Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: kRWTnZNYETxsKTOT2kQ5Oqaq+3JsmdacKxCPcGsI9qI=
Subject key identifier: FD:E3:1B:CF:3F:7F:EF:33:6D:92:55:F4:D2:BF:36:FD:AC:DE:07:89
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01901E21C5571D98D93B1E55EC34031F7C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 23:00:47 +0000
Manifest this update: Sat 15 Jun 2024 23:00:47 +0000
Manifest next update: Sun 16 Jun 2024 23:00:47 +0000
Files and hashes: 1: JTVqVM-V-atDftb3ESyPVUzNymA.roa (hash: JoS1h8puEmE9y7RxEGme3JPdlJGcTuYCJsogUKslH2I=)
2: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: w8D1/QO542jJz8WomqOldsfJTbQVfdel3/rcS6295Kg=)
3: a5GXJHoI4hKraba5t5R-TSe-ZsA.roa (hash: jMRs16+SwC/DBlPRqQ0VPtB8I4JiQ3n0N/TDoL5Oi1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:c5:57:1d:98:d9:3b:1e:55:ec:34:03:1f:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jun 15 23:00:47 2024 GMT
Not After : Jun 16 23:00:47 2024 GMT
Subject: CN=fde31bcf3f7fef336d9255f4d2bf36fdacde0789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:6c:e7:92:3a:25:1a:92:01:c5:4d:10:24:
eb:53:33:8b:3d:e2:f1:65:54:17:33:2a:b0:14:aa:
7a:dc:9b:0f:91:dc:c2:03:ae:8c:96:f2:97:8d:c0:
96:4b:19:60:90:86:ca:47:1d:a7:49:cc:e8:62:ae:
d5:91:3f:82:56:80:06:6f:05:96:9b:05:1a:7a:10:
69:f3:e2:a3:b8:4e:95:34:61:5b:29:f1:dc:d4:b1:
82:42:c8:4c:1c:fe:a7:be:91:61:c8:ac:f0:cf:79:
07:2e:a1:6e:8d:15:99:ff:92:08:10:f0:09:ac:b5:
e9:e8:ae:48:37:26:1d:3f:37:10:5b:82:cf:b8:57:
85:e9:08:04:64:c6:08:17:c3:a4:ec:ab:94:df:15:
71:4c:b9:07:53:5d:e3:1f:cb:87:fc:78:d6:db:dd:
d5:60:f8:43:ee:d2:fd:f6:c6:1a:ae:0f:d7:bc:82:
61:75:b8:f3:40:c2:7b:4e:65:f8:7b:7f:ba:33:3a:
48:c9:b1:73:72:61:3c:8e:3c:4d:7d:d5:9b:23:91:
d8:f6:84:83:5e:72:1c:8d:4d:5b:cd:7f:af:56:5c:
b4:1a:4d:94:eb:de:c6:f8:a6:62:d0:35:77:11:51:
a8:0c:e4:03:59:58:6e:12:30:c1:a2:ac:dd:2d:a7:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:1B:CF:3F:7F:EF:33:6D:92:55:F4:D2:BF:36:FD:AC:DE:07:89
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:9c:8e:3d:69:9e:f6:2c:d3:82:78:68:7a:86:bf:b8:d6:
56:07:49:89:8e:d4:e5:1b:6b:ea:8c:78:ed:2d:d6:fa:26:d6:
a2:f1:26:3d:24:07:bc:49:fc:87:2f:fb:92:8f:ca:b3:df:28:
12:44:8f:40:7c:e7:22:5e:6c:e5:01:3b:15:72:45:62:26:05:
0b:af:05:dd:d4:38:7b:6e:e8:5a:34:63:42:88:b2:c2:91:8f:
87:a1:01:4f:36:16:a0:75:34:5f:a3:ec:f7:f2:95:c7:0c:58:
af:98:4e:b0:79:63:86:f9:1a:87:83:d8:12:7a:75:53:e0:f1:
c9:a7:43:88:d4:22:f4:b5:0c:b7:b7:7f:28:a8:23:f4:89:9a:
45:e5:02:7c:d5:c6:50:48:46:d2:d7:6e:f9:c0:50:05:2c:ef:
18:68:8c:86:ab:b2:b7:ce:04:61:3c:a3:8f:e0:7d:d4:5c:5b:
c7:fc:37:c9:ab:be:7b:10:7f:0e:ed:ff:06:58:02:8a:48:86:
4d:4d:f2:ff:4a:fa:65:d0:1b:fe:58:20:a3:27:77:b8:4b:c6:
eb:89:81:39:f8:02:89:09:ed:8a:e7:21:f8:04:8e:01:8f:8f:
ad:70:29:62:53:1e:f9:0a:c4:9d:d1:b2:39:fd:c9:04:e8:74:
a3:8b:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:58:51 2024 by rpki-client on console-ams.rpki-client.org