Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: /jSpfGqL/xKN3mmrOO5vfODCjCsWYVYa4hsF3IIJaNs=
Subject key identifier: 2F:04:F4:13:F6:F3:13:D3:46:C9:5A:98:90:8E:E2:95:16:7C:4D:6D
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01901E21C10A7AF414A5D03110C4D818F4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: FB
Signing time: Sat 15 Jun 2024 23:00:46 +0000
Manifest this update: Sat 15 Jun 2024 23:00:46 +0000
Manifest next update: Sun 16 Jun 2024 23:00:46 +0000
Files and hashes: 1: XgXo1pj917oiYuZWpNg-RINAcOM.roa (hash: atg2AXwVmObutb/VkzeeTF4rdQ06DyTtTyNadvdFY2I=)
2: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: vM+CgKKd66gt1L4GZnGTlKruIyNpQinwwRDgpzuozb8=)
3: tI7GzP_0Es_s7DIWPCj6TszLXYY.roa (hash: 7kL9hzkqr+h1PYZHaGFLoNFmf6XOV+2VluVeZbR2ne4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:c1:0a:7a:f4:14:a5:d0:31:10:c4:d8:18:f4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jun 15 23:00:46 2024 GMT
Not After : Jun 16 23:00:46 2024 GMT
Subject: CN=2f04f413f6f313d346c95a98908ee295167c4d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:52:6b:d9:0c:60:45:07:74:74:0e:41:ec:
69:f0:e5:ee:83:68:ff:7d:43:2a:65:2f:ef:53:2b:
3d:57:f8:3b:85:96:7b:a0:70:53:e8:16:ce:e1:c8:
de:15:6d:b3:ab:c0:e9:1c:40:1d:25:d8:36:fc:42:
8d:de:d3:09:1c:c2:94:f5:71:ff:79:7f:f2:09:8c:
30:9b:02:14:86:84:24:51:93:ef:fd:80:03:7a:9b:
4b:38:e1:af:96:92:24:e2:38:c1:3f:da:2e:84:f4:
0c:7d:76:de:56:92:22:72:9f:81:99:24:35:89:dd:
39:13:06:56:fb:b2:c5:10:3f:bc:ea:04:00:d8:0a:
3d:da:98:3e:32:2a:e1:81:4a:13:dd:c9:16:38:67:
cf:66:48:3d:02:21:cb:37:29:9c:52:bf:89:6d:7f:
f0:4c:97:58:90:f7:e9:5a:99:27:0f:6c:37:a1:cf:
93:34:87:39:f3:a9:b7:c6:0c:83:89:c7:70:c8:78:
78:2d:63:b7:cb:da:fa:99:37:85:dd:1c:ff:30:8b:
63:c7:86:1a:93:fc:94:8a:6e:c1:fc:a0:03:10:e6:
e2:bb:c7:32:87:e2:3a:9b:44:84:1d:52:94:23:94:
c5:b1:9e:8a:36:ad:4c:72:e9:41:22:61:f5:ad:79:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:F4:13:F6:F3:13:D3:46:C9:5A:98:90:8E:E2:95:16:7C:4D:6D
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4b:9d:9e:61:c8:f1:a0:37:cd:ec:86:b5:27:60:20:aa:1c:
df:d0:f5:1b:25:98:f5:13:9e:ba:91:ee:b3:2f:52:64:82:19:
bc:92:c4:ad:e0:28:c2:13:3f:27:8f:8c:e5:8d:bf:35:1e:db:
b2:6d:27:00:83:ae:78:48:aa:58:82:1a:c1:29:0e:d2:ed:5e:
87:d8:bb:33:81:65:4f:42:b8:3f:44:1b:a5:3e:4e:b3:88:d6:
5a:6e:8d:7c:bd:08:cb:ca:64:97:cf:08:aa:3d:ab:43:4b:b4:
54:c5:3c:4b:a7:c7:93:3f:83:9e:94:cf:6f:24:03:f7:7d:a2:
59:58:43:a9:38:e6:00:78:fc:39:4b:34:8e:1b:54:e8:01:e0:
f9:12:08:54:73:d4:de:6b:7c:8d:f7:1e:83:dd:0e:00:19:11:
09:19:8b:38:cb:4b:1c:e6:e7:8d:8b:8e:eb:95:9e:ff:86:81:
df:03:fc:b2:21:20:f3:75:94:fe:6a:47:39:be:5d:e3:7a:86:
ad:2e:a6:42:d1:07:1b:89:20:9f:4e:c6:60:82:9a:24:d3:0f:
c8:35:bf:10:1d:b2:33:fa:fe:fb:55:aa:a8:d9:71:b9:a7:3d:
67:3a:6a:33:a9:83:f2:26:ef:59:0b:fd:1e:6e:87:bc:fe:75:
06:c7:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:24 2024 by rpki-client on console-fra.rpki-client.org