Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File: bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier: 0t85+IEH9DpeZ+aV0/FOlBUU/jTAawtWBaLBXE7mVas=
Subject key identifier: 6F:BC:07:DA:E0:FC:75:1B:60:3A:B7:FB:98:73:67:F3:36:6B:DC:4A
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 01903E1AB2416FFFE7B5D302C6E32C9580A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number: 11DD
Signing time: Sat 22 Jun 2024 04:00:55 +0000
Manifest this update: Sat 22 Jun 2024 04:00:55 +0000
Manifest next update: Sun 23 Jun 2024 04:00:55 +0000
Files and hashes: 1: Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa (hash: uUGinOJk5a4gZNP4BalL3DbX63YynvYAo7y3yzY5eF0=)
2: OBpKn6ejUBcNkXvi7MTpql-jTgs.roa (hash: vND0duUDXoLD01DrxFRvL8753q+YDe0HRDxL6Lj2JxQ=)
3: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: /sRH3k6zlze7j5f2BcChbw5+IrYiY5ItDYeM0VN72Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:1a:b2:41:6f:ff:e7:b5:d3:02:c6:e3:2c:95:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Jun 22 04:00:55 2024 GMT
Not After : Jun 23 04:00:55 2024 GMT
Subject: CN=6fbc07dae0fc751b603ab7fb987367f3366bdc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:e1:0d:ab:91:af:db:3e:a4:37:d5:cb:8e:
67:7a:dc:f1:87:da:58:08:10:2f:4a:08:dc:ee:5a:
bd:91:16:53:25:da:e6:e3:75:67:4b:7d:ab:4a:4d:
46:d5:c2:2c:2a:7d:46:5e:62:6d:fa:90:f2:b6:07:
4d:39:e3:9c:34:ec:89:01:3f:a5:06:c5:53:68:c3:
c2:b9:06:9a:4b:ab:69:3d:03:e7:9b:b6:c3:74:c7:
54:84:a2:ac:f9:eb:cc:c8:4a:19:c0:b6:43:76:c8:
84:79:ff:b6:a8:1c:14:7c:48:d8:97:31:ef:68:1d:
81:26:75:02:c8:46:51:a0:a5:d4:d5:c0:9e:42:63:
db:e0:2c:3d:3a:16:b4:68:07:87:dc:8f:7d:be:66:
e3:25:8d:70:15:eb:24:af:e5:59:9b:e3:17:f2:92:
43:9c:b9:17:16:99:de:6b:44:79:59:6f:e6:92:26:
32:ef:c2:cc:cc:29:56:20:bf:41:a9:9a:0d:da:e3:
aa:68:83:bf:7d:b3:8f:8f:56:e4:b2:1d:8b:cb:30:
31:63:94:c4:20:a6:b5:18:89:11:50:79:22:52:8d:
28:b0:36:b4:06:12:f4:97:26:77:29:1a:65:ee:0a:
48:b5:82:54:14:3b:6a:6c:89:54:1f:c5:e8:10:6b:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:07:DA:E0:FC:75:1B:60:3A:B7:FB:98:73:67:F3:36:6B:DC:4A
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f4:18:33:d4:66:b5:ce:46:af:60:33:f5:46:70:4a:20:de:
a3:45:a8:5a:31:d6:e7:08:e8:54:05:82:ac:f5:0a:64:bd:46:
98:44:82:d8:f8:b5:08:ca:c4:a1:91:cd:7c:53:4b:e8:f0:3e:
8f:2f:f7:15:c1:90:4e:c6:af:73:db:91:f2:c4:6a:c0:27:23:
c4:20:fa:24:dc:b9:68:8b:4b:94:9b:11:36:c8:df:00:f2:77:
76:dd:ef:80:67:c9:56:69:79:4a:b6:4f:6a:3a:ef:cb:63:03:
b0:9c:41:13:25:f5:96:2e:a7:58:23:4b:4b:e7:7f:ed:46:4a:
63:81:41:1c:da:28:08:d6:52:2e:d0:3d:e1:54:1b:7d:0c:44:
b9:98:13:6b:8c:d9:41:c9:ec:0c:36:ce:4b:4a:dc:73:59:d4:
5c:00:c0:df:aa:56:96:30:6b:b6:65:d7:5e:24:a0:10:ed:4a:
01:dc:1f:23:24:09:d5:f4:7f:9f:6e:f3:59:20:d3:f0:c3:98:
ac:36:27:2b:c2:c7:a5:89:00:55:c5:6d:3b:bb:58:73:50:80:
a3:d2:66:00:5b:8d:82:c2:34:ff:a1:cf:6f:64:b7:92:ee:c5:
11:27:be:d6:cf:4e:be:c9:ae:a2:e4:63:ad:dc:2f:e2:fb:8e:
54:11:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:38:34 2024 by rpki-client on console-ams.rpki-client.org