Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: sxZBOKI0mRJtF5VWIjphTHh8HtC0dBHFgg8e6qXWlos=
Subject key identifier: 82:0E:95:6F:EA:30:58:E5:6F:B0:0B:44:6C:FA:F3:EF:B4:96:C8:72
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 01901F3499D985EFB6EE8F35D12B4618ED77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 0CA1
Signing time: Sun 16 Jun 2024 04:00:59 +0000
Manifest this update: Sun 16 Jun 2024 04:00:59 +0000
Manifest next update: Mon 17 Jun 2024 04:00:59 +0000
Files and hashes: 1: 0MiQxU_umqZZyIzU8wHKdMFXp0A.roa (hash: 5nt2j6km21NuuCF4w1WM2omoybaeqwuAwd9GKwqLz3E=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: VVbZCIJlf2HUQSD30yPCD2f1casyHuhDAGRbe8coSYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:99:d9:85:ef:b6:ee:8f:35:d1:2b:46:18:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Jun 16 04:00:59 2024 GMT
Not After : Jun 17 04:00:59 2024 GMT
Subject: CN=820e956fea3058e56fb00b446cfaf3efb496c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:ea:1a:57:20:18:d3:71:4a:59:b1:a2:e2:
44:5a:bf:ed:d0:32:2e:6e:1a:23:5f:da:1d:ac:5b:
b4:f4:07:a3:b7:ea:0c:60:5c:1b:ef:00:14:f3:47:
5c:2b:7a:8b:61:52:bf:b2:84:ae:9b:0f:11:4c:5d:
3e:f1:c4:c8:3e:70:cd:81:55:fa:fb:54:46:f8:78:
68:59:a7:00:e8:9a:5f:08:84:fa:1f:fa:67:25:ec:
29:f2:cd:bf:34:8b:db:47:ae:e7:0c:b3:18:09:3f:
ad:e3:1d:fc:3b:4e:ec:b9:d8:48:be:91:61:d5:ce:
af:67:8b:ce:83:90:0d:5d:03:63:b2:46:e0:95:cd:
4a:f1:32:0e:dc:f8:35:94:ca:a0:75:b6:4d:8b:67:
86:e0:d4:66:27:fd:55:9c:75:b0:9a:52:89:1a:55:
f1:62:6b:48:9c:b9:27:bf:9f:65:f2:18:05:bf:77:
70:2e:3d:11:50:45:f6:40:91:13:cb:1c:86:4a:ea:
fb:f8:bf:b3:73:12:2c:17:1d:af:dc:4f:33:e5:f6:
3c:62:ce:cd:f8:f4:80:30:04:31:1e:6e:02:bb:11:
9b:0a:88:55:80:dd:29:8a:78:46:f0:ad:c8:3d:4b:
c0:84:5e:e4:26:7a:eb:1a:e3:5e:34:80:5e:5a:5b:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:95:6F:EA:30:58:E5:6F:B0:0B:44:6C:FA:F3:EF:B4:96:C8:72
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b4:c7:10:28:bb:4a:f6:38:2e:8a:b8:c6:a1:50:40:2d:63:
68:be:d6:c1:b1:d9:ab:cd:28:00:a3:6c:b9:fd:21:00:7c:b4:
e8:23:01:57:ab:43:84:5d:c9:f3:6e:2d:4a:82:0b:7e:98:60:
e9:c6:20:0c:d5:34:0b:b9:1a:48:9a:15:0f:8c:ed:1b:f4:ae:
f9:6a:7e:e9:0a:a2:8e:25:28:2e:3e:7e:1b:d7:75:d3:c2:83:
e7:5b:4d:fb:7b:7b:02:9c:42:0a:c2:d9:b7:48:10:86:c2:82:
23:91:4d:19:e3:82:64:96:7e:47:ec:31:46:61:c6:ed:58:36:
5d:a4:b8:36:a4:2c:ed:47:ec:b8:77:91:b5:67:92:e4:eb:23:
f6:4f:1e:c2:bf:b3:e5:8a:33:d9:f8:6a:e0:db:55:b2:73:d2:
ae:37:0d:5f:1f:e1:b4:81:d5:32:bf:87:00:e2:9d:69:d5:50:
df:e3:5d:c6:ce:8a:9f:32:ba:7b:04:1c:c1:37:9b:a3:25:7b:
96:16:88:a4:8a:40:39:fa:b4:6f:ba:10:1a:e2:0a:55:03:13:
2b:a3:ea:18:7e:0b:f7:dd:99:ed:c7:58:af:40:af:66:06:4a:
bf:ca:ed:3e:f2:8e:a9:5a:a7:17:fe:68:69:57:91:61:24:90:
54:38:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:09 2024 by rpki-client on console-fra.rpki-client.org