Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: EdwzgPJjABLPMAUG/MfDmTKLcenbhZbH0z/qFcJ/+/Y=
Subject key identifier: C0:26:E4:53:0B:A6:F0:72:70:B4:D0:ED:54:5F:8F:79:DC:AD:38:6F
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 01901DEBC4481A8777BC9851B6C3ED1702EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 0298
Signing time: Sat 15 Jun 2024 22:01:48 +0000
Manifest this update: Sat 15 Jun 2024 22:01:48 +0000
Manifest next update: Sun 16 Jun 2024 22:01:48 +0000
Files and hashes: 1: 19VFNSGwkOjoKkhMp6c31_3s4m4.roa (hash: 9iv2IryXVGVTamSMuPhqofLOFbWiSzxW087/Hl7gzhI=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: cn/WfKS/fVwC5XOjkvwIz3oR2ARfZShYUDlD2yWe0IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:c4:48:1a:87:77:bc:98:51:b6:c3:ed:17:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Jun 15 22:01:48 2024 GMT
Not After : Jun 16 22:01:48 2024 GMT
Subject: CN=c026e4530ba6f07270b4d0ed545f8f79dcad386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:d1:93:30:e1:6c:6e:5e:9b:e3:82:24:b5:
2b:6d:cb:71:fb:ef:06:be:bf:5a:e6:72:b9:1b:6d:
09:d4:aa:6d:49:45:53:78:fa:5e:6d:35:11:a2:a7:
8f:46:e0:4d:09:21:76:69:cc:a4:87:00:27:37:06:
fc:1b:f8:9d:96:64:6c:24:7e:55:c2:97:1d:6a:2f:
6c:99:60:5d:7f:67:3c:cd:00:65:90:69:f4:50:d7:
9c:6f:ed:7f:b8:c1:f6:60:a2:0e:50:56:40:fc:ac:
6e:72:d0:a6:b7:0b:f2:e5:ad:f3:a7:d8:f1:71:a9:
0e:82:d5:11:84:70:de:d7:ac:12:02:43:79:26:89:
3b:e6:5d:72:69:98:e3:14:dd:51:d7:0b:7b:08:ab:
2b:72:11:a7:5c:82:2b:c8:77:61:7f:3d:d3:83:9b:
d0:9d:b9:3f:98:5d:a8:4c:06:5e:10:2b:38:db:c5:
93:e5:d2:0a:70:6f:c9:6c:26:45:f5:73:a8:cb:6d:
e9:02:3b:89:8f:06:11:29:cc:d0:02:90:73:89:aa:
88:58:13:59:b5:7f:fb:74:95:75:cc:7f:af:d1:c7:
00:3b:c5:c4:e3:c9:74:cd:4a:52:0b:72:cf:fc:63:
e1:37:93:9a:68:84:4c:f0:5d:cc:4a:a0:8a:6d:2c:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:E4:53:0B:A6:F0:72:70:B4:D0:ED:54:5F:8F:79:DC:AD:38:6F
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:b8:97:9d:c4:fc:be:60:f3:46:73:c0:c3:ef:e1:8b:2a:
da:ca:ab:72:88:cf:06:4d:f5:ab:81:85:1c:0e:19:08:71:24:
8c:fc:56:d9:62:ec:da:5a:16:7a:df:62:ac:aa:3a:5d:80:28:
b1:75:3b:4a:4f:2e:d9:76:53:a0:64:eb:0e:cf:90:9e:5d:ec:
ce:12:93:08:e1:d0:46:9c:35:42:e5:be:50:c0:5d:3a:6f:e4:
8d:48:58:b0:df:69:db:a7:bd:90:d0:55:c7:7a:ad:fd:ca:c0:
7e:59:75:ef:cd:1f:53:7c:4d:13:71:81:3f:73:81:c5:ea:f6:
4a:5a:55:38:17:f9:26:c8:89:87:8c:d2:d7:80:0c:79:4d:a2:
81:07:e8:94:37:89:9d:49:b8:b2:c9:ad:93:22:fa:fe:cb:25:
b6:02:65:c4:d6:88:c8:87:6f:d6:f9:c8:d8:ec:1a:a7:bd:0a:
aa:bd:68:64:9e:66:bb:18:17:80:47:10:37:26:16:9c:fb:13:
f1:1c:a9:6d:b1:46:e9:c7:b3:c7:46:a4:f1:bd:3c:29:81:75:
c4:df:45:e0:92:50:09:b3:6e:f8:ec:80:02:a5:bf:b0:02:fe:
b6:6a:14:cf:04:a4:30:5d:c6:75:c2:a4:ef:93:9d:27:5d:3a:
93:33:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:21 2024 by rpki-client on console-ams.rpki-client.org