Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier: eyl0nGWr3h3zhS59Bm9erASwsgtWwq6R4Wis6n9cpgQ=
Subject key identifier: 9A:25:07:67:10:4C:C8:85:23:77:FF:F9:B3:36:7E:52:85:C4:A9:1C
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 01904979FCB1E8EF87911D4E52A792AD06CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number: 0BAE
Signing time: Mon 24 Jun 2024 09:00:49 +0000
Manifest this update: Mon 24 Jun 2024 09:00:49 +0000
Manifest next update: Tue 25 Jun 2024 09:00:49 +0000
Files and hashes: 1: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: D3kfkhLe1eSlsknBAJthDiQmL9gp1mC339aykdPJ0lw=)
2: _ZdbqZDjLwqhqco-OCKHkAW7CHk.roa (hash: MyiuhW9qjN+LmLQU0unn/T02LOrN6vckY+ROKtjjNLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:79:fc:b1:e8:ef:87:91:1d:4e:52:a7:92:ad:06:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jun 24 09:00:49 2024 GMT
Not After : Jun 25 09:00:49 2024 GMT
Subject: CN=9a250767104cc8852377fff9b3367e5285c4a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:b2:24:17:68:bb:c9:a9:7b:c0:ce:17:2c:
59:55:74:d7:e1:81:bf:1c:db:33:fa:40:23:f1:e4:
22:48:18:4a:88:19:73:93:1d:1c:3e:2b:f6:45:14:
42:3d:24:05:f6:46:d8:d5:fa:d4:f6:88:98:d4:e2:
f4:a8:87:09:ac:1d:d1:9c:94:d7:eb:7c:8e:6f:69:
f2:a7:28:78:25:0c:a1:30:fc:2d:ff:40:95:86:b6:
e9:44:54:41:3a:4f:62:ed:af:29:10:1b:98:e6:1f:
1c:8e:ab:6a:aa:22:83:c6:53:5d:91:4c:79:6d:62:
6a:03:99:34:fc:ec:12:cd:df:d0:8b:d2:22:53:31:
11:80:2d:47:08:46:83:f0:d9:df:a9:88:ff:c1:04:
d3:c8:ae:86:8e:81:eb:67:06:32:df:68:49:a0:79:
be:6a:09:99:c5:19:7b:76:76:27:99:bc:49:83:28:
2b:50:ac:50:d2:da:37:e5:ba:16:b7:82:c6:9f:90:
b1:da:08:f5:54:0e:36:c4:72:f1:37:2d:05:6b:a1:
44:52:ab:53:0f:76:9d:1b:b7:eb:0d:94:8a:48:f1:
27:37:95:ce:19:a8:34:bd:62:1b:ea:64:c2:80:1e:
fc:ca:05:bb:d7:9c:4f:c9:59:85:01:1e:1f:cd:96:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:07:67:10:4C:C8:85:23:77:FF:F9:B3:36:7E:52:85:C4:A9:1C
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:da:fc:27:2a:f5:89:de:31:89:ce:0b:94:e1:6b:8f:92:
55:c0:49:28:41:2e:de:d9:ff:d2:60:0c:00:d0:ba:74:40:08:
75:72:06:cc:5e:f3:bc:38:3d:ce:75:89:78:fe:20:5b:7d:f6:
da:6c:4c:54:fb:74:53:dd:57:42:47:f8:72:16:a1:32:6a:aa:
55:7c:6c:76:47:7f:34:e3:7b:4f:5b:df:43:8b:e5:08:0b:89:
44:0a:4b:84:92:92:a5:56:f2:5e:8f:a1:9a:25:b4:74:5a:21:
a4:e6:69:bf:b3:85:be:22:9d:1d:9e:42:e7:3c:e8:20:4b:1f:
56:b0:81:20:d6:b2:35:34:6b:b9:ba:07:c8:8e:3b:cb:8c:95:
e9:01:57:2b:f4:24:97:18:40:4e:53:18:7f:89:51:c0:69:a1:
0a:59:99:ec:0a:86:8a:c8:1c:51:e4:7c:a4:c7:bc:57:d9:08:
ab:13:7a:3e:86:4a:41:89:a1:49:01:da:28:0e:88:3d:6c:fd:
f3:f1:d5:31:1e:97:c8:a0:8a:64:20:06:f6:43:1f:5a:f0:f9:
a9:83:60:8e:52:b0:4e:c4:6e:69:12:f9:a8:4b:96:2f:ca:4c:
48:df:fa:b2:5b:dd:3e:1c:f2:69:91:41:80:ee:74:1a:2b:91:
9d:0b:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:46:07 2024 by rpki-client on console-fra.rpki-client.org