Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: Inf9/XJnKDuRqWzBsoatsYYBZdW1//Li0rXKRjKag4E=
Subject key identifier: 69:FA:6C:CD:BD:0A:13:7B:7B:96:BE:41:3C:E5:F5:7C:0E:BC:DB:71
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 019023B85C9E52D9028A3E0C8290BD888DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 11CC
Signing time: Mon 17 Jun 2024 01:03:23 +0000
Manifest this update: Mon 17 Jun 2024 01:03:23 +0000
Manifest next update: Tue 18 Jun 2024 01:03:23 +0000
Files and hashes: 1: RPwGyZABObCpLoeZsKLtcUm3vRY.roa (hash: CQNeZRgmUzjhGb2pqpSB3OG37a0PP9qSQmqKLnSKFLw=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: I/B36QIoM1ADoxclLEB+ut6Ru3U8t+l4mzeL5WT8t1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 01:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:b8:5c:9e:52:d9:02:8a:3e:0c:82:90:bd:88:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Jun 17 01:03:23 2024 GMT
Not After : Jun 18 01:03:23 2024 GMT
Subject: CN=69fa6ccdbd0a137b7b96be413ce5f57c0ebcdb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:d7:13:4d:be:20:16:9b:ac:c3:bc:3b:a1:
ca:70:de:c0:30:da:2d:c1:35:92:2e:8c:5b:bc:a0:
ec:c3:fb:4d:9b:f4:7f:ca:5d:7e:58:f0:66:ef:ce:
38:78:c4:92:cc:b4:a6:45:5c:01:16:d0:02:dc:5e:
3c:9e:01:3f:1b:7f:52:21:a5:c6:ab:3a:1e:79:81:
f6:b9:c5:c2:69:e1:0b:93:ff:61:1a:7b:35:c0:8a:
f6:05:f7:81:d9:51:96:eb:ee:2b:e0:63:d5:71:90:
e3:78:50:1e:ce:5b:01:8d:94:32:03:7c:0f:62:9c:
96:b1:c5:78:fc:26:88:eb:b1:05:72:37:c4:40:51:
bf:8d:10:c7:df:e3:85:ca:e3:78:3f:5c:69:ab:8e:
1f:24:89:a2:cb:a1:ea:fe:3a:ed:76:0a:8a:77:12:
b1:38:65:e3:0a:b8:67:9f:ed:d3:1b:eb:34:78:a0:
08:4c:03:49:58:d9:b4:d5:66:23:c6:5a:8d:c2:b8:
c9:ea:c7:5d:fc:37:05:2e:86:0b:56:f4:2d:98:f8:
81:ab:0a:d6:10:eb:e0:af:67:9c:12:68:18:48:5b:
ca:ff:69:7f:10:42:62:c0:b8:08:bb:aa:7a:ab:0d:
6a:86:8b:e6:71:eb:5d:50:04:9e:8d:e6:12:8f:65:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FA:6C:CD:BD:0A:13:7B:7B:96:BE:41:3C:E5:F5:7C:0E:BC:DB:71
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b4:49:52:b1:89:90:5a:5d:22:f8:c0:9f:93:14:36:93:bd:
8a:e4:6a:1a:bb:ea:1c:f4:b5:f9:bd:7c:95:6e:f8:13:8b:ef:
b7:de:45:e3:f6:da:4c:9d:3e:78:24:fe:24:88:73:7d:1b:7b:
8e:9d:b3:ae:06:86:1e:43:5a:95:06:42:05:1b:72:98:88:64:
77:57:1d:d5:10:60:18:e1:82:4e:71:5f:47:44:2d:57:d4:ef:
27:c7:a4:16:fb:57:b5:30:38:c4:b3:5e:e3:70:ac:08:de:3e:
67:59:6b:42:2e:c7:23:bc:c2:81:a4:16:e0:83:5d:30:11:f9:
93:7f:d5:60:a4:2b:49:ab:19:1b:63:4a:b5:2f:0c:b1:55:4c:
f5:a2:9a:f2:1f:06:33:a3:ed:47:b3:6f:c7:9f:4c:b3:fa:33:
9f:6a:e2:c5:dc:33:b7:6e:67:9b:c1:25:c7:d1:50:4d:f9:67:
8e:6d:54:6c:b3:da:01:39:fb:b4:5c:33:ba:58:78:ad:8f:a2:
b6:1e:bc:cc:84:a5:9c:cf:4e:98:f7:e4:42:93:e0:dd:95:4b:
94:e2:5f:5b:6f:26:62:97:32:3d:49:72:c8:e2:bb:d0:68:ec:
05:3f:05:d2:87:83:a2:ec:1a:3f:72:ec:cb:ed:0e:9e:65:e3:
4b:35:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:21:18 2024 by rpki-client on console-ams.rpki-client.org