Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: EfQ5NxzomJRhns28USfnVoT+4dnDjkYdC11T6y/S3mo=
Subject key identifier: 93:EE:25:94:13:09:99:9A:9D:DE:4A:05:FD:96:3D:C2:F3:C4:3C:6E
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 01903A3D9C75554D00C65D68A0ED538C2CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 11E2
Signing time: Fri 21 Jun 2024 10:00:34 +0000
Manifest this update: Fri 21 Jun 2024 10:00:34 +0000
Manifest next update: Sat 22 Jun 2024 10:00:34 +0000
Files and hashes: 1: Afm_fdJ1kqqie5lpTze6mvIqyuc.roa (hash: eguUUfEB5CdgQ2W05ZZT84U7wFOqHzBHDNnmkOZlYBg=)
2: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: 8NPCHdjU8aA8PiTORunZxPi51A0X0/F/JwgUFLiQp00=)
3: hxZ05sOHjC46SJBCUDqFkCDEN2M.roa (hash: JEEV6m+BGLY+z3+6eH6nXqiKAnHXFhouLnY3XU2CqZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:3d:9c:75:55:4d:00:c6:5d:68:a0:ed:53:8c:2c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jun 21 10:00:34 2024 GMT
Not After : Jun 22 10:00:34 2024 GMT
Subject: CN=93ee25941309999a9dde4a05fd963dc2f3c43c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:fe:f4:8b:2a:80:b6:c5:60:08:2e:e0:7c:
6a:d2:a3:fa:fc:44:af:c7:12:56:3d:e5:01:ad:b7:
b6:04:ad:40:8d:b8:81:06:17:3a:c5:90:d1:ca:45:
91:8b:8a:3e:9a:72:42:5a:bc:45:eb:d1:33:4c:4d:
62:58:4e:8c:66:40:5a:6c:ff:82:a3:86:a3:af:59:
66:96:b9:c6:2d:c7:48:bf:ab:a9:b5:da:cb:7c:20:
6f:1e:a1:55:ef:d4:0c:d4:af:fc:09:14:5e:a5:fb:
54:71:03:e9:4a:93:3a:6d:6e:b1:1f:d1:f0:59:ec:
47:ac:ec:0c:d7:f3:a0:71:99:e6:31:11:b7:64:3a:
c1:36:9d:57:03:66:b4:2f:e8:6d:96:2b:af:64:39:
19:f5:2a:74:bc:b2:ff:df:93:88:35:17:d6:d4:bb:
4d:be:b6:bc:56:40:04:ec:05:99:13:15:af:15:3b:
78:6d:1f:17:5e:87:e4:1a:98:53:2a:50:31:04:54:
e7:3f:25:3a:90:d7:17:97:57:6a:61:8d:44:1c:7c:
25:3b:5d:4a:77:65:88:19:ab:3c:ee:bd:67:16:dd:
63:03:63:56:c6:38:e0:2b:0f:70:42:4f:df:fe:65:
2e:aa:23:ec:92:92:b3:05:f1:49:02:f2:7f:5a:1c:
43:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:25:94:13:09:99:9A:9D:DE:4A:05:FD:96:3D:C2:F3:C4:3C:6E
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:32:39:f5:06:b9:ca:b3:13:81:e3:a9:6a:ce:b3:ae:92:f5:
28:09:e5:78:73:9f:f8:e9:81:cf:07:8c:6e:fa:29:ba:20:37:
a1:c4:17:45:01:ba:67:a7:10:bb:25:9d:f4:98:4a:6a:a2:60:
ba:22:87:fb:8f:83:40:a2:65:ac:c3:a4:8b:22:67:a8:cc:cd:
d3:55:13:20:18:21:3b:f2:34:29:d1:80:29:d2:e9:1b:98:c9:
df:f2:74:c1:ef:4a:02:5b:6d:77:7e:a0:9b:19:a4:45:26:78:
d3:61:90:9e:c1:ec:a4:d2:e6:e7:32:f7:08:9b:8a:ca:a8:b3:
d0:63:e9:c8:d9:f0:10:2a:6c:86:95:13:de:b8:6b:4f:94:35:
48:93:30:49:33:a8:d6:a0:7a:26:87:98:c9:49:e8:c1:ba:06:
d7:e1:03:ae:78:01:81:ac:31:8b:03:ba:d0:4f:f1:31:f2:db:
1d:85:5f:e7:a3:d3:29:52:63:81:c3:7d:76:61:a5:a9:bc:a3:
28:26:ca:75:09:ad:b6:d9:13:d2:e7:27:f0:86:37:9f:a7:bf:
86:84:36:ee:40:62:89:7f:dc:07:c7:a8:96:a8:a3:a8:3b:4b:
bc:2f:e6:ba:5d:5c:5b:03:49:09:6f:0a:ab:83:64:f6:1f:ca:
16:fb:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:32:07 2024 by rpki-client on console-ams.rpki-client.org