Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: tKW9RBWS46jhjZ/xvEY4VYWU8KUEutLPsrBUMck83Rs=
Subject key identifier: 42:41:13:6A:55:48:49:E6:F7:65:7C:DB:A4:4E:AE:A6:EC:E9:CB:E6
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01901E8FD9D1D290F90B185B812A9432F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 054A
Signing time: Sun 16 Jun 2024 01:01:02 +0000
Manifest this update: Sun 16 Jun 2024 01:01:02 +0000
Manifest next update: Mon 17 Jun 2024 01:01:02 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: 50ObleaH8+wINRvclxQaFp233jjNPzET5Vp6fWs5iz8=)
2: S8ivnUHlcBa3I4aKMXotbj6p-5g.roa (hash: Cq8WlRKrWGY4LNmOo/VH8oPEczSa5l7mVa46LBxWrQo=)
3: XhvE_-V-P2DMeuaayoFZaUj5MSk.roa (hash: 59ONQCemP82H4LTJRSRNsbPP/xobZkBrt/OpveCGz/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:d9:d1:d2:90:f9:0b:18:5b:81:2a:94:32:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jun 16 01:01:02 2024 GMT
Not After : Jun 17 01:01:02 2024 GMT
Subject: CN=4241136a554849e6f7657cdba44eaea6ece9cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:e4:88:a9:34:78:27:0d:74:1c:ec:20:bd:
9e:01:12:d9:89:a8:fa:4d:20:84:79:58:e8:62:a4:
a7:30:8d:61:7f:ea:58:ec:97:fd:4f:63:41:b3:73:
ca:29:dd:88:40:1a:a9:52:33:d9:c8:88:15:46:6f:
95:1a:e9:f3:64:f2:83:2f:a8:15:49:eb:9b:74:7d:
ec:fb:81:c2:24:ef:5e:1e:af:68:05:58:30:9f:aa:
41:6e:d1:1a:97:46:c8:57:bb:41:9d:7f:d6:d4:1e:
71:e6:fc:0b:58:84:d4:2f:e8:43:31:c4:83:81:36:
cd:0c:ff:9c:8e:ce:7a:24:26:9e:4d:47:8b:0b:fc:
e6:d6:78:2a:70:55:ed:93:b6:b0:f0:46:26:bd:0e:
a3:2a:77:a1:98:a7:68:8e:27:e9:7b:2a:93:4b:2f:
84:bc:6e:3d:a9:a8:51:1f:7f:4f:13:47:0d:3a:a1:
5a:23:a4:13:83:ca:67:1f:d5:ac:f4:9c:eb:bc:7c:
17:11:73:42:91:29:0c:0c:19:85:25:ff:f7:ca:46:
ad:d1:83:fa:31:5b:5b:85:c8:66:66:bf:f5:bb:e5:
d2:f3:c0:f7:89:2e:c3:ba:34:b1:14:3d:d2:e1:25:
80:8e:5f:58:3a:d3:02:1b:6f:a0:30:9e:ab:68:5f:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:41:13:6A:55:48:49:E6:F7:65:7C:DB:A4:4E:AE:A6:EC:E9:CB:E6
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b6:ba:52:a6:ae:e7:37:4b:e1:ef:e6:45:d6:13:70:f6:81:
5d:d7:aa:58:a2:ce:cc:2c:03:9c:e6:61:8b:3f:c8:69:90:97:
62:d0:07:e3:1e:6e:dc:20:fc:0a:2d:85:0a:cd:76:73:26:70:
12:b4:c0:c5:35:d4:04:ea:28:a2:37:19:00:a4:e8:30:29:a1:
d1:5b:20:85:56:a2:94:61:b0:37:7f:da:d5:0f:f1:9f:0f:63:
7a:6c:13:5a:19:a5:f4:ab:e2:38:6b:fa:f4:31:c9:07:a2:f4:
25:30:b4:22:5f:3d:6f:dd:c0:a4:d2:30:03:cb:3c:2c:21:1f:
d9:47:6b:b0:60:05:30:e2:b1:99:51:84:55:2f:f6:5a:d9:6b:
8c:be:7e:db:5e:d4:ae:ce:d9:d7:80:64:5a:f9:7a:f5:65:3e:
6e:8a:0c:b8:0d:7f:54:c4:fc:4b:cf:94:b9:4a:b6:71:8d:83:
ab:94:e9:c9:af:25:53:88:84:5f:4d:26:4e:1b:37:c0:e0:dd:
b2:5e:c9:ba:5f:c7:52:6d:c0:1c:12:9e:1d:41:62:3f:e2:2a:
c3:9a:35:15:4e:ac:87:b7:4e:10:d9:f0:e4:64:9e:b8:50:79:
0c:18:6e:c6:dc:9c:dd:60:e8:9a:08:c4:7b:c9:c7:d3:e5:60:
2e:39:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:09:11 2024 by rpki-client on console-fra.rpki-client.org