Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: 98kB2WhkSpaWFbZOEUu22sWP120WKcNt1aJhTfNgohc=
Subject key identifier: 70:64:28:1B:1E:07:A5:AC:53:F2:6A:23:CE:5B:D9:08:7B:6A:86:1E
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 019053FD8853795FAB228A1021D3A2ACF4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 05D1
Signing time: Wed 26 Jun 2024 10:00:42 +0000
Manifest this update: Wed 26 Jun 2024 10:00:42 +0000
Manifest next update: Thu 27 Jun 2024 10:00:42 +0000
Files and hashes: 1: I4JcEdFxmSx0F6vczLxZ9_L2F_s.roa (hash: oaJ3M9vBZ+1KDZZFXJUIUL/hj4/9cmdgqEPwMwlCpMs=)
2: KglPTXdiG91riSkLpGFaB5Xwi3Q.roa (hash: 7XRnll8Em+cn8Q3/7McH/fh2gzEZ45eefnqyXjYFMao=)
3: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: q3yEbKVQeOm2FMEmFd4/aKTzGKwKHq01HbWy5uZMnfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:fd:88:53:79:5f:ab:22:8a:10:21:d3:a2:ac:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jun 26 10:00:42 2024 GMT
Not After : Jun 27 10:00:42 2024 GMT
Subject: CN=7064281b1e07a5ac53f26a23ce5bd9087b6a861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:a6:d3:ae:65:1e:ff:54:ad:08:cd:51:44:
32:d1:03:7f:cd:c8:67:86:5c:aa:15:53:05:67:f7:
6a:42:94:c4:b7:17:48:1a:cb:78:cb:c1:f6:7a:09:
dd:44:12:a0:75:15:f4:55:a2:cb:24:06:36:64:20:
af:46:81:69:e6:b9:1f:e6:8c:f8:a9:c1:ae:fd:81:
3e:cc:83:96:98:6d:e9:91:a2:12:c8:a4:58:a2:4d:
54:01:d1:d9:6d:50:6d:d1:c1:0b:53:81:db:6b:75:
2d:6c:94:51:d9:54:01:20:4f:1a:64:a0:9a:63:d3:
9f:b2:70:45:2d:cb:25:8b:ed:79:74:54:92:d1:27:
97:fe:30:00:12:9a:e5:9e:f9:6b:9a:3d:d3:70:ef:
a7:93:7a:6b:ff:1b:d2:3e:8a:df:12:49:5f:b3:66:
7f:a4:05:cb:6a:08:16:b7:95:a5:05:39:39:b6:23:
4a:8e:bc:2b:fe:e5:75:08:ec:04:89:61:95:30:76:
1e:fe:03:82:fe:bb:03:b3:73:9e:3f:01:f0:79:79:
91:84:5b:5f:0e:e7:da:74:af:06:60:73:1d:87:6f:
ec:c9:ca:75:9d:d4:40:9d:4c:88:fd:e5:30:78:a7:
ba:be:40:7c:a1:30:6d:e2:f6:33:54:85:83:47:42:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:28:1B:1E:07:A5:AC:53:F2:6A:23:CE:5B:D9:08:7B:6A:86:1E
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:90:81:af:86:63:43:b8:84:4e:5d:9e:00:d2:75:39:96:
9e:3a:23:b2:60:60:63:52:c5:18:15:d1:97:5e:b4:76:ca:90:
e5:7c:92:0c:f9:2c:74:9f:95:c5:20:40:a2:72:45:75:07:2a:
d0:cb:25:ad:78:7a:bb:9f:56:aa:92:88:e8:18:13:47:7c:3e:
cb:1b:9b:bc:0d:8a:6d:64:d2:d7:f0:84:25:2b:58:c3:37:1e:
38:03:3a:10:56:73:6f:20:4c:78:c3:d7:08:34:e6:a3:b4:6f:
88:a0:b3:7c:06:59:ae:17:5d:b0:5d:7a:39:99:53:0a:11:52:
44:f2:62:43:ad:2f:e3:8b:b3:da:80:95:af:79:de:84:49:73:
69:33:15:91:ea:2f:e9:6a:95:24:1f:2e:07:a4:ae:bf:0a:a8:
fb:a3:51:3a:5a:9b:7c:cb:21:59:19:26:7a:52:e4:d8:14:a4:
94:77:80:4c:93:0f:bc:82:ec:75:e9:98:f8:34:67:84:60:4c:
2c:44:57:a5:45:0b:ec:5e:f6:76:f6:d0:71:e8:ed:e7:05:8e:
79:62:c6:6f:f1:b1:18:26:65:eb:d7:a7:5e:aa:99:86:3a:bd:
8e:5c:7d:50:8d:0e:d9:3b:6d:c9:97:5d:8c:7b:ed:1c:a8:f5:
18:75:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:42:45 2024 by rpki-client on console-ams.rpki-client.org