Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier: unkroeW4rZyGaMnjaDaZVcasPmommtGUE0YfE2Hm7W4=
Subject key identifier: F9:56:21:3D:3F:9A:9E:A8:81:A7:98:B6:CE:F9:0D:38:DA:D1:45:82
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 01901DEBBF0F88442C90A9CEC6074B022283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:01:47 +0000
Manifest this update: Sat 15 Jun 2024 22:01:47 +0000
Manifest next update: Sun 16 Jun 2024 22:01:47 +0000
Files and hashes: 1: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: SNBEP7Upg8siC8hzlIkgTMMwL4isOQXS6kcdnZ34bvM=)
2: l50skYcggsw02I-stJOH_LQ2-AI.roa (hash: DDCjEIPO8/mWGl4rkXCeNBWnq3i3hTg5sfFGFBAPcMc=)
3: oHsb7pfde89fX0_SuXpGVmJihmU.roa (hash: KszYfcXUVDVsO2H9NvAXH6etPNmN1MjZHHtInFdCHYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:bf:0f:88:44:2c:90:a9:ce:c6:07:4b:02:22:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jun 15 22:01:47 2024 GMT
Not After : Jun 16 22:01:47 2024 GMT
Subject: CN=f956213d3f9a9ea881a798b6cef90d38dad14582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:9c:f4:8c:fa:72:e2:31:76:ce:00:66:4b:
12:81:30:32:c5:73:f1:ce:62:a3:04:70:92:89:6c:
1f:a9:c0:6e:5d:93:25:7c:3b:3d:21:1a:c2:5f:63:
eb:cc:aa:57:48:d4:23:8a:31:54:53:48:55:57:c2:
a1:d3:d8:7c:c1:a9:8b:1b:ed:55:8e:c9:6f:49:c0:
7d:f7:41:11:46:ba:6f:9c:bb:59:f6:05:40:43:01:
ad:3b:66:d5:8f:01:42:64:d6:94:8d:61:15:e4:e8:
f1:56:c9:40:13:3a:6c:90:5a:ef:14:8b:2d:76:59:
3b:b2:13:54:e3:5b:02:50:2a:f8:c3:b4:45:53:0f:
11:fd:f3:38:e8:77:27:e6:0c:12:4e:37:2b:fb:89:
05:a0:a4:ea:d1:23:3d:50:e8:60:a1:cd:d8:73:ab:
d6:2f:56:f9:39:37:ea:35:38:a3:b0:67:1b:58:42:
45:5f:f7:31:af:5c:74:00:9d:d4:51:45:56:e6:6e:
6f:42:17:c6:a0:d1:0f:88:fa:db:4b:6c:c1:ac:5a:
ba:e6:be:0a:17:9b:3e:dd:1f:84:d5:1d:f3:d1:df:
a1:24:16:b6:65:5d:e3:1d:33:d4:82:6d:b1:19:04:
69:56:1d:b8:ba:a4:c3:5d:c8:66:5e:19:55:58:17:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:21:3D:3F:9A:9E:A8:81:A7:98:B6:CE:F9:0D:38:DA:D1:45:82
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:05:f2:ad:eb:32:58:4e:55:3f:cd:b0:4f:4a:ef:64:e9:
99:6f:6b:03:1e:68:cb:63:ad:61:30:f3:68:54:be:8c:43:1f:
85:aa:79:3f:cc:20:88:07:63:1d:d5:9e:f9:6b:c9:78:cf:fe:
06:61:9f:18:97:4b:93:3f:1e:bc:b8:e6:08:e1:4d:7c:50:bc:
c7:50:43:a9:95:e5:78:a5:cc:57:20:eb:3d:80:f2:95:ea:5d:
10:88:8f:06:8b:11:f9:37:df:88:e5:fd:95:1f:75:dd:94:30:
92:eb:1c:3c:94:55:9c:d7:34:7b:3b:44:9e:ec:4b:f1:29:d8:
56:16:a0:68:88:db:bb:c7:df:96:42:42:3f:36:ff:21:5f:fd:
6b:07:44:06:20:30:a2:7b:63:94:a6:37:12:eb:25:ab:57:e7:
94:d3:be:e9:b6:54:6d:75:41:36:24:e6:a6:8a:3d:c1:fa:9a:
57:a9:15:fd:03:d7:96:2a:d6:23:90:13:db:31:05:7d:97:44:
f6:e5:4c:10:28:90:3a:60:98:f4:a9:09:c4:10:b0:52:f2:a0:
f5:79:22:7d:b9:91:57:56:8e:9a:43:0a:7d:2c:95:8c:9e:9d:
a2:df:dd:3f:1f:34:43:ef:3c:c3:81:0d:63:b1:c8:64:4a:12:
0a:a0:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:11 2024 by rpki-client on console-fra.rpki-client.org