Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
File: geNIePlrOZeqePTH-2le8NvG02A.mft (raw, json)
Hash identifier: b0Y6YZldsgJd/nkZPrTsKYKox/tQ/rTl1tk7hQZyM0k=
Subject key identifier: CE:11:8F:0B:08:21:99:DD:07:CA:4E:93:AA:4F:A9:FA:98:48:D6:99
Authority key identifier: 81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
Certificate issuer: /CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Certificate serial: 01903707E5647CF270C2C87DC1501BF1AA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
Manifest number: 11D2
Signing time: Thu 20 Jun 2024 19:03:02 +0000
Manifest this update: Thu 20 Jun 2024 19:03:02 +0000
Manifest next update: Fri 21 Jun 2024 19:03:02 +0000
Files and hashes: 1: DxFc_wpL4vC5O5msqkBfzcNEAB4.roa (hash: mvVJj7RL1FXCt24iDFGpu5LKDWCmIu1X0XiO4+Jz0PM=)
2: Ks5cydlMn6hTRMXsbT4S-h-jgxo.roa (hash: 8umor7ZetiniRVi+OHnhKgl1hsUd2phUs0itaiJov9Q=)
3: geNIePlrOZeqePTH-2le8NvG02A.crl (hash: iwZISl+oBeWKWxWtttUfzfHabHHWtUlpzTciRN/3FTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:07:e5:64:7c:f2:70:c2:c8:7d:c1:50:1b:f1:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Validity
Not Before: Jun 20 19:03:02 2024 GMT
Not After : Jun 21 19:03:02 2024 GMT
Subject: CN=ce118f0b082199dd07ca4e93aa4fa9fa9848d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:eb:1e:ff:d1:a6:cd:3e:1a:db:da:9a:50:
56:d5:55:58:e5:d8:aa:31:33:15:cc:68:ba:04:60:
a2:ea:87:88:0b:9c:42:4f:1a:48:4c:03:5f:e2:d9:
72:eb:ba:b7:b5:8e:cf:0e:e6:1e:47:0f:23:f4:45:
b6:27:62:19:5c:a0:1d:18:98:ae:d5:95:8b:12:fa:
a3:a7:5e:c1:3b:2f:bc:b0:e9:5b:88:5c:47:a8:d7:
9d:64:b6:83:f1:6a:0b:71:6e:82:a7:91:1d:87:d4:
e3:5d:69:0a:22:08:0f:d3:9c:4f:ab:f6:6a:6b:f7:
2e:1f:f4:1b:f4:a8:82:e9:96:87:8b:a9:56:28:2f:
16:18:61:8b:d5:0b:36:c7:f3:4b:8e:b5:9d:83:0f:
1c:54:61:6e:8f:8c:7e:ad:ce:4b:88:60:05:ac:da:
e1:f1:9c:ca:13:5b:54:e9:27:da:6d:c0:3a:c3:0f:
69:ae:23:47:e8:2b:55:bc:b5:5e:60:f2:94:0f:da:
64:7f:87:df:79:15:f5:80:aa:d3:07:1b:8f:4b:a3:
02:fe:17:f4:05:95:1f:6d:40:8a:35:28:66:7f:64:
1a:8d:27:2b:ce:b0:2a:fe:43:ae:7e:ab:36:cc:ef:
8b:02:9d:e9:1c:ff:76:61:48:b1:9a:1e:99:5f:b4:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:8F:0B:08:21:99:DD:07:CA:4E:93:AA:4F:A9:FA:98:48:D6:99
X509v3 Authority Key Identifier:
keyid:81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:af:4d:55:bd:01:1e:45:df:8c:c2:1a:f1:36:a9:de:3d:
9b:2b:66:ac:ed:c0:14:d6:d8:3b:d4:f3:6e:46:cd:cf:14:f4:
fa:4f:10:cd:c9:9e:73:2c:f2:0e:59:f6:11:60:d6:a1:e5:72:
71:61:3b:b3:6d:28:20:fb:6b:f1:7c:1b:3b:fc:0f:1f:9d:00:
51:58:ab:6d:b9:16:2b:e0:63:b8:d6:04:3c:bf:46:98:09:0c:
93:f8:81:b3:d7:68:8e:d2:c9:85:1d:e0:44:78:37:fb:ba:b3:
53:d3:9d:c6:97:19:cb:3e:16:6a:14:8e:7c:1e:86:71:1e:81:
7f:7b:b5:5d:26:b1:0e:c9:38:8d:cb:1a:bc:b3:b2:fc:da:7e:
94:29:1c:15:58:36:89:5d:93:aa:ac:e7:f5:1b:16:ac:cd:0b:
ad:38:a7:fe:e3:4e:3a:30:2c:27:98:f5:47:a8:c1:3c:9d:60:
b9:b2:54:c5:55:44:4b:2b:b5:96:d4:fb:0e:3e:95:52:f0:cb:
f3:99:db:36:a2:b3:75:3f:1d:b5:41:cf:86:f8:87:e6:c5:f3:
9b:51:6c:60:c3:9a:25:7e:8e:21:6c:9f:30:fc:18:0b:5f:0e:
f8:71:c6:19:5c:39:dc:47:ad:09:d0:c6:46:2a:a9:de:4f:2d:
96:fd:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:34:37 2024 by rpki-client on console-fra.rpki-client.org