Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: HKVUTfv5r5ks30TYKhssDrMk+YLo8qIw5kv2E6uhixY=
Subject key identifier: 25:53:AB:13:2A:02:A3:3F:BF:F5:06:25:85:0C:6A:4B:98:3F:CE:6E
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 01901CA15B30C8A962A06DA15A2DA1BC0B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 16:00:54 +0000
Manifest this update: Sat 15 Jun 2024 16:00:54 +0000
Manifest next update: Sun 16 Jun 2024 16:00:54 +0000
Files and hashes: 1: 7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa (hash: SDzGA3Q2FNgDauQKmW2Jv8qW/avp6qEtixhOMX8zOc4=)
2: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: jkBA5iJRf/0nYQL2kzACtC+oqpZdIoFBbwZQ9anmHxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a1:5b:30:c8:a9:62:a0:6d:a1:5a:2d:a1:bc:0b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jun 15 16:00:54 2024 GMT
Not After : Jun 16 16:00:54 2024 GMT
Subject: CN=2553ab132a02a33fbff50625850c6a4b983fce6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:91:2c:c9:0e:e8:be:6a:df:14:32:e6:d7:
3c:65:ad:56:10:0c:5c:0b:3a:2c:94:b4:57:52:4c:
38:ef:6f:5b:71:ab:c8:4a:cd:ee:87:3e:fe:67:5b:
f9:df:85:6f:c4:68:c5:1d:ea:27:2e:31:68:3d:db:
2b:3a:17:77:4c:ed:29:37:2a:46:9c:4a:27:f3:60:
45:54:81:98:3d:d8:5a:98:ef:45:e1:a4:fc:04:4b:
a5:8a:f0:96:bd:20:f8:56:28:35:0e:66:a0:79:03:
3f:8d:07:7c:3d:68:57:6c:46:86:10:c2:95:f2:90:
56:f8:bc:e2:2f:28:b1:1b:1f:4d:c3:ad:8f:54:d6:
c4:e5:51:4b:28:52:01:20:0d:40:c1:8d:b6:ce:32:
95:d8:b4:ca:0c:33:c3:67:50:d9:1b:3a:40:e5:85:
fa:f2:4d:c9:28:bd:46:3d:4e:e4:57:b3:d4:f9:13:
3c:61:b4:15:ae:de:ab:a0:6f:5b:47:7b:04:f1:db:
a8:5e:0d:3c:c8:7f:4f:cc:6d:bf:71:f1:e5:33:66:
6a:17:7c:b6:0d:3b:7e:1c:cc:0f:e4:5a:56:21:86:
d2:71:5e:d5:f8:71:49:d2:a1:33:59:e1:01:86:d5:
07:0b:dd:93:e1:d5:7d:04:52:3a:a3:84:0d:27:50:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:AB:13:2A:02:A3:3F:BF:F5:06:25:85:0C:6A:4B:98:3F:CE:6E
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:b5:c0:15:7f:4a:27:c3:4e:7e:5d:5c:44:05:88:90:bf:
bd:c4:e8:15:84:7f:f9:35:dc:e0:69:bd:4d:cc:5d:ac:30:d6:
64:15:86:38:9c:7d:86:54:36:ae:a1:b7:f6:36:3d:19:57:fe:
21:a0:44:78:11:cb:6c:78:31:06:fe:c5:41:4d:24:5e:7a:34:
4c:ca:e0:04:de:33:33:b1:82:ee:14:fe:f2:50:45:9a:59:2c:
68:fb:86:dd:0a:08:c8:36:1f:4d:38:06:6c:6c:68:e6:e4:1e:
96:32:4b:ee:8e:b3:32:06:5d:13:cf:af:f9:27:d2:af:a0:a5:
fa:e1:4a:67:37:ed:25:8a:19:59:b5:59:28:91:28:be:8d:dc:
00:c7:b4:08:ac:17:50:a1:96:8a:73:a2:60:6d:d3:1e:fc:38:
01:49:52:59:5f:f1:4b:ac:86:07:e0:76:6d:aa:9e:72:03:81:
cd:41:fe:d3:f9:91:fb:82:08:07:44:31:6d:a9:a3:d7:37:4a:
a4:45:28:98:b6:ff:ec:99:2e:b6:0d:6c:18:f9:a6:7d:7e:05:
7e:4a:ef:69:40:fa:d1:69:8f:7f:24:24:02:62:fd:85:d0:c5:
d9:ae:50:4a:a0:25:14:8a:71:1e:7a:79:86:50:e9:8b:99:c5:
13:8c:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:22:29 2024 by rpki-client on console-ams.rpki-client.org