Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: Z7V6prOlsVxfPfQCvth/Aq/PkotIPXcQjF8XL33mXA0=
Subject key identifier: B0:35:15:E2:83:BC:1D:84:BA:B5:A9:D7:C4:39:FC:20:37:D8:28:63
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 01901DEBB506C41679274366949A8AFC7920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 22:01:44 +0000
Manifest this update: Sat 15 Jun 2024 22:01:44 +0000
Manifest next update: Sun 16 Jun 2024 22:01:44 +0000
Files and hashes: 1: AROH3stmLy3bZ87mCXvMTzn7vfI.roa (hash: PQdyGgnKO8/qDtbnpFDxuegB3KYGJsiThASMC/rJqb4=)
2: TqDpEZ_T4bMne53DF9ml0rzNKj4.roa (hash: P+N65HRtAiMgnvPkUtxgZzx8B4ygLb8xtZBRCybH9pg=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: ns6g2HhcCOJrXMB9ONaKlCMpuAiznnoQuCQ4OcnPhx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:b5:06:c4:16:79:27:43:66:94:9a:8a:fc:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jun 15 22:01:44 2024 GMT
Not After : Jun 16 22:01:44 2024 GMT
Subject: CN=b03515e283bc1d84bab5a9d7c439fc2037d82863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:bd:5e:8f:b1:b7:71:0b:44:f0:bc:a6:d5:
e4:7d:c1:86:4d:a1:0e:02:27:9d:4f:20:79:3b:72:
2c:84:2b:0c:95:72:4b:ea:a3:90:03:ca:36:51:28:
e1:3c:00:70:94:b5:d9:d2:e0:1c:2a:dc:e9:36:cf:
0c:ed:46:e8:b2:28:25:8a:71:2f:c8:d0:ef:a7:08:
e7:1b:1a:f2:3e:aa:44:b5:58:28:73:54:58:15:a2:
ae:04:6a:12:05:97:d0:0d:69:83:97:78:26:2f:f5:
24:d4:e9:2f:a4:21:1e:44:e2:a8:d0:00:0b:3a:d7:
94:fc:a4:44:42:9b:2e:ab:06:c9:59:fa:6b:c8:e1:
8d:80:8f:d0:2c:78:db:d5:25:7a:86:71:fa:d3:6f:
b6:b5:70:f2:59:d5:b7:cf:8c:88:a7:d5:2f:57:b9:
28:66:02:5e:fb:dd:ce:bc:c0:89:8b:da:03:dd:d1:
6f:e3:4b:68:8a:6d:99:e4:ad:f7:70:46:9a:89:d1:
51:27:42:3a:7e:a4:3f:2a:87:ac:2c:8e:23:73:8d:
ae:8f:bc:c3:34:03:fa:ee:0d:09:c6:59:8d:ef:59:
19:e4:a0:bc:86:20:ac:df:7a:42:56:e0:8c:03:a2:
c1:29:80:dc:ce:81:fa:58:34:a7:08:e5:e2:65:37:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:15:E2:83:BC:1D:84:BA:B5:A9:D7:C4:39:FC:20:37:D8:28:63
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:d0:b9:9b:9a:2b:9a:41:4c:d2:0f:00:1b:79:e5:b4:30:
5c:b9:2a:fe:a4:7c:6a:c2:e6:d9:14:f3:7c:2f:99:3d:83:56:
f9:fb:0e:c9:7f:bc:93:91:2a:c2:c9:81:94:6a:65:70:9d:2b:
5f:de:32:79:f2:73:7c:66:08:2d:1e:4a:1c:ae:69:96:34:9d:
db:a8:70:ad:f3:39:07:eb:0f:4c:55:79:02:46:69:a6:29:6a:
87:d6:33:09:47:f0:8a:cf:e0:c0:f3:02:54:aa:cb:6d:15:b0:
7d:9b:15:53:bd:63:5e:f4:9c:25:d9:68:47:ca:5b:5d:5e:5f:
84:64:65:5a:bd:31:35:21:9d:ca:88:02:9e:6a:9a:f0:f8:0c:
0e:69:51:c3:43:62:f7:9c:96:79:d9:eb:2e:a8:c6:2b:ba:4b:
b8:bd:39:72:32:d9:01:93:e8:64:6c:d6:b6:02:41:d9:74:c4:
89:58:54:4d:4a:9c:e4:16:a5:b5:94:9c:a8:df:ff:23:56:29:
a8:16:59:1e:11:67:f9:2f:f3:52:fa:b0:89:ed:86:51:64:62:
28:c5:46:76:04:35:29:ee:b9:96:69:eb:7b:d6:89:4f:74:76:
0b:56:54:04:a6:a1:c3:97:f3:57:60:66:c5:23:1c:e8:ec:46:
07:41:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:23 2024 by rpki-client on console-ams.rpki-client.org