Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: h7ahlaVZzJ4YHgZkYlmF6yySOszQNQd5NDu8S6BTnVg=
Subject key identifier: A4:CD:A7:03:D5:33:96:99:24:07:F4:64:59:1E:86:9B:B8:9A:31:93
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019044F85442BACD2A98D1E608782F11E66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 12:00:43 +0000
Manifest this update: Sun 23 Jun 2024 12:00:43 +0000
Manifest next update: Mon 24 Jun 2024 12:00:43 +0000
Files and hashes: 1: QWpSggiTDCWnhAYYJDNXPP0JHIg.roa (hash: OPcBEqTRb+3r1g6ZPtl7Y51KJhBgW4E6d4xPM0+VWRQ=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: CN4/bTBlB2QDYaFYIJErAJWKgoqmT7/Nx24vKKjJAJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:54:42:ba:cd:2a:98:d1:e6:08:78:2f:11:e6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jun 23 12:00:43 2024 GMT
Not After : Jun 24 12:00:43 2024 GMT
Subject: CN=a4cda703d53396992407f464591e869bb89a3193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:60:55:98:f7:88:ba:6d:c7:0a:13:22:df:
48:86:92:91:52:47:a1:14:49:d8:9f:e0:ee:b0:0f:
eb:91:f4:12:dd:0d:45:a8:39:f8:52:e4:f7:81:0f:
88:4e:81:2d:ee:3c:ac:bf:ba:4e:0e:5e:05:6f:2d:
0d:eb:48:ef:a1:17:28:1b:e0:53:31:ed:0c:8d:2a:
fb:82:5f:a2:a7:86:f4:2f:42:63:32:44:e5:1f:72:
f1:38:4b:45:7d:90:ec:dd:b5:82:49:b4:6e:63:ce:
39:08:17:20:81:c5:ea:8a:1f:c9:62:21:dc:6d:42:
95:91:c6:e8:3b:60:17:9a:7f:6f:b4:94:d4:0b:11:
13:d5:ad:7f:21:b9:26:73:15:05:43:d7:9c:e4:ba:
8f:07:cd:78:92:c3:35:cb:cc:09:8b:9f:22:29:44:
05:c1:ad:76:4b:da:a5:29:bd:a2:ec:ba:12:c9:a9:
7b:3b:7b:86:9d:61:41:60:5d:ed:01:82:fc:67:1c:
08:84:20:d1:27:eb:74:f2:05:18:03:45:d8:25:e9:
1f:a3:cb:59:bd:a9:8f:f8:4b:9c:48:e5:29:93:88:
4b:2c:93:07:3c:57:ab:eb:4c:dd:a7:23:b7:d3:8f:
b5:5b:1a:5f:3b:50:7d:a2:81:56:06:c7:47:ed:12:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CD:A7:03:D5:33:96:99:24:07:F4:64:59:1E:86:9B:B8:9A:31:93
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:95:32:9d:96:e6:ba:41:5c:fd:d4:de:1d:8b:03:5a:48:
9d:41:52:f6:89:5c:15:7c:ee:1c:a1:59:55:82:b6:58:40:22:
bf:c7:be:45:da:26:8f:7e:a9:8e:1a:8d:c2:e6:fa:8b:63:d4:
4a:93:ef:d5:b1:83:32:d1:12:f1:d8:6f:8f:63:24:1e:e8:ba:
4a:7e:cd:f2:b5:21:67:fa:fd:78:f7:d2:6f:95:81:74:02:9d:
8d:57:a9:d6:65:31:23:04:20:08:71:0d:e7:1e:d4:2b:97:1a:
ae:95:69:06:0d:90:72:f5:37:9a:c7:ee:a9:ed:a7:57:30:59:
55:e8:8a:60:ee:49:f7:0b:bc:e2:15:7e:1e:5f:f1:c7:99:88:
7a:d0:1c:14:18:63:99:8a:ff:45:e4:76:6d:38:24:ec:55:80:
70:fa:bf:43:8b:97:b4:20:d3:67:2d:df:f4:10:12:6c:29:c2:
7c:3c:31:bf:89:77:c3:42:77:42:d6:5b:d4:d2:ed:98:8f:c6:
c6:b6:86:94:fd:2f:0c:0c:d4:c1:02:dd:3e:58:15:24:d2:2e:
e7:8b:75:e5:5e:5c:29:e4:be:86:6f:f1:59:cf:9f:e2:59:9b:
f8:59:1a:c2:17:d5:d7:d5:99:1d:da:ca:70:e1:99:82:55:0d:
45:14:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:00:15 2024 by rpki-client on console-ams.rpki-client.org