Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
File: j32Qq83eC8bwvKryHOw6TyrPrk8.mft (raw, json)
Hash identifier: XmlWV+ERZSMe9tnlmZdMieHWapsL3XAiKHP9Ldr4Qdk=
Subject key identifier: 5D:87:98:69:9E:E1:A7:3E:A0:BD:8F:B4:23:57:F6:94:90:52:15:FC
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0190381891FEFF8385380898490589002074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
Manifest number: 11DB
Signing time: Fri 21 Jun 2024 00:00:52 +0000
Manifest this update: Fri 21 Jun 2024 00:00:52 +0000
Manifest next update: Sat 22 Jun 2024 00:00:52 +0000
Files and hashes: 1: B06GzxvLF6rDfTGWAUDdXOiAEwA.roa (hash: SC4HieMAQ4w12QIhxsoycT5YWERt/Ce50JcQYIrAzYg=)
2: j32Qq83eC8bwvKryHOw6TyrPrk8.crl (hash: mPHOIbfKY7lLC14nEKVg0Uv/veyKRsG9py6qLoGPso4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:18:91:fe:ff:83:85:38:08:98:49:05:89:00:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jun 21 00:00:52 2024 GMT
Not After : Jun 22 00:00:52 2024 GMT
Subject: CN=5d8798699ee1a73ea0bd8fb42357f694905215fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:be:ba:2d:fa:a6:40:1d:96:b4:68:76:a6:
4e:fd:f0:b5:49:f3:29:b2:53:32:1b:b3:9b:af:6d:
a8:ed:9a:d4:f8:43:f1:bd:6a:23:3e:b1:90:25:a9:
bf:c1:81:55:48:97:4c:18:52:43:2e:97:d1:1b:64:
72:05:a7:57:eb:51:5e:d7:56:7f:22:3d:ca:55:55:
44:60:63:2c:52:df:b6:96:6d:16:7e:e0:4d:a2:30:
63:6a:ae:cf:e8:81:55:c8:75:6f:b1:cc:1e:e9:06:
e4:27:47:e1:e4:fd:1e:c9:a0:27:8f:65:92:22:52:
a3:eb:f9:51:b3:f5:bc:ef:d1:35:e6:90:b5:4c:6b:
74:8e:c1:d0:79:bb:af:8d:25:f9:20:6e:a3:b0:ed:
55:ab:ae:34:b9:7f:89:fe:7b:bd:cf:6b:f5:42:b3:
49:c6:e9:87:9c:ce:81:d5:b6:75:7c:a7:58:12:a0:
e0:30:e7:da:44:8a:aa:21:2f:e2:6e:0b:6e:60:0e:
67:e2:48:03:b0:8e:09:f8:f8:38:0a:62:6c:5e:a2:
df:46:cf:22:de:03:0d:3a:5f:7d:c6:65:79:ab:19:
1f:df:d7:e8:42:1d:0c:8f:c1:a3:11:54:a3:32:ca:
5f:8e:0b:d4:a8:81:4e:c8:ca:31:08:4b:f0:2b:d7:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:87:98:69:9E:E1:A7:3E:A0:BD:8F:B4:23:57:F6:94:90:52:15:FC
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:95:e6:49:ff:6b:40:fd:a0:e6:df:44:01:d5:b9:96:8e:d2:
92:63:04:a0:bb:ce:9a:60:cf:b3:c3:60:b6:22:fd:f5:00:a7:
35:e9:36:eb:70:ab:b0:36:50:4f:4c:3a:6e:54:5e:99:1e:0e:
3f:87:89:66:42:08:74:e0:29:2a:96:ff:e0:6c:f2:7a:73:f1:
fe:92:63:06:5c:11:ae:b5:62:32:05:ef:b2:54:df:55:e6:2d:
54:4f:7c:12:93:de:ba:54:50:5d:19:f9:93:db:be:e6:ce:86:
fe:2c:af:e8:b9:50:a9:77:df:e5:67:54:d1:f8:71:d3:a3:eb:
1a:c0:d6:4b:5f:fd:03:49:f6:0d:b8:cb:df:d0:95:b4:7a:82:
13:d8:85:ef:23:25:aa:df:63:25:da:ee:59:00:e3:5f:14:bf:
7d:66:5a:69:69:63:14:29:0c:68:6e:4e:ac:b1:9d:97:c1:47:
83:cc:01:7a:15:79:3e:e1:e8:08:67:a6:dd:e0:31:be:2c:50:
0c:1a:c5:a3:3d:e4:05:34:5f:44:26:0e:fb:ca:51:3b:5e:23:
cb:17:49:f5:4c:c2:12:50:bb:c3:2b:03:26:5c:c6:f9:9f:fc:
f4:08:0a:35:81:9b:00:79:2c:1f:5a:2c:ac:98:6d:e1:87:6f:
e6:6e:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:49:19 2024 by rpki-client on console-ams.rpki-client.org