Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: 66D4y6fbb12+8RMDUJjkn0B6NNWMjhmrhnaL1Y/gs1k=
Subject key identifier: 33:EA:D8:57:DA:48:E6:49:DC:58:EA:64:FF:7A:7E:63:04:F2:89:08
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 01901EC68B69B764F55B81DEEC10372DD5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 0D87
Signing time: Sun 16 Jun 2024 02:00:46 +0000
Manifest this update: Sun 16 Jun 2024 02:00:46 +0000
Manifest next update: Mon 17 Jun 2024 02:00:46 +0000
Files and hashes: 1: UDqj8Thysh7eCzxoFGEllmHJBUk.roa (hash: O0vl8f1twjJFL1eKKqgofeMh1Q+QjdS5Z9DrWAxk+GE=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: EFhmqetn82Fxm16s5ss8n1OeyjWquVGCbSr6D/oJvO4=)
3: ulfnS4VODpeY1ryoXpkprtczm0M.roa (hash: IDOgdJGIayidPPniQ4T6Km8WvdFiiJAq+Ac7MEB++4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:8b:69:b7:64:f5:5b:81:de:ec:10:37:2d:d5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jun 16 02:00:46 2024 GMT
Not After : Jun 17 02:00:46 2024 GMT
Subject: CN=33ead857da48e649dc58ea64ff7a7e6304f28908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:ea:5a:22:f1:7b:d2:16:e7:49:65:71:a9:
3f:78:e5:ee:1f:c7:db:b4:f4:4f:f7:4a:94:3a:5a:
8e:fd:43:1e:1e:b9:3f:45:ff:47:89:cd:a0:b1:33:
11:67:48:e4:c7:5a:26:1e:65:3b:8d:51:17:4b:f0:
d7:3d:25:e0:4f:95:ac:2e:35:ba:fc:f5:dd:f3:eb:
43:6d:21:fc:cc:77:8b:3a:4f:fe:9b:06:7a:49:ea:
a4:84:1d:ef:0e:ca:56:0e:20:23:56:95:00:31:01:
2c:01:5d:ab:a7:ea:83:b8:b3:92:a4:c3:e6:24:ac:
28:cd:99:7f:70:4a:3e:40:59:55:54:90:c5:93:b1:
29:98:84:24:b0:8e:6d:b9:96:d9:11:c5:dc:48:aa:
b9:50:75:4d:6c:ec:d5:2c:3f:35:51:d5:b6:86:07:
6e:2e:aa:0c:91:be:0d:3e:01:18:c4:dd:09:0c:31:
17:1f:60:a0:b8:98:58:0b:c7:8a:2f:7b:76:30:f4:
f3:7c:7d:99:43:7a:8b:67:81:07:52:48:76:c6:20:
b0:14:3e:23:37:91:72:17:50:5e:23:a1:28:2b:d5:
d3:7c:55:1e:79:0d:9e:79:89:31:13:7c:39:5f:48:
4c:51:ec:7c:6b:fd:8a:bf:41:85:24:2c:f4:fd:4c:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EA:D8:57:DA:48:E6:49:DC:58:EA:64:FF:7A:7E:63:04:F2:89:08
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:75:80:b8:12:fa:5a:09:95:0f:33:8e:1d:4f:08:a6:13:
e1:f0:39:f0:e6:07:49:15:4e:a0:63:2b:6c:8a:e3:f0:13:7c:
a8:2a:cd:b0:8f:99:ee:12:8b:b6:02:97:0b:3e:f6:5f:0d:71:
7a:f7:86:7d:0c:e9:ac:e0:7c:a2:f8:5e:77:b3:4e:c8:45:50:
4e:b7:0f:11:15:2c:33:09:f1:c2:67:c9:c2:5a:20:7e:c6:f2:
bb:ec:4b:e4:31:60:f9:9f:29:b2:16:9c:70:24:5e:7e:8b:bf:
fc:74:e2:08:da:3f:37:89:81:e5:e2:52:08:8a:06:56:2a:c5:
fe:84:44:70:82:c8:af:4a:b8:76:41:47:6a:a0:3a:08:87:54:
2f:7c:cc:86:46:7e:20:62:b3:c6:c6:31:dd:5d:75:a0:0c:9d:
a7:7d:f9:10:c7:9e:95:8a:11:73:c2:96:55:84:32:45:3e:75:
6e:2e:8e:5f:69:b9:35:d8:e1:c6:76:1b:8e:e1:36:d4:63:40:
34:ac:51:31:50:c1:5e:92:86:93:1d:da:15:4d:99:11:d1:a8:
e2:e0:cc:17:0e:d3:e6:c1:ee:a3:d7:d5:ae:81:9f:92:4d:0c:
9d:cd:6e:d8:9f:c7:9e:60:4a:b1:a6:f5:64:46:25:de:46:29:
d9:ff:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:19:59 2024 by rpki-client on console-ams.rpki-client.org