Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: ri0XX4sq/M9FdQ6SPcZSqNtbPlJBnRW9Q2jgZ3XPBvI=
Subject key identifier: 74:6C:CB:51:EB:CF:A5:70:4A:4A:5D:C5:33:42:E9:81:CA:F3:77:5D
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 01901CA1A69949A4F4173DF696CF98647FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 16:01:14 +0000
Manifest this update: Sat 15 Jun 2024 16:01:14 +0000
Manifest next update: Sun 16 Jun 2024 16:01:14 +0000
Files and hashes: 1: WCNsbudSM-FgF4pWP-RWGloRfPE.roa (hash: 8D1juBP8awBYoDS64OjaQbOVqYTZc/cAscDZyLW8jJA=)
2: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: aQ4AKWAKUmKBGt2J1SPU1/z6tkRmQoDZer1LolWqFjM=)
3: epMu42nOX-pkAiuoe-K-_UAI__0.roa (hash: 09rGg/80ZI8SOZawnFq+h+rIZlEcc7ENxMeET0KSqAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a1:a6:99:49:a4:f4:17:3d:f6:96:cf:98:64:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jun 15 16:01:14 2024 GMT
Not After : Jun 16 16:01:14 2024 GMT
Subject: CN=746ccb51ebcfa5704a4a5dc53342e981caf3775d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:2d:ea:00:33:c3:0a:4b:4c:c6:1c:15:90:
1d:e6:63:cc:77:d0:ca:3d:93:22:cc:41:a1:30:6b:
cd:21:ab:27:cf:1a:4e:db:7a:7a:76:a1:9c:4e:db:
91:c5:8b:6d:00:16:a1:33:b6:8f:73:21:4c:90:a5:
05:83:02:e3:f4:06:6b:c6:c7:9e:6f:91:97:dc:0d:
cb:ff:4c:34:7f:bf:d1:f5:0c:62:1d:ce:49:ce:bd:
96:65:3f:81:50:75:04:d1:39:6b:1e:ba:44:37:e5:
08:36:55:e4:75:23:7c:82:60:43:c5:75:77:a5:31:
82:2d:d9:3c:7b:97:2b:22:e5:af:a7:1e:15:f6:f0:
ce:1c:cf:50:8b:0d:31:77:a4:f4:cc:bf:7a:a7:7c:
ad:a1:c0:dd:0f:91:c4:71:2c:7b:d9:c8:99:2c:99:
8a:a0:5b:33:dd:ef:26:85:29:96:5b:c9:e7:e2:39:
4d:74:3e:31:2f:64:ea:4e:be:c5:c4:98:f2:6d:1d:
79:67:0e:1b:c4:4e:34:a4:b7:e8:4d:a6:12:0c:6d:
e2:d8:32:83:16:b3:13:06:00:13:1f:3e:28:cb:37:
da:bf:a1:00:05:f2:ec:0e:9a:06:4e:aa:e3:ac:39:
40:35:91:33:2e:1c:12:00:5e:6c:81:e6:b6:43:6d:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:CB:51:EB:CF:A5:70:4A:4A:5D:C5:33:42:E9:81:CA:F3:77:5D
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:69:d1:54:8f:58:1c:ad:09:87:c4:68:29:5e:ec:24:0c:
42:d4:81:34:20:f5:19:f6:e3:e4:79:4a:94:5f:56:fe:ff:1e:
e5:56:cf:d3:eb:fe:5c:e0:72:b0:ad:3c:bb:52:35:df:6b:0f:
40:68:5b:e1:ea:62:60:19:e8:18:b9:f8:d5:89:61:73:99:c0:
bf:83:f1:ed:2e:bd:2d:55:d1:72:34:28:4c:7a:15:3e:27:a9:
ac:99:8e:60:95:96:41:ad:b8:c9:83:91:cf:3d:ba:cb:c5:53:
fa:b8:02:2b:8c:a5:b0:42:50:88:da:5d:84:af:67:87:a7:70:
0f:26:7e:55:6f:64:6a:db:08:ee:3b:61:5c:cb:7e:9e:b6:34:
d7:08:9c:62:94:3b:f7:fb:bb:ff:76:79:cb:2b:18:41:06:f4:
eb:27:cd:2e:5a:56:14:a9:ba:33:2b:67:57:64:d4:14:c0:6d:
7f:1e:d7:10:9e:51:ef:14:85:72:a3:e1:73:0f:51:05:be:3b:
6f:28:aa:cf:77:5a:87:e0:c0:77:92:12:a5:aa:f1:95:8a:1d:
f8:de:0f:93:f2:6d:95:ed:ac:9c:82:85:27:f4:92:0d:00:61:
f6:4e:32:bb:2a:36:20:d4:cc:2c:93:98:c5:6c:d6:8e:c9:a8:
68:31:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:39:48 2024 by rpki-client on console-ams.rpki-client.org