Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: k6hMVmj7+GhthUWSlakRc2+Gbg/NVDXG19t69z74UeY=
Subject key identifier: 77:08:05:84:69:D1:1F:AB:D7:B5:BD:32:50:FE:70:E4:FF:BF:3D:2D
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0190448CCEE65D93DBB9BDBD3C39CE679DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 0FE0
Signing time: Sun 23 Jun 2024 10:03:16 +0000
Manifest this update: Sun 23 Jun 2024 10:03:16 +0000
Manifest next update: Mon 24 Jun 2024 10:03:16 +0000
Files and hashes: 1: YYkTznf1u0ZIkQSoR2qCwbNszQM.roa (hash: OxoJk0jJo3r/Ef0LHBGckTWuc1YBKbzRltikGahk9k4=)
2: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: Am1SoUbaBwNNRs5e3l2v/wvgr3A4zAMN+ojKePl56aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:ce:e6:5d:93:db:b9:bd:bd:3c:39:ce:67:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jun 23 10:03:16 2024 GMT
Not After : Jun 24 10:03:16 2024 GMT
Subject: CN=7708058469d11fabd7b5bd3250fe70e4ffbf3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:6c:b4:72:91:1a:a3:39:0e:6b:19:63:e1:
80:3d:c0:cd:0e:44:ff:5b:ef:b8:4a:30:22:8f:5a:
7f:93:09:1b:5c:ae:bc:6f:6c:a2:13:84:ad:e3:ca:
e5:fa:52:5e:5b:d3:0a:a8:dc:45:d4:39:2f:5d:72:
25:5b:6c:98:52:96:67:a5:78:36:d7:12:1f:71:13:
06:b8:6b:e6:f6:5a:19:28:37:82:fe:fc:ad:e3:88:
4c:75:6a:2b:85:06:38:e2:45:95:4f:a9:ec:1a:e5:
f0:35:c4:8f:c6:5d:ac:67:13:60:41:2b:83:1a:91:
8e:49:60:2a:b2:19:c5:3f:bd:58:76:00:0e:66:1f:
64:21:35:b2:74:b1:05:19:2a:8d:a7:41:16:46:8c:
18:d5:ee:d2:59:af:f5:55:92:3a:9d:37:42:5a:24:
27:39:99:2b:af:11:b4:7a:91:ee:a0:b2:02:ce:6e:
60:6e:d8:fb:73:02:11:80:bf:11:c3:0a:4d:4e:fe:
e7:a6:31:9b:7d:e7:e5:14:f4:fd:68:db:72:9b:f0:
b4:6f:22:62:cc:39:59:47:0f:4a:73:2b:45:8b:d3:
6c:a8:92:a5:78:be:62:6f:c7:df:fd:7a:06:13:03:
50:ea:b2:d2:94:f8:20:a4:95:4b:11:8b:a3:ee:93:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:05:84:69:D1:1F:AB:D7:B5:BD:32:50:FE:70:E4:FF:BF:3D:2D
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:08:28:ff:9e:18:a6:56:da:47:a5:f3:78:da:77:7e:fe:7d:
9b:9c:2b:9a:66:0d:17:4b:f5:21:7a:f0:bd:1c:89:6f:63:73:
1c:73:74:a5:b2:d6:65:79:37:e4:0a:dc:94:d7:26:15:70:05:
bc:30:79:6c:8e:21:2e:d7:5d:51:e4:13:69:14:79:22:51:af:
61:06:84:46:69:8a:97:b7:25:78:e8:87:65:a1:67:fa:b1:a7:
dc:df:85:02:92:04:3c:ad:4e:02:f2:ef:b9:bc:ec:fc:b1:c5:
80:5f:70:5d:e9:e5:b0:47:f6:19:2b:fe:c3:64:02:cb:17:e2:
c9:30:8c:56:36:56:f2:6f:17:a7:89:11:9a:62:06:30:57:c9:
a2:2c:14:03:65:7c:52:d2:0f:19:25:c5:26:9a:ea:d7:6f:7c:
65:6f:89:43:7e:9f:3d:28:02:7a:07:4b:ee:16:9c:54:9d:5c:
5c:c4:1f:53:00:95:3a:89:34:bd:b8:ad:ac:d8:02:69:c3:58:
b7:c4:c8:60:61:f8:4c:31:5c:c9:65:e1:44:f1:d1:8c:b1:b8:
88:ff:f2:5a:fe:e4:d3:3c:a7:25:6f:2f:6d:ac:a0:05:e0:81:
07:c2:5e:5d:9e:8f:82:ae:ad:13:7d:13:6f:1b:3d:cd:ef:1f:
fd:66:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:56:42 2024 by rpki-client on console-ams.rpki-client.org