e6:68:5a:d6:25:3d:
6b:ac:53:53:bd:1e:4b:37:26:2d:18:8d:02:29:7e:
81:45:3f:fa:7e:ce:6e:61:dc:88:69:12:a8:1d:44:
e6:a3:89:26:f9:d8:54:6b:ca:fd:5b:55:e7:3c:ae:
e2:96:46:3f:2d:50:cf:e6:90:5c:7a:22:83:fb:91:
c0:af:a2:c8:1a:82:80:42:ba:45:5e:1d:73:9a:92:
07:23:bd:d6:fe:d6:c8:3a:ac:31:c5:6a:a8:91:18:
f8:da:67:c0:e4:b0:76:93:a5:e0:87:ca:d2:f9:ed:
34:3e:73:3d:4f:ad:c3:f4:f5:54:54:df:2a:83:68:
c4:9f:eb:dc:a4:45:39:97:88:c3:4a:19:22:46:41:
b5:b6:db:2a:be:55:3d:95:3e:a2:96:5c:c7:dc:90:
9a:e7:49:58:6c:de:db:51:61:be:b6:74:35:b3:67:
44:70:5f:e4:39:ea:ac:61:e5:e4:77:ce:2a:f5:f9:
4f:eb:11:54:3e:5e:f9:ab:f7:42:2d:01:70:4a:08:
3d:e9:9b:95:7c:68:d6:0b:2c:a4:30:26:be:cd:3e:
43:18:d1:ef:0e:ea:ed:bb:bb:41:64:b0:f4:16:2a:
fb:d1:5f:5e:64:bf:d2:11:20:8a:af:a8:67:5e:51:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:5B:05:CB:AC:7A:EB:09:8A:86:65:A7:77:0D:17:7A:4C:AB:80
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:d2:23:b7:3a:49:5f:6c:58:6f:8d:61:51:0f:94:bb:09:
01:1d:fb:c3:d5:25:70:3d:43:80:32:76:f7:6b:6e:6c:5b:c4:
41:0f:28:4c:e5:98:f4:3f:19:1d:e6:65:a1:58:33:00:ad:3f:
7f:06:8a:e7:de:28:1b:07:98:94:d5:61:7e:c0:07:cc:cd:22:
ad:b0:d3:08:ae:ce:ff:de:71:1c:64:bc:3a:fb:32:aa:2d:96:
d4:ac:86:99:fe:47:c3:3b:76:17:d4:9e:81:45:0b:cd:57:a5:
22:12:b7:16:70:73:e4:80:30:11:69:ee:2c:46:d5:ea:6c:b9:
0e:f9:f0:df:75:28:c6:b0:ce:fd:14:0a:18:b9:1f:0f:21:8a:
80:07:5d:73:0d:9c:44:70:c6:2d:d8:75:1b:96:71:d7:8c:b9:
37:97:8f:94:68:d3:56:c8:ad:e8:26:a6:02:06:2d:e5:aa:3e:
d7:53:9f:df:5e:12:a7:5b:df:65:12:94:89:1f:f3:0c:75:1f:
f7:35:f3:86:dc:0c:01:6c:7b:19:12:34:c1:18:0f:21:5c:27:
41:d2:6c:1c:8c:ac:09:76:10:ab:0a:2b:c1:d3:30:24:e4:30:
04:e7:17:74:ce:23:28:e5:68:23:e3:b3:ef:5f:f7:ad:47:94:
27:d7:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:19:06 2024 by rpki-client on console-fra.rpki-client.org