Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: EftiESasnJ6rCRXuWKvtNZ0LkmfYbaS347cuETvIcOY=
Subject key identifier: B8:F0:77:84:D3:C2:BB:3C:67:26:03:D0:DA:F5:9D:13:63:6A:39:B3
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 01901EC68189A48507DD9D0D4B60E8E53EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 0459
Signing time: Sun 16 Jun 2024 02:00:43 +0000
Manifest this update: Sun 16 Jun 2024 02:00:43 +0000
Manifest next update: Mon 17 Jun 2024 02:00:43 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: Snh7ITD2RnShNmZ7FZJlF8RfOAH/7XWwBJkr/dLJdx0=)
2: HrUWwjLaIvz32L4D4yEP41y7k9k.roa (hash: mjb/KGnwpgbTT+oD8LY9FGBEj7Ro1mY/Dd5z8NA8K9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:81:89:a4:85:07:dd:9d:0d:4b:60:e8:e5:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Jun 16 02:00:43 2024 GMT
Not After : Jun 17 02:00:43 2024 GMT
Subject: CN=b8f07784d3c2bb3c672603d0daf59d13636a39b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:89:fe:a7:2b:4a:37:20:f6:3c:a5:24:f0:
7f:f8:39:a4:dc:f1:5c:1e:be:6b:82:f3:08:30:7b:
cd:e4:07:48:66:63:ec:e3:00:b5:16:ad:14:a4:7f:
07:32:80:cf:c1:fa:f2:8e:2d:85:f3:f0:11:c6:0d:
ff:a3:55:2d:62:43:de:58:c4:87:b8:c5:7d:33:a4:
08:82:b4:eb:99:7b:c3:d7:83:70:4f:8b:ac:27:3b:
75:9c:5a:cb:3e:3f:36:b2:9b:92:e8:99:d5:8f:1c:
9a:82:99:1e:82:83:49:29:6c:6b:b4:4b:0f:af:47:
86:ec:ac:fa:bd:8d:55:5a:d8:b1:fe:68:6d:80:0a:
b0:a1:99:8b:15:24:a8:1b:9d:95:c3:74:57:46:70:
67:72:9a:84:db:37:77:56:d5:e0:a4:00:db:21:24:
00:e9:11:04:4c:46:ca:e7:72:48:0d:16:61:de:d1:
9d:48:4a:fb:a3:5d:ea:17:e0:c9:76:b8:e3:90:74:
14:cd:78:01:00:ec:9b:4d:8f:ad:79:3b:55:60:6c:
b4:66:b1:80:ad:2a:df:4f:0e:12:f2:11:3e:61:36:
4d:cb:d0:45:75:81:b3:c5:05:9c:77:45:06:68:2d:
c1:de:f7:03:b6:e2:1c:64:29:8c:e9:de:21:42:b6:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:77:84:D3:C2:BB:3C:67:26:03:D0:DA:F5:9D:13:63:6A:39:B3
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ba:7f:55:db:06:95:42:5d:99:80:45:ed:e8:a4:1c:c0:8c:
23:f2:02:66:5b:44:7c:f1:3b:16:30:86:05:6f:13:21:9b:15:
f4:d2:7e:ee:18:44:9e:1b:f7:12:04:96:8b:2a:f7:d4:d1:a4:
d2:bc:37:e3:97:95:d1:b2:9b:29:6c:b2:f8:6b:0f:5e:a5:8d:
ea:ca:29:c2:77:78:a8:25:62:9c:72:06:b1:3e:25:30:cd:eb:
31:41:32:a1:d8:36:6d:e8:b3:15:e8:be:c9:68:f2:86:f0:a8:
2d:c4:26:d3:95:a5:da:71:03:8f:9b:62:bc:02:15:3f:f9:bf:
79:8a:6f:23:6a:d6:aa:98:f3:42:15:8a:0c:2f:a1:ca:f2:9c:
bf:22:e0:d6:ff:4d:ac:9a:82:ac:d7:d6:6b:54:5f:7c:82:07:
86:4c:5b:1c:bb:d9:d9:22:bf:8a:93:75:06:a1:b3:e5:e2:92:
ca:8b:f2:cc:8f:dd:88:e2:ed:62:cc:6f:a8:c8:24:f6:e3:1d:
ab:eb:ab:b1:dd:20:33:af:85:6f:0e:c6:17:2e:b0:69:bb:18:
f7:d4:99:57:bc:8e:23:47:69:6d:eb:1b:64:2d:8a:c1:25:4b:
d7:4c:a3:bc:90:e3:22:81:62:88:78:8f:c8:9d:0b:8a:13:2c:
b3:0f:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:30 2024 by rpki-client on console-fra.rpki-client.org