Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: Op6P+hr3PRuWKyIlCtec4a7hIcSf1SJ8fHWy2tpBhJw=
Subject key identifier: 3A:49:E5:A1:C9:7A:E5:2A:AA:FE:1A:9E:18:31:25:28:8C:09:85:BC
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 0190452FAA87FD461BE996527BCFC64CBDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 1170
Signing time: Sun 23 Jun 2024 13:01:09 +0000
Manifest this update: Sun 23 Jun 2024 13:01:09 +0000
Manifest next update: Mon 24 Jun 2024 13:01:09 +0000
Files and hashes: 1: 04sSAJcFgmyyveur0tGFhnIE4LA.roa (hash: OYyKGjTC8x1jdGwJtul/cymVN7jHmNbJ7h2vm6GC6qs=)
2: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: +3ga/47XTP5/HUpAR/sb78TxUUnUFCC+6uAIyvRthzA=)
3: fOL13kxL2EuSxd4XjgAGrK7aESE.roa (hash: P3DrVqkAqg9E/s9aGvsA2HAezysvaBeyKy8A8Kxst5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:aa:87:fd:46:1b:e9:96:52:7b:cf:c6:4c:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Jun 23 13:01:09 2024 GMT
Not After : Jun 24 13:01:09 2024 GMT
Subject: CN=3a49e5a1c97ae52aaafe1a9e183125288c0985bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:fd:54:e8:5c:49:b9:03:77:f3:d0:09:e0:
2c:c3:c4:f0:f9:98:fa:36:18:88:b5:45:cb:a4:7d:
31:e3:5b:fd:e2:6e:19:2b:62:c9:79:e5:0f:21:8a:
e2:32:2c:f9:76:9e:34:69:f3:ca:87:0f:ea:8c:ff:
47:9b:88:18:0d:02:5a:22:73:b7:9e:0a:2c:a6:fd:
19:4c:18:50:f6:98:d2:07:30:44:2f:72:89:13:24:
26:6a:6d:61:d9:3d:5d:b7:9d:7e:62:87:4f:e4:0a:
7e:bc:0b:56:ad:f9:13:d8:8d:69:51:3a:fd:9b:78:
e0:1c:09:30:15:c7:34:26:59:0c:3c:bd:5c:23:45:
6f:7a:73:ec:42:df:09:f5:94:fc:5f:85:46:1a:b2:
98:7a:23:d1:21:61:86:c5:f0:07:c5:ed:a3:76:84:
24:7c:4f:9b:a7:10:92:70:53:6b:22:06:32:f0:b1:
a1:38:9a:80:e9:18:a8:07:e2:34:17:fb:2a:e9:d1:
70:80:6c:8d:f8:07:c0:fb:6e:8b:f2:80:2b:83:aa:
03:72:80:06:34:12:5a:fc:b0:b6:a4:43:3a:77:43:
44:8a:e7:60:06:91:66:67:ec:d2:3f:49:4d:8f:24:
50:30:22:6f:4b:4d:3e:0b:e9:c0:6c:93:ca:35:e5:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:49:E5:A1:C9:7A:E5:2A:AA:FE:1A:9E:18:31:25:28:8C:09:85:BC
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:97:b5:66:43:2a:43:7f:bb:6f:c5:f4:9f:f3:91:d6:9f:
a5:47:2d:de:bf:42:76:de:ab:39:2e:50:da:63:a6:6d:9c:77:
59:8c:b1:15:de:7c:ea:51:6a:dc:3d:42:4d:4a:cd:ff:7a:c5:
4b:22:9f:fe:8e:82:8e:66:5c:02:bd:7c:f1:4a:50:65:6e:ba:
7c:2c:9b:18:dc:44:03:89:a3:98:28:0a:ad:4f:84:d6:2a:f7:
43:0a:5b:58:52:6d:93:f0:e8:ad:66:3b:e6:31:b1:e5:74:74:
5c:4c:bb:06:2f:43:a4:83:76:d1:f4:38:04:5f:89:6d:e2:9c:
f9:90:ef:47:cf:55:49:df:89:22:66:3f:d9:88:be:80:88:f1:
5c:50:43:6c:5e:97:a7:c0:5d:1c:08:d6:01:3d:e6:3a:57:db:
a7:a3:ff:ea:ca:7f:7f:95:41:7d:e9:50:0d:1b:82:fb:1b:76:
a1:72:17:73:78:37:ee:6c:0f:82:82:09:a1:3f:02:8f:bd:4b:
c1:e5:53:9c:99:42:16:8b:36:d5:69:a8:85:c2:c0:c7:d4:42:
49:4e:65:ea:da:79:14:04:34:94:39:d1:50:41:f9:02:01:2e:
32:4c:aa:ab:d0:f4:91:cc:a3:f5:67:d1:ca:36:b7:fa:2e:b3:
c8:ed:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:25:19 2024 by rpki-client on console-fra.rpki-client.org