Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: nJKJoWMF1NBIZlGNi04mrEfWxiQ5TGotlLrAy9H4eAo=
Subject key identifier: BA:CB:F2:5F:26:30:B0:15:DB:DC:D3:9E:AC:61:A6:33:D1:4F:26:17
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 019045663A0CFC5319D88D7C946CA4394A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 0D9B
Signing time: Sun 23 Jun 2024 14:00:45 +0000
Manifest this update: Sun 23 Jun 2024 14:00:45 +0000
Manifest next update: Mon 24 Jun 2024 14:00:45 +0000
Files and hashes: 1: UDqj8Thysh7eCzxoFGEllmHJBUk.roa (hash: O0vl8f1twjJFL1eKKqgofeMh1Q+QjdS5Z9DrWAxk+GE=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: PZHGhLAJFzfXZmdOoo2FH81ytUBCexwEcv6R1qlKyUU=)
3: ulfnS4VODpeY1ryoXpkprtczm0M.roa (hash: IDOgdJGIayidPPniQ4T6Km8WvdFiiJAq+Ac7MEB++4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:3a:0c:fc:53:19:d8:8d:7c:94:6c:a4:39:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jun 23 14:00:45 2024 GMT
Not After : Jun 24 14:00:45 2024 GMT
Subject: CN=bacbf25f2630b015dbdcd39eac61a633d14f2617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:e7:ae:e6:b6:65:1d:04:0a:33:1b:0f:bd:
69:bd:3e:fc:b6:0c:13:dc:e0:68:2b:79:33:97:8a:
3e:bd:44:c8:1c:03:0d:3b:e5:9c:10:cf:44:99:6a:
77:1a:53:f0:3a:73:43:49:21:ac:4f:3d:c1:ac:ba:
e9:f4:49:57:cc:38:75:5d:83:7b:f7:6d:7c:49:bc:
fb:0e:e7:5c:53:d0:d4:c3:02:ef:2d:b8:1e:8b:8d:
b2:8a:14:53:95:0b:df:55:37:ea:34:25:42:a4:0d:
74:3d:b0:d0:98:ea:ea:12:4f:50:77:4e:d1:56:0f:
99:cd:79:fa:4a:1c:75:1b:94:b6:5b:59:57:df:da:
a0:25:fc:4a:2e:ca:75:f8:33:77:6c:bf:fa:52:40:
0d:aa:51:25:2a:f0:b6:7e:e2:f2:ed:05:df:28:2d:
bd:f6:00:46:02:85:75:46:7a:7e:ff:db:53:b6:0f:
65:d7:0f:0f:ea:64:8c:b9:37:f8:50:d4:b6:bd:ff:
2b:92:a3:44:61:1b:8a:95:a5:cf:57:70:53:35:cf:
b7:0d:e7:bf:79:6b:36:b8:cd:b9:bb:e1:ed:ae:fa:
e9:a4:d3:e0:53:c4:c1:33:dc:9e:45:38:a8:ad:bb:
0b:9d:ff:79:ba:ee:80:eb:69:6e:9f:2b:d4:36:44:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:F2:5F:26:30:B0:15:DB:DC:D3:9E:AC:61:A6:33:D1:4F:26:17
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:be:b6:ce:53:e4:f7:89:75:76:0c:e5:37:b7:3e:08:e0:
1e:16:29:a0:0c:8b:e0:5b:08:86:55:74:7f:85:96:b6:53:f1:
93:e7:e2:39:2e:92:b1:3c:74:3a:47:d0:c2:3f:dd:de:b9:78:
23:7b:62:3a:ce:a3:ea:cc:0c:58:cb:5c:b2:97:23:e1:27:3e:
32:9b:f8:22:fe:b9:17:42:fb:3d:09:6b:3a:be:52:9d:ac:3d:
09:dd:8d:21:d1:91:87:c5:39:9c:30:c7:09:db:f2:28:9d:c9:
9c:5b:a8:c7:e4:35:90:50:50:26:e5:13:29:fc:77:a6:9c:21:
85:ba:1c:7b:73:ff:10:57:2c:1b:63:4b:20:59:98:f8:bf:b0:
24:b0:11:9e:c7:82:86:5c:36:fa:bc:60:c8:10:18:a7:fd:b9:
01:62:dd:a0:22:a3:57:df:fd:37:af:fa:e3:c8:fd:3f:7b:63:
47:9a:6a:37:87:9c:5c:66:b0:75:a1:c8:c9:df:89:d7:f7:ab:
f8:63:58:b0:42:63:03:b3:21:d3:70:8d:38:cc:c2:f5:55:a5:
e3:e3:a4:57:31:3f:d1:68:c8:2b:73:3a:16:84:91:52:06:18:
a0:14:bd:80:ab:f6:8d:2d:76:e9:a8:13:9d:3c:32:e5:c4:fa:
84:f5:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:55 2024 by rpki-client on console-ams.rpki-client.org