Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: +wRTH1G/ik3P2JONY8Aw0a4/nck4J9J7qHVUPw5q60k=
Subject key identifier: A7:52:66:8A:B7:97:2D:DF:ED:DB:51:8C:0F:F6:CB:C3:31:76:88:76
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 01901DB3C826E52D42CC85A00754724E4117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 0F6F
Signing time: Sat 15 Jun 2024 21:00:39 +0000
Manifest this update: Sat 15 Jun 2024 21:00:39 +0000
Manifest next update: Sun 16 Jun 2024 21:00:39 +0000
Files and hashes: 1: V1tG4JI2TgfiCHsTVskquJH5BLY.roa (hash: iKJQs6KwQhs+3bS0fSbmtx1gBkdqrdjSmyBNUtOoR/A=)
2: c1YAwAJNPI3Ir8QvEzjhcThJ1Cw.roa (hash: aakt9OMPsCIfS1EWHGHKVJ57sMIxD+3fMYfMZtkDuA8=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 7SKyBwxe838A7PGWpZQYgpIFURryXuRMXDH/zbmgjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:b3:c8:26:e5:2d:42:cc:85:a0:07:54:72:4e:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jun 15 21:00:39 2024 GMT
Not After : Jun 16 21:00:39 2024 GMT
Subject: CN=a752668ab7972ddfeddb518c0ff6cbc331768876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:3c:7d:c8:bc:dd:ca:28:0b:54:26:22:3c:
96:16:df:5e:40:5a:5d:f3:f1:78:06:56:5d:53:2e:
bd:18:97:4d:98:dc:73:b3:aa:76:88:a5:61:2b:fa:
f3:c3:53:d7:f7:1d:f1:56:1e:56:6c:c5:30:6a:05:
f2:ec:3d:5e:97:b1:0c:31:8e:35:3e:8d:57:bd:87:
42:32:e6:aa:3a:8f:51:b6:79:73:e3:aa:03:7c:1d:
9d:15:75:7e:7e:4d:c5:ba:0f:c3:d7:a1:08:8b:6a:
7d:4b:2f:96:b4:10:53:c2:40:7d:56:35:4e:29:88:
8a:40:56:d9:18:2f:24:b2:02:da:f4:a0:6e:c5:bb:
18:b5:1f:31:f9:7b:af:51:20:e0:d3:0e:6a:24:85:
9d:fa:19:c0:73:14:f5:b6:1f:35:bc:22:53:c0:96:
58:1b:3f:54:77:b1:d7:b4:22:72:fa:f2:20:57:a7:
93:45:01:e1:27:db:f8:46:b0:98:ad:fc:4d:7f:b8:
bf:72:ce:6d:60:a2:17:dc:10:7e:eb:4b:c0:ef:b1:
e3:9e:11:d5:e1:49:7f:e9:93:8f:40:51:f2:1e:a2:
f5:01:c2:8d:2d:e9:04:d2:0a:46:72:79:98:0a:64:
b2:5c:c3:4a:24:98:d6:07:6d:9e:d8:62:48:cf:e6:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:66:8A:B7:97:2D:DF:ED:DB:51:8C:0F:F6:CB:C3:31:76:88:76
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:fd:f7:1f:d5:c9:42:15:1f:fd:da:6a:19:22:86:f2:e2:
f8:4f:8c:ce:1d:ff:72:da:7f:15:e8:f9:1c:0f:79:71:3a:98:
ca:c0:04:56:27:9b:64:b3:cf:da:71:c6:0e:59:90:ea:4c:4d:
41:e5:33:d6:39:9d:7b:70:5c:97:23:25:b5:f5:db:41:51:22:
c9:70:57:10:03:43:6f:ff:ad:ef:17:35:ff:fb:58:70:aa:75:
a1:a5:00:24:81:be:dd:6d:56:a2:e7:7d:80:18:e1:34:d3:53:
80:42:32:ac:71:60:49:cd:45:07:5c:75:4c:7f:d9:ca:ac:a4:
85:79:9d:96:29:3d:7c:08:53:13:3f:a3:06:a8:cb:98:77:b6:
0a:11:8e:d3:e7:5e:ee:5b:bf:db:c4:44:ab:34:b5:14:c3:d4:
33:59:29:db:92:77:1b:9b:d0:18:74:0d:bc:b2:f1:b7:78:dc:
c3:0a:1d:a5:32:1e:22:94:ce:9e:6a:8c:cc:12:c5:d4:74:c8:
40:77:d5:23:eb:37:c1:40:b9:66:b7:fe:1a:8d:bb:e4:96:84:
03:ce:f4:80:5a:07:05:6b:a0:30:04:cd:df:b8:db:19:96:22:
28:7e:f5:05:b1:43:0b:91:ba:7a:f6:8c:0e:4e:da:69:85:63:
18:ba:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:15:01 2024 by rpki-client on console-fra.rpki-client.org