Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: FUb2SXVJ329WlDSf2LiO6ATt1PaIQi3nVvDZ00h5sCo=
Subject key identifier: A3:B9:3A:FB:CD:42:92:43:78:02:B2:15:2A:37:2A:44:69:DC:BE:A6
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0190429EDC29505FF9BD515061A3AF63A553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 11D9
Signing time: Sun 23 Jun 2024 01:03:45 +0000
Manifest this update: Sun 23 Jun 2024 01:03:45 +0000
Manifest next update: Mon 24 Jun 2024 01:03:45 +0000
Files and hashes: 1: 0f1pNyRjkr6LuXeiWR_ZFzD9cIs.roa (hash: E58rMSzWjOx0DKpJmLklvsGVpXNmsw44mKJzkwToRo8=)
2: 8nY5C9uhCQ0T0S2Ro30Cr1K6vGc.roa (hash: 6/w9F4jUNR9ir2GkupRGmKtVn3eZe1Y9FMPxRUfyp00=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: L1jMn8RhG2vz7ePyTrxp3AgH+v4+KwLL35UjaTvOi7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:42:9e:dc:29:50:5f:f9:bd:51:50:61:a3:af:63:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jun 23 01:03:45 2024 GMT
Not After : Jun 24 01:03:45 2024 GMT
Subject: CN=a3b93afbcd4292437802b2152a372a4469dcbea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:7b:5d:5f:b2:a4:d0:ce:6e:10:fd:a3:62:
0d:dd:15:14:fd:0e:07:d8:64:9e:3e:83:2a:76:de:
c2:10:3b:41:89:7b:e5:6f:5f:a7:1d:f0:65:9e:4c:
1f:c0:0c:be:e6:40:d4:18:a5:31:bf:40:2e:95:f3:
99:15:d1:20:2e:96:fa:19:e2:d5:27:04:21:b7:2d:
5f:f7:ac:3f:91:bf:52:8a:5b:02:bc:f9:f3:6a:d5:
6c:6c:c7:88:1c:d7:1e:4e:8b:a3:70:23:0b:7a:fb:
b4:81:ac:c7:ce:81:d8:ab:eb:ae:d8:e7:86:10:a9:
f5:83:b6:a3:3f:20:ff:00:94:d5:d4:a2:63:e4:df:
6a:79:14:fb:15:a1:a0:bf:45:d9:f1:64:38:3b:a8:
5b:53:10:e9:32:83:5e:20:b8:53:5c:f1:71:4a:a1:
d9:a4:58:de:26:df:33:ef:f3:56:ca:ed:fb:85:43:
5d:cc:8d:0c:b5:a0:9f:6d:e0:70:a0:78:fc:73:2e:
df:fd:56:43:50:98:5d:e6:57:a5:29:c5:a3:40:78:
a7:cf:2b:f6:87:4a:42:62:48:74:3e:7a:7b:9e:bc:
32:44:53:c6:e5:1c:30:b5:f9:22:93:af:1d:a5:88:
d1:08:e3:4f:e4:c1:f1:06:98:55:80:46:7d:92:e0:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B9:3A:FB:CD:42:92:43:78:02:B2:15:2A:37:2A:44:69:DC:BE:A6
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:79:0f:e5:10:49:8f:42:17:c7:9d:96:45:d9:67:e8:0e:
0c:cc:0a:69:04:e7:0c:86:ed:5f:7a:54:a7:67:01:e4:45:19:
61:b8:0d:16:cb:e7:2e:01:5b:02:3d:fd:12:db:1e:4d:de:24:
2f:64:2a:f5:74:d2:f7:de:22:f4:a3:f8:7a:58:07:c6:cf:86:
a6:2e:c8:02:66:57:26:0f:76:ab:bf:ad:ad:fb:83:cf:35:c9:
63:13:d8:43:93:c2:da:fc:cb:16:c5:71:0f:37:e7:4e:a8:f0:
8f:2e:8f:1c:bf:c5:63:26:49:22:5b:81:2f:a6:06:80:ee:55:
50:cd:c3:63:0d:09:df:26:c7:51:54:a2:33:dd:e9:34:e3:6d:
0d:da:f8:fc:82:8b:a3:da:23:4b:c6:e4:61:58:5e:84:f9:32:
d5:4e:11:87:fc:21:85:6a:fc:95:1e:64:6a:be:12:b8:7d:bd:
e6:b1:91:c7:5a:fe:59:cc:aa:d7:41:00:e9:41:f0:4b:1f:d3:
6f:80:a9:0f:d6:91:92:a2:7a:4d:a0:66:e1:12:0a:51:a2:5b:
25:9a:d6:ee:f0:fd:b0:97:22:b1:bd:03:3b:64:7b:5f:61:04:
68:c1:cc:30:d4:24:25:94:bb:45:f9:a9:df:d4:83:6a:eb:31:
2e:67:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:15:37 2024 by rpki-client on console-fra.rpki-client.org