Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
File: bAXPnDJ7L8h3votWGCKwZeCWkMI.mft (raw, json)
Hash identifier: PSJAHheRbpNwPDk0vhYEZrU7Eacj3lT4sCELt0Qlz7Q=
Subject key identifier: 99:36:8D:77:76:AF:33:C9:45:2F:E6:35:95:C3:03:18:FD:F1:C3:20
Authority key identifier: 6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
Certificate issuer: /CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Certificate serial: 01903472CB1D84E6BEB647B94AA3C325DC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
Manifest number: 11D2
Signing time: Thu 20 Jun 2024 07:00:56 +0000
Manifest this update: Thu 20 Jun 2024 07:00:56 +0000
Manifest next update: Fri 21 Jun 2024 07:00:56 +0000
Files and hashes: 1: 8v1nXt4dVR9J0FKdRUKlv_VZvzQ.roa (hash: sewwdkF8529VZjQgg9QpkP6t2kFTBrX/b0hJNV9eKUs=)
2: LKPzTE1hqqd0Z1Ylu5XHzUGQ154.roa (hash: O801WZy6lNWM6flq4HLiuhIaASbT6kqfSPwoJoa3RUg=)
3: bAXPnDJ7L8h3votWGCKwZeCWkMI.crl (hash: 7FtxlpwN55kWGR3mKOfriwl1xrWneRCjCjNtwdTpdYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:72:cb:1d:84:e6:be:b6:47:b9:4a:a3:c3:25:dc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Validity
Not Before: Jun 20 07:00:56 2024 GMT
Not After : Jun 21 07:00:56 2024 GMT
Subject: CN=99368d7776af33c9452fe63595c30318fdf1c320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:43:ca:a2:e2:7e:ca:05:c7:5b:12:08:bc:
20:39:a9:e8:50:8d:2e:0c:82:96:26:d8:3b:f4:fe:
94:0e:b1:80:ae:60:ef:3d:9f:16:8c:e8:a5:de:43:
92:3e:33:54:95:0a:96:d0:0b:1c:6d:7d:cb:c5:1d:
2e:df:29:15:25:cc:e9:71:b7:67:bc:42:99:d0:b7:
09:a3:bc:b9:5c:91:a8:96:99:a0:ef:f6:e5:ff:dc:
cf:28:39:8a:aa:89:77:63:f6:6c:69:4a:7c:00:91:
ff:e5:a6:28:8d:a7:4b:49:de:d3:a1:70:17:bf:62:
07:b5:a9:a8:fc:8d:b8:be:05:a3:20:af:b4:8b:93:
cb:f5:7f:6b:1c:b6:2d:98:30:d6:31:d5:bc:ae:3b:
42:40:8c:ab:e0:5c:48:34:1b:59:67:ea:7b:41:a3:
ea:8a:aa:fc:cf:76:c3:24:6c:49:e7:9e:36:fb:2e:
c0:14:2b:fa:3e:2b:2e:6b:e9:cd:90:0f:52:59:7b:
f0:b6:15:15:1c:84:2f:cc:40:83:e8:50:a3:bd:3d:
41:44:37:c6:19:fe:40:62:76:bc:ff:0d:b9:01:02:
b7:e1:72:51:db:69:28:9b:db:7e:5f:19:05:0a:4a:
2d:46:d8:ae:fa:4b:d0:8c:ee:eb:0d:68:b2:27:d7:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:8D:77:76:AF:33:C9:45:2F:E6:35:95:C3:03:18:FD:F1:C3:20
X509v3 Authority Key Identifier:
keyid:6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:7e:01:ea:37:ed:96:a2:6d:e7:9b:c5:67:95:b9:ff:e9:
87:7d:99:02:d3:5f:59:0b:db:9b:6b:0c:ba:1a:93:1a:79:8d:
cf:25:f6:d1:31:07:07:28:fb:a0:f2:43:65:0b:c4:70:01:e5:
78:1a:2a:41:7c:6c:30:8a:13:cb:35:fe:63:52:2d:0d:23:cb:
22:e2:34:f0:8c:e0:66:b4:42:b9:bb:be:69:5e:18:da:44:2c:
10:5f:de:8a:cf:14:f1:71:d5:09:4f:cb:30:33:aa:6c:0c:20:
29:39:ee:25:2f:5f:aa:ae:10:7c:fc:97:9b:90:63:16:b9:aa:
de:4b:74:40:48:ab:cf:34:c9:d4:e2:6c:a2:cf:42:92:92:96:
d2:43:80:a4:9d:d9:16:de:cc:f2:98:ad:9b:d6:29:42:22:fa:
86:89:28:c9:30:23:a9:c3:08:91:23:2b:49:0e:6e:83:64:e5:
3e:36:1d:b9:83:81:c0:cd:69:04:42:d4:36:cd:79:da:36:dd:
36:45:27:3a:3d:a7:0c:0f:2a:af:e4:40:3c:01:18:8f:6d:51:
19:77:77:2d:b7:c6:53:99:e2:80:5f:87:3b:9b:6f:d4:26:38:
fb:ff:12:1e:fd:84:76:73:94:5d:67:bb:77:8c:f8:32:46:1a:
10:cf:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:19:27 2024 by rpki-client on console-fra.rpki-client.org