Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: Nw3qZ5JinPiQkNT0vvARuFK9Piw4lbLYxsEkpiP+y+k=
Subject key identifier: C8:08:31:0B:38:ED:CA:C6:9E:7E:29:91:B4:33:20:9B:AF:53:92:B6
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019038F561D32FAA4828FF46A06D9BDD8399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1139
Signing time: Fri 21 Jun 2024 04:02:03 +0000
Manifest this update: Fri 21 Jun 2024 04:02:03 +0000
Manifest next update: Sat 22 Jun 2024 04:02:03 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: phYQCHwNjSltlJFFnYk/XrUJpmQRVMT0pln4v07+CAQ=)
2: woll1LdC1s-faflfJIcHZ69z15M.roa (hash: Ls0iYMlhF+C7UCzkrAcWWZ2SawCOSjkknxvNvLKuPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:f5:61:d3:2f:aa:48:28:ff:46:a0:6d:9b:dd:83:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Jun 21 04:02:03 2024 GMT
Not After : Jun 22 04:02:03 2024 GMT
Subject: CN=c808310b38edcac69e7e2991b433209baf5392b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:40:9a:d4:93:fa:b9:e7:49:4e:7a:7b:78:
01:ce:15:2b:7c:37:21:7a:e6:79:29:73:4e:cb:90:
d8:28:34:5a:bc:c0:7c:8a:c6:3e:3f:b6:aa:e0:85:
34:9e:7c:20:24:47:2b:54:5e:d9:59:92:d7:e0:45:
52:5a:4d:d6:3e:d1:ce:c1:f0:b6:1b:3d:33:d6:3c:
db:a1:bd:41:5a:3a:93:3e:bb:a6:01:77:9c:49:ff:
68:e2:a9:7d:34:e2:f8:69:51:d3:a0:db:58:96:c8:
16:f8:9b:74:e2:79:01:56:d2:e2:3a:56:0f:c6:b8:
57:01:a9:a9:55:8b:ae:94:0d:96:3b:02:03:3f:fd:
d0:95:c9:67:a7:44:44:b3:64:5f:ee:f3:86:5e:64:
83:25:d7:64:84:f2:3c:34:74:12:7a:cc:f5:e2:a2:
cb:fc:54:dc:46:3f:48:72:7d:2d:90:f7:21:a2:4e:
52:66:01:69:cd:73:c6:2e:41:8c:43:e3:32:e3:6b:
69:64:e4:c2:97:96:77:1d:4b:77:4f:2b:12:7c:fe:
6f:dc:6b:90:9f:1b:43:7e:6d:73:e2:d5:fb:90:c5:
c9:7a:b1:c4:fa:02:10:02:bc:45:8a:81:21:68:2f:
38:1e:cb:7c:f0:dd:76:ff:e2:ec:50:9a:33:26:be:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:31:0B:38:ED:CA:C6:9E:7E:29:91:B4:33:20:9B:AF:53:92:B6
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:cc:18:ae:d7:7b:8e:fe:13:11:c1:7d:65:ae:4f:64:0c:
0f:ef:f0:66:84:89:85:d3:a6:8a:c7:89:f9:3c:7e:5e:62:80:
18:a0:33:e0:ea:78:5e:84:32:f2:7a:3c:ae:d6:43:bd:5a:4f:
66:a4:b4:e9:9b:f4:6f:cc:49:d9:5b:16:42:5d:db:fa:5e:82:
54:72:ab:e8:79:3b:4f:88:0e:ab:41:90:16:68:ed:cb:28:34:
93:9f:69:c6:ea:32:3f:25:b0:12:f7:a5:8e:a4:af:c8:5f:7a:
11:be:07:16:9b:98:7f:6f:f6:87:8e:3e:fc:0a:52:39:96:a0:
51:5a:a1:6c:e1:3f:98:08:8a:4e:e2:52:ff:d8:02:2b:20:48:
3d:63:d0:93:e7:79:13:94:db:17:31:2f:bb:e6:cc:9b:8a:05:
3b:d9:71:1c:6b:d3:36:2f:a2:1f:e0:c5:fb:81:39:81:f2:68:
bc:d8:32:3b:e9:84:c4:9d:14:a0:24:12:95:d7:17:ce:e9:0f:
53:a9:28:f0:85:a2:ff:c8:f3:ca:d0:c8:d8:c1:99:88:a8:13:
63:af:85:ae:37:31:34:76:e9:46:ca:7e:ac:fe:4c:2a:3b:a6:
bc:2b:2c:01:af:17:b7:0c:aa:0b:ed:58:d3:0a:89:a1:7a:7a:
df:3d:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:40:33 2024 by rpki-client on console-fra.rpki-client.org