Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: hzFYZRlEtYCFOFXg4BlLXrJ+PB7vKWkeGZdK+ZK4Ips=
Subject key identifier: BD:FF:38:F6:6E:A3:99:31:EE:E9:40:03:5F:62:53:0C:9F:34:D3:D2
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019040AE5CDC73EDFBB561C68DCA95F96A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1040
Signing time: Sat 22 Jun 2024 16:01:27 +0000
Manifest this update: Sat 22 Jun 2024 16:01:27 +0000
Manifest next update: Sun 23 Jun 2024 16:01:27 +0000
Files and hashes: 1: 4iuGq-VWGgHQhLj4nds89YHROaI.roa (hash: 87WRFQXToutiGRbBy/iffGVB/EGVXGZhDbxq70sSagQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: CVmB7iMPVLnWy28/TEBf/UUUT446EldchVcw/OU4Ecs=)
3: wO3gO3AtzjwYiKYp9AfWbXKMxKA.roa (hash: 7FDysw6a2Tuu5B5ron14GV8BgfKfajXbaEOiK3IwJLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ae:5c:dc:73:ed:fb:b5:61:c6:8d:ca:95:f9:6a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 22 16:01:27 2024 GMT
Not After : Jun 23 16:01:27 2024 GMT
Subject: CN=bdff38f66ea39931eee940035f62530c9f34d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:20:cd:62:8b:36:5a:56:91:30:e8:65:90:
1c:da:f1:b5:3a:fe:ca:02:73:29:a0:b5:dc:ae:79:
41:b1:86:8d:52:bc:1a:a5:17:cc:e5:86:01:02:09:
30:4c:69:aa:78:ad:16:42:0a:e0:48:fd:38:0c:ee:
77:33:2f:f8:03:d4:f9:59:a2:cc:a8:15:c1:a5:c0:
13:0d:f7:04:3f:12:04:7b:0b:bd:26:08:0a:ab:e2:
f4:80:c2:57:b2:56:8a:4d:06:3a:8b:10:b9:ab:92:
0d:f2:02:93:16:21:b8:a8:85:a5:0d:e6:d6:b3:3c:
35:38:82:cf:83:c8:d7:f1:05:0e:12:0f:f2:ee:7b:
8f:7b:5d:51:68:10:b9:b4:cc:9e:b1:fb:21:21:ec:
fd:98:e2:a9:81:0f:b5:54:08:58:b1:aa:c9:60:7c:
e5:2d:f2:34:75:de:66:fb:4f:f1:1f:e8:3f:e2:9d:
a0:89:77:13:e7:ca:d1:3e:08:96:4c:53:34:65:0e:
f9:1f:cc:c7:c4:97:b9:c4:a4:b7:23:dd:7a:e5:70:
09:e2:ac:e9:64:13:61:74:e2:1d:98:26:b5:cd:db:
33:07:61:6f:d2:5f:d4:dc:98:b9:0a:32:c4:d9:79:
b2:df:d3:a7:a4:7d:d6:97:d8:3b:2f:0f:20:bc:ea:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:38:F6:6E:A3:99:31:EE:E9:40:03:5F:62:53:0C:9F:34:D3:D2
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:db:82:6a:73:15:83:66:6b:e2:7f:eb:9c:8c:b6:73:a1:
51:8e:62:d1:c0:77:50:81:4b:b1:a5:f8:94:ad:c5:9c:fe:46:
a1:00:08:93:38:df:28:a3:57:3e:c7:ad:58:44:76:31:24:6c:
04:47:f4:56:4e:af:75:03:d3:0c:a3:38:ed:9d:05:56:49:02:
34:19:af:9e:8b:5c:c1:e3:48:5a:2b:c1:48:d3:ed:1d:1b:29:
32:04:79:d0:70:52:e4:75:c5:06:9e:c7:bf:6b:6f:e7:c1:b1:
cf:49:4b:51:c3:9e:98:f9:7d:3f:8a:2c:8b:49:84:d5:6d:4f:
5c:d1:b6:2c:74:66:e0:85:7f:9a:af:e9:2c:a4:71:2c:a1:fa:
86:8e:61:40:93:81:6b:b3:0b:c3:cb:d4:c7:13:66:a6:19:be:
46:b4:34:84:36:4a:ce:6d:4f:07:35:f7:37:a8:0d:e4:4b:2d:
1c:fa:9b:8f:66:c3:be:85:3c:8b:1d:d1:ec:0c:d4:88:a6:40:
84:df:29:f9:8d:5b:f6:85:94:1b:69:61:08:1c:6e:a9:5e:11:
f9:fe:9d:b3:9d:43:b8:f0:49:aa:e5:cc:e7:8f:1c:26:5d:64:
69:f3:48:e2:8e:bb:af:ea:91:c7:87:46:7a:52:27:46:86:23:
63:ab:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:31:04 2024 by rpki-client on console-ams.rpki-client.org