Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: +KOssKjigGe91pi4rQwNciwrHwzhc2qkwDGJa8FFTWI=
Subject key identifier: B6:3C:B7:5D:B2:49:5F:4A:0B:8E:93:C5:94:7E:53:A7:40:FD:47:7C
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019045D4600C02566E2EE0E0D87C76C2E9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 11DC
Signing time: Sun 23 Jun 2024 16:01:04 +0000
Manifest this update: Sun 23 Jun 2024 16:01:04 +0000
Manifest next update: Mon 24 Jun 2024 16:01:04 +0000
Files and hashes: 1: 5oynhsVzTAw2I5LfauOnSAhxDio.roa (hash: GBF+JaN/it597Qh9DfpCiJeZ0qO6566WIRQUCndkdmk=)
2: bRKz-qmBvk2ExavS5ZK7121v_xU.roa (hash: dgjMa5xPJ5EiPu9kI9kbewi5Hx3vJX0l1FQg5ghnyZ4=)
3: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: QCMBY7hqmxwe5Ips9Ump+4NoP6s9ralqhfVvXPYYPBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:60:0c:02:56:6e:2e:e0:e0:d8:7c:76:c2:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jun 23 16:01:04 2024 GMT
Not After : Jun 24 16:01:04 2024 GMT
Subject: CN=b63cb75db2495f4a0b8e93c5947e53a740fd477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:c1:6c:65:10:a1:2f:55:21:a4:72:03:0d:
c3:cc:60:a8:62:ae:e3:58:1c:a9:c2:c3:33:05:1c:
a8:38:68:a4:98:9f:f6:50:6d:b1:4d:4b:50:70:31:
a6:4b:53:26:ea:26:c3:79:0e:87:68:6d:a2:45:53:
f4:95:7b:28:17:e8:b9:c4:7a:95:79:f1:3d:17:ac:
0e:aa:3e:6f:04:8e:bd:5f:9a:3c:12:37:87:31:a6:
f5:eb:d6:de:dc:f5:b0:df:9c:e9:9c:8f:29:54:68:
e5:7a:c9:84:62:c6:19:e9:ed:8e:f9:f1:d9:2a:b1:
76:ee:28:b9:f6:1f:ec:4e:b7:46:db:35:f9:e7:0c:
ed:c6:d7:63:9b:4b:45:0e:bd:81:7e:a1:06:c4:6f:
d0:71:79:ea:08:13:91:ef:91:91:29:59:07:2a:86:
a1:5a:dc:6c:3c:80:4c:6e:ad:09:03:d5:41:68:d7:
a5:74:3d:07:54:cc:55:3e:93:94:f9:26:d8:b2:9d:
f6:51:2c:4f:16:1c:bc:d3:61:32:d8:9c:54:aa:e6:
0e:8a:07:a6:6c:27:dc:98:36:ec:8f:a0:0b:0e:1e:
aa:8c:86:9e:67:e0:1e:ab:d7:d1:44:c9:8f:37:d8:
9f:bc:87:1f:e7:ed:fd:4b:73:47:c8:e2:9e:e7:1a:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:B7:5D:B2:49:5F:4A:0B:8E:93:C5:94:7E:53:A7:40:FD:47:7C
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:09:e2:24:68:a3:5f:ba:54:58:0f:c9:03:e0:d9:03:06:
dd:2e:f3:e5:19:6f:45:e7:96:66:06:6a:a5:46:83:39:93:9e:
63:ed:5b:16:96:35:5f:ca:ab:e3:7d:55:97:fc:d6:c5:f3:64:
a4:03:92:e8:cb:b9:8d:e4:00:30:52:69:fe:27:8f:e7:c0:8b:
23:a1:b3:e2:c5:e7:3a:b5:09:84:e1:3e:57:a0:a7:95:7a:6b:
c0:ab:79:d6:69:04:9a:58:77:d5:e2:6d:87:17:36:b6:44:ee:
00:47:05:bf:74:49:29:64:04:e6:f8:41:a9:12:1b:cc:c8:24:
4d:ff:a7:c2:7d:eb:06:0a:eb:61:d8:f0:87:ec:69:f0:21:bb:
eb:b3:50:b6:64:03:54:51:05:fb:dd:1f:09:6d:ce:12:d6:85:
e9:b1:53:af:69:c3:0d:82:1a:2c:46:cb:ca:f0:1e:b0:98:44:
81:49:af:96:c1:88:a9:90:d4:7f:23:67:65:43:23:cd:a8:ff:
07:3f:bd:92:a7:08:33:51:2a:6b:13:3d:dd:14:3c:94:10:2c:
a4:4f:78:54:b9:3b:a7:76:f5:a2:d3:93:29:ce:c1:d4:a5:74:
ee:08:dc:64:16:aa:03:da:a9:0d:3c:fb:a1:c6:2d:11:d9:30:
53:1e:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:13:55 2024 by rpki-client on console-fra.rpki-client.org