Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: JyOhxYjTFwHdBnh5F9YY/4yvywZsoomRtDkTLHlE0Bg=
Subject key identifier: 7C:42:4D:B0:C7:6D:D0:94:6B:35:60:A2:F9:C4:22:C9:53:61:48:8A
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01901DECB6333C084F86EB20D5E9B67F7DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 22:02:50 +0000
Manifest this update: Sat 15 Jun 2024 22:02:50 +0000
Manifest next update: Sun 16 Jun 2024 22:02:50 +0000
Files and hashes: 1: f_OFJuCY4eQ5FW7OyAfBifddf8Y.roa (hash: hTHkOs2V8Kh5puYFuhMLgFWr44WTwu46gC5srvEIxGA=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: o0qfj0+p46Dag0Nq7SfIefAUmLy5u1z7J+XMz1oi3KQ=)
3: ng0yZKSMI7YJR2GjNz3hb3pwbL0.roa (hash: LLxxqI7Y4JjQZY1ErWK/XnQiL4khm1NwMGKA2SIs9sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:b6:33:3c:08:4f:86:eb:20:d5:e9:b6:7f:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jun 15 22:02:50 2024 GMT
Not After : Jun 16 22:02:50 2024 GMT
Subject: CN=7c424db0c76dd0946b3560a2f9c422c95361488a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:04:21:55:98:ec:69:b4:6e:54:71:d4:3b:
7d:9b:b8:f6:3d:96:c7:c4:be:86:62:67:6b:c9:fa:
40:a2:a4:18:c0:96:5f:87:67:3b:8f:08:55:c6:f6:
87:05:f9:07:d7:75:03:5e:04:8a:b9:aa:17:5a:65:
65:46:4c:9a:4b:87:8c:7c:d6:3c:63:42:3d:9a:3a:
d1:10:3f:45:c8:27:e0:f6:b8:60:1c:7a:b8:9f:8b:
0a:d7:4a:35:e9:30:d7:49:9d:e3:0c:66:5c:db:95:
27:6b:2e:2c:3b:f9:96:e6:78:f8:69:f2:6a:f9:d0:
bb:fb:4c:ac:71:fc:de:c9:01:5a:62:ec:90:df:53:
23:50:5e:15:5e:d0:d8:91:38:9c:bb:8a:4b:71:dd:
8f:4d:61:78:34:0c:e5:c6:e3:45:af:8d:89:05:cf:
e8:23:5f:96:30:3a:e1:7c:25:ca:8f:c8:d1:56:17:
fa:82:10:e5:2f:44:a5:da:7f:4e:e4:12:04:23:07:
22:81:0b:b3:9c:bc:b7:ee:c8:9a:9e:8a:6d:fd:80:
76:ac:23:54:f8:96:ff:46:50:f6:7d:41:23:08:15:
fa:30:cf:97:e7:03:ff:d5:72:10:4f:72:f0:4c:d7:
2b:b4:14:43:29:4f:a1:54:15:cc:82:1e:75:f1:1d:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:4D:B0:C7:6D:D0:94:6B:35:60:A2:F9:C4:22:C9:53:61:48:8A
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:82:68:5f:a2:0e:29:5e:2a:f0:7f:14:3a:82:7f:6f:92:1b:
ff:b6:18:c5:1e:a0:3e:84:c6:f9:69:8f:93:df:9a:a5:c6:58:
cb:4b:b7:8a:fb:19:8a:3d:46:a2:e8:56:94:54:b7:db:5a:54:
79:94:35:94:74:94:85:69:f0:86:62:a1:f5:20:88:97:3a:db:
ef:79:56:9c:bd:ec:a2:17:b5:6f:ae:c4:cb:73:a8:c6:03:0d:
16:05:de:2d:5c:a2:03:7d:ca:b0:74:86:80:70:5c:cf:d4:40:
68:af:0d:03:8b:a7:90:d5:a1:0a:e6:03:57:92:76:9e:47:b5:
93:a9:15:54:72:1c:47:eb:30:4f:29:3c:1e:35:82:04:35:ce:
9b:14:37:34:fd:70:37:36:6b:cc:17:d1:4a:a4:d3:93:e2:c9:
c6:ea:cd:63:53:84:80:8e:75:64:85:f2:a3:67:4e:14:70:7e:
b2:3b:92:80:cb:c7:6c:08:ba:c4:ab:ba:1a:a5:a6:70:cb:86:
ee:6f:5a:6b:b5:0b:8e:c1:68:05:83:d9:a2:2b:f6:d3:9d:6e:
1e:9e:70:fd:82:9c:23:80:c0:78:9d:62:ab:aa:82:52:4a:ad:
87:15:b8:e8:ad:02:57:ae:2e:2f:d3:f7:2d:07:06:de:27:0d:
ca:08:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:19 2024 by rpki-client on console-ams.rpki-client.org