Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: GnPE76rsg5+r0JoD6RdyF17rUU57KNfzgA2n6T+nGBU=
Subject key identifier: E0:6E:C2:6E:1C:D1:85:E9:65:12:64:00:E3:BF:FD:0E:9A:74:7C:6F
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01903A06C21C94306426928DC77490C44709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0B2C
Signing time: Fri 21 Jun 2024 09:00:39 +0000
Manifest this update: Fri 21 Jun 2024 09:00:39 +0000
Manifest next update: Sat 22 Jun 2024 09:00:39 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: OH6VZVySpSq/kgoLlE2X6h+urMTPsuD96gQ4QYYng1A=)
2: _ijsDpwYIAg5TWyKtFUEedhcBUs.roa (hash: rqgsZazPl/G8chWCLYkL4vT8qlObo9VUeB0sms9lml4=)
3: n2sc0FVrO2g3XNRmUFLtSg3sN7M.roa (hash: +z0N9B5jZYXypjXrnuYcuFjLYml6kEKVywW1kLIe3QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:06:c2:1c:94:30:64:26:92:8d:c7:74:90:c4:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jun 21 09:00:39 2024 GMT
Not After : Jun 22 09:00:39 2024 GMT
Subject: CN=e06ec26e1cd185e965126400e3bffd0e9a747c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:76:58:4a:cf:f6:95:81:34:60:b1:3b:b6:
9b:87:35:25:b0:34:83:9c:83:d3:a5:28:7c:32:14:
f6:ac:d9:f9:0a:30:66:8f:cc:56:3f:6a:b5:fb:fb:
24:bf:9a:c0:b5:8d:49:4c:1e:47:ae:2a:df:49:42:
da:77:1a:6a:bd:ff:f2:77:28:70:0c:ec:8a:c3:68:
1b:d6:07:80:5d:3f:09:9c:06:3f:f7:2d:91:a0:af:
cd:61:e5:2d:46:d5:18:06:8c:0f:11:ae:1b:5a:c8:
c6:cc:75:f0:b2:8e:66:11:f8:6f:c4:81:19:cd:79:
7d:00:3b:ca:11:f7:c2:73:05:22:c0:d9:d0:f7:d1:
b6:49:1e:f3:f0:1f:de:ce:f3:9a:74:33:33:d0:b9:
71:73:99:09:5e:b3:7a:50:fd:a8:54:36:54:51:af:
2f:30:53:5e:6e:8e:c5:06:b1:03:de:64:bb:d7:92:
73:7f:1c:96:07:b3:bc:93:2d:79:8b:40:78:2b:53:
d2:da:cc:5c:c7:93:0c:91:11:5f:8f:12:59:25:2e:
bd:65:7b:af:29:3c:25:17:0e:bb:35:b9:de:82:e0:
87:f1:ce:9b:e3:d5:74:f3:ec:ce:11:3a:b9:78:f4:
15:97:fe:1d:1e:40:02:98:cf:82:a2:54:25:95:fe:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:C2:6E:1C:D1:85:E9:65:12:64:00:E3:BF:FD:0E:9A:74:7C:6F
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:59:2e:de:a5:4c:45:82:19:41:c4:c7:bf:e6:53:b5:6b:
88:bf:dd:73:b5:6b:3a:1a:38:62:f2:9b:1c:c9:c6:4f:92:ae:
8e:98:01:a4:c6:1d:a9:fa:6e:6e:44:fe:85:33:39:e0:c9:af:
df:d6:76:84:84:4e:2a:7e:c9:32:a8:9a:ae:45:ee:5d:6a:b0:
18:0b:37:fc:31:f7:78:81:48:e7:a4:c9:f0:45:97:8e:8c:1f:
4d:82:6d:65:1b:a9:86:55:98:f9:c9:38:df:4e:8d:98:20:02:
fc:73:10:c9:ed:6d:e9:34:94:d2:05:9a:46:6e:f8:84:13:d1:
d1:3c:25:b5:c8:05:f9:e7:9c:8c:f7:2b:55:19:29:24:b2:bf:
9c:46:80:1b:ae:60:13:3a:39:40:aa:16:b5:55:a7:45:0f:a5:
dd:76:cb:48:45:03:3a:2a:40:56:de:d9:87:5d:e6:23:f4:27:
4a:76:75:4f:30:fc:2f:48:36:44:ac:97:48:65:73:33:1e:8a:
63:4a:20:b0:72:0e:61:e3:b4:c3:6c:23:e1:22:cb:b5:26:43:
7c:3f:52:4f:83:3b:f9:55:6b:b1:30:c0:4d:14:61:43:5c:eb:
fe:58:bf:c6:2f:93:54:40:58:9e:7b:bd:89:27:fc:d1:f5:98:
6f:f0:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:47:36 2024 by rpki-client on console-ams.rpki-client.org