Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: zTMtpv31s8cW9y0FJYHfzwsY6NonUz7f5DidDLVJ2NA=
Subject key identifier: E0:08:F0:1C:83:39:8A:E4:96:5F:01:41:F9:2E:0E:37:96:D3:A6:3E
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 0190448C2EE94DF26E8840E42E302A585B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 067E
Signing time: Sun 23 Jun 2024 10:02:35 +0000
Manifest this update: Sun 23 Jun 2024 10:02:35 +0000
Manifest next update: Mon 24 Jun 2024 10:02:35 +0000
Files and hashes: 1: 1-fTb7xYqbSrerJnmY1FvbkardEo.roa (hash: 8S1AIGSvt/vb0TOnlLTlOVIv6jeqx8/YIetYz+cJ/yI=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: 1P8KZXqVDDznD3oqd1CGOfh3U1V2osLVu4VFVqP3YCk=)
3: dXqyn33TZzqjKp-XJX3_rl1-G6E.roa (hash: HJfRvZ8URaY4aNbzbjXNVAC2tPbApyJwf9lfZS4fJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:2e:e9:4d:f2:6e:88:40:e4:2e:30:2a:58:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jun 23 10:02:35 2024 GMT
Not After : Jun 24 10:02:35 2024 GMT
Subject: CN=e008f01c83398ae4965f0141f92e0e3796d3a63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:d9:93:00:d6:2f:a3:1f:0e:a4:79:c5:0e:
f3:03:68:94:21:4b:eb:77:e6:8d:74:5e:57:76:b9:
ae:9a:4d:f3:42:83:77:63:4a:cc:13:ce:b1:02:67:
aa:db:89:e5:2f:9f:05:53:26:85:90:8e:ee:09:b9:
27:9b:c9:25:63:dd:ec:11:1b:b7:f6:9a:5c:d8:e6:
92:8b:be:32:69:e6:a6:78:06:b1:9b:d5:7c:2f:90:
ac:ed:d7:3e:22:98:f9:47:78:49:39:5a:6f:d3:35:
25:66:59:48:67:57:8b:a1:d8:68:26:4d:3f:e0:0d:
60:96:58:72:4d:c3:86:90:04:f0:d1:6b:8e:12:44:
85:be:22:51:c9:a2:c0:01:3c:2e:8e:17:e9:58:90:
19:9a:fb:56:8d:ad:6a:46:4c:07:36:f0:d9:7d:6b:
c2:d8:84:1a:48:78:b6:ca:ac:26:8f:ea:0e:7e:3f:
7f:20:2f:7d:58:31:79:43:68:a4:fa:f4:8f:5b:d6:
d3:5f:c6:c0:d5:13:49:23:6f:3f:1e:b0:cf:c0:4b:
85:6f:45:6f:eb:0c:1c:0b:9e:4c:28:3b:d1:06:ae:
bc:ec:2e:e6:dc:f7:b5:91:54:e5:b2:78:e7:d5:b9:
c8:44:dc:63:55:26:5c:b8:6f:9e:63:81:cb:53:7e:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:F0:1C:83:39:8A:E4:96:5F:01:41:F9:2E:0E:37:96:D3:A6:3E
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:ab:03:62:df:62:0e:d1:09:d9:66:27:5c:36:d7:44:6b:
b7:16:f7:ac:b9:e0:c4:c6:10:c2:84:de:e2:67:72:36:80:88:
24:80:c9:1d:51:3f:69:5f:ba:6a:88:48:91:69:33:c0:70:c6:
56:0f:56:d5:14:d3:cb:63:d8:5c:8e:23:91:48:95:19:55:89:
f2:fe:88:0c:4d:25:e7:6a:1e:a0:38:f8:05:d0:47:0b:58:ed:
95:9b:8c:fd:ef:d1:9f:ca:40:3f:e7:00:55:23:b1:54:da:00:
67:ea:46:c9:97:6a:7a:f7:9d:89:43:50:df:26:68:3b:88:1b:
c8:ba:d7:e0:5f:24:99:c8:ea:dd:74:ed:99:d2:3f:6b:61:0f:
2f:66:b8:87:86:a7:41:29:d8:be:5b:e9:b4:b1:39:6e:6e:13:
99:c4:15:70:d3:1e:26:f1:28:29:1a:fe:8d:68:07:73:ba:08:
cc:01:bf:90:e5:99:04:ee:98:0d:a5:72:29:76:70:dd:8c:c8:
7a:b7:49:3c:1a:ec:25:68:43:51:ea:1c:0e:be:3a:78:a6:10:
26:72:e1:2f:5b:49:5a:5b:af:77:bd:7a:3d:46:9f:58:4c:00:
52:b0:ae:27:78:5a:a2:6a:47:63:75:7a:87:0d:ef:a6:58:2c:
d9:50:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:32 2024 by rpki-client on console-fra.rpki-client.org