Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: YXWPwB8dosJUCvZTfQ8CrUgXCTWnDSqNFxbZUKwy/WY=
Subject key identifier: 89:0A:78:73:E9:84:1B:07:ED:C4:8B:95:4F:76:F7:71:79:57:54:FE
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 01904189A922407BAA761BDDFD76D3BCD5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 11D9
Signing time: Sat 22 Jun 2024 20:00:58 +0000
Manifest this update: Sat 22 Jun 2024 20:00:58 +0000
Manifest next update: Sun 23 Jun 2024 20:00:58 +0000
Files and hashes: 1: DLtZ20c_h4pbuOB6bkwXWBDSfbg.roa (hash: hvrIwdgyWmq+X3idkq7Rnl/28NVczrOt2YyKVv0Wsg0=)
2: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: Q+WUTsAxdTsDT5ZH8N+gVwNz0D7BHA7sGlkF+MahOcQ=)
3: l4qtzTtMCwn6NB3bmaJvZuIGvYo.roa (hash: wi9Z32zqTqWfFxQoXPsPPmb/gVTS14d9XjYowkVQ08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:a9:22:40:7b:aa:76:1b:dd:fd:76:d3:bc:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jun 22 20:00:58 2024 GMT
Not After : Jun 23 20:00:58 2024 GMT
Subject: CN=890a7873e9841b07edc48b954f76f771795754fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:d7:d4:d1:2e:25:dd:9d:33:19:e6:2f:2e:
05:9c:5c:4b:6d:fa:9f:15:26:94:f5:5a:b0:4d:6a:
56:7e:24:f3:16:a4:8a:02:f6:26:ef:50:20:02:c2:
a2:5c:9c:2d:29:df:6f:1e:c0:e7:03:88:fb:96:cb:
0d:80:84:ce:6e:cb:6a:5d:16:10:ef:6e:6f:26:c8:
49:df:45:ab:78:c5:a2:b0:52:6b:e3:ac:95:7e:55:
41:f9:75:c2:89:8b:a9:0f:78:34:c1:12:3a:b1:69:
16:f5:d1:60:30:51:32:b1:7f:8f:89:26:cd:bc:45:
64:97:19:64:99:7d:ff:7c:96:e0:55:1e:b0:58:11:
22:f4:19:0e:d6:e8:eb:e8:03:8b:0d:44:a8:7f:7c:
2a:b8:24:a6:bf:c8:85:d8:e0:70:27:1b:18:29:f8:
f2:43:ac:55:48:b6:7d:e8:4d:14:da:bd:2a:84:0f:
f9:d7:1d:ce:9e:78:26:e2:10:4e:c9:13:0b:39:60:
f3:a1:c4:87:9e:d2:c8:85:ac:0a:33:5f:88:85:35:
3f:3f:c8:ef:72:3e:21:f3:05:54:fc:8b:ef:f7:02:
f7:cb:84:17:5d:df:7b:f3:6f:c0:17:3e:79:83:13:
a0:d7:b8:5a:ca:4e:62:a5:7c:f1:16:9a:37:40:57:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:78:73:E9:84:1B:07:ED:C4:8B:95:4F:76:F7:71:79:57:54:FE
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f9:12:ce:f5:8d:2e:83:69:68:4d:4d:51:7b:56:44:f4:d0:
9d:27:ae:5b:5e:d0:fc:b6:d9:d4:92:a1:6e:33:36:b1:de:b6:
1a:15:a0:e6:3b:e2:45:8d:ba:dc:bd:45:3c:0c:8b:14:ae:f4:
28:f6:1b:dc:2c:17:3e:21:94:85:b3:e6:af:e8:1a:90:33:5e:
47:78:ec:42:7e:d9:8a:a7:08:e5:9f:79:77:75:64:a3:a8:94:
d0:2a:e0:f2:37:ac:a5:ea:ab:09:c6:8c:fe:e4:03:d4:d1:cb:
e7:74:5c:2f:1f:64:49:77:5c:b6:39:92:92:e1:86:92:67:fd:
23:8b:ac:b0:3d:7d:e2:51:b9:d2:7f:4a:de:13:db:3f:43:19:
0c:0e:b6:f7:e4:16:b7:6c:53:de:a8:b9:f4:33:3e:25:69:0b:
b4:32:f8:ef:a4:e4:84:9d:44:97:89:0d:20:eb:f6:4d:f8:7a:
23:ff:c0:d1:5f:7e:12:df:4f:7d:6b:c1:c2:90:7a:8c:8d:2f:
26:12:3c:5d:fb:cf:58:0c:b8:f1:35:28:b4:db:a2:ca:46:5d:
22:9a:9f:4a:d2:28:6b:9a:a6:a1:42:af:24:86:24:be:7f:25:
5a:d8:f2:6d:a9:b9:f9:b5:f5:35:09:69:72:97:16:5f:33:c8:
7c:6d:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:58:18 2024 by rpki-client on console-fra.rpki-client.org