Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: dedELa5dmCBNFX2EKClntxPvM4CELKlnPLBbCTFZTmU=
Subject key identifier: 4C:58:52:02:45:80:9C:FE:AD:B8:A5:E5:44:AC:0E:B5:22:E4:6D:5E
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01901E58A3D27BDBF7298E7A9F8DB174E31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 11C6
Signing time: Sun 16 Jun 2024 00:00:43 +0000
Manifest this update: Sun 16 Jun 2024 00:00:43 +0000
Manifest next update: Mon 17 Jun 2024 00:00:43 +0000
Files and hashes: 1: QWpSggiTDCWnhAYYJDNXPP0JHIg.roa (hash: OPcBEqTRb+3r1g6ZPtl7Y51KJhBgW4E6d4xPM0+VWRQ=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: zvlxPKPWe87ypqEbR6JkVhOGSWIUws/Fv9BOzfutCR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:a3:d2:7b:db:f7:29:8e:7a:9f:8d:b1:74:e3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jun 16 00:00:43 2024 GMT
Not After : Jun 17 00:00:43 2024 GMT
Subject: CN=4c58520245809cfeadb8a5e544ac0eb522e46d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:d7:f4:ba:1e:70:ea:4c:84:ea:b8:c4:ce:
b5:21:a2:5d:13:f7:d2:f5:9a:4c:51:e0:7a:e3:d2:
4b:da:12:04:3e:88:34:b1:84:96:5b:db:b0:01:c2:
5d:a6:6a:ef:23:1f:f9:20:51:05:da:96:72:f9:cb:
c6:0d:bb:c3:54:c2:c5:8c:23:5b:63:ef:5e:3e:ab:
89:f0:b9:1f:ac:36:05:5a:53:98:88:78:95:9d:58:
8c:6a:97:c4:47:75:c1:ca:01:2d:97:fa:e1:42:a7:
1f:b3:00:7b:dd:e2:61:a0:bf:f1:93:a4:1e:44:87:
7d:b2:e1:a0:62:2a:52:0e:83:2f:15:38:ec:d4:13:
72:a6:4b:27:05:f3:e2:db:04:64:ea:1d:0c:3f:5d:
42:c7:64:77:dd:f9:76:4d:be:5f:ba:2a:b0:79:a9:
19:72:0c:02:f2:98:53:18:24:10:a8:d6:96:6f:5c:
89:31:ca:83:30:96:13:c2:5f:c9:71:4b:3c:fc:eb:
84:64:78:94:1b:79:b7:a0:ae:25:7f:c7:fc:2e:0d:
1f:4b:73:c9:06:94:46:4e:92:ba:82:3b:ba:8f:7a:
76:53:96:6e:1b:1c:8d:62:8d:c5:4c:8d:b2:3a:cf:
35:a3:66:9e:4d:3d:fe:ec:96:c1:b1:fa:aa:a0:98:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:52:02:45:80:9C:FE:AD:B8:A5:E5:44:AC:0E:B5:22:E4:6D:5E
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:41:92:bb:1b:df:65:d1:e9:d4:97:27:ee:a1:49:25:82:43:
76:95:25:7e:a0:92:b7:7b:0e:6d:4f:e6:b5:26:9e:5a:ce:94:
72:9f:bd:20:14:cb:35:26:8d:6d:51:d6:f2:ce:b7:a3:5c:dd:
cb:39:0f:6c:bb:9b:f7:76:97:28:60:80:71:bf:c5:1d:9f:2f:
b2:da:4f:53:cc:38:fc:3f:12:33:67:de:3c:1c:45:33:61:cb:
da:86:32:5f:ff:60:f4:a5:39:58:f0:4c:7f:9c:48:b0:db:d5:
89:43:f2:f8:cf:67:e5:b7:42:88:8b:e4:72:8b:c9:3f:f3:25:
01:7e:c9:8d:86:7a:75:39:f0:15:df:2a:91:88:aa:dd:fb:76:
ce:14:fb:b5:55:23:d8:0d:ef:f0:84:01:f4:15:10:ff:a9:f7:
7a:1a:f7:3a:5f:73:b6:99:17:c2:e1:6a:4f:ae:e4:ad:98:e9:
10:50:db:e3:37:7a:19:c7:8c:80:a4:93:97:6c:c7:12:a7:e7:
1d:fd:d2:82:76:1f:41:59:55:87:11:1a:8f:79:64:ed:29:df:
21:b8:bf:57:88:b8:ba:92:de:2e:c6:c3:81:20:0f:19:e9:8a:
7c:4c:55:ca:d0:17:52:4a:0a:44:11:61:25:ea:b9:07:6c:ef:
74:8e:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:11:22 2024 by rpki-client on console-ams.rpki-client.org