Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: bu9pwhLXaUNyObY/1RI0y4emjTNQas6oCPERW8gb9KI=
Subject key identifier: 31:E9:81:0B:B3:8E:8A:E0:36:16:64:A1:BC:6D:03:43:6C:80:64:9D
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01903DAD197C16CB1E8F52BE0990F0EB5F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 11D8
Signing time: Sat 22 Jun 2024 02:01:12 +0000
Manifest this update: Sat 22 Jun 2024 02:01:12 +0000
Manifest next update: Sun 23 Jun 2024 02:01:12 +0000
Files and hashes: 1: 0sckWjhwp_hjGVrUPt27XERmGjI.roa (hash: osnVg78hVWjgzdGE1gZPYukh5r6I4N2Nn6icOIX02/U=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: Mqb5WvsFoDn9C/sG8d1sKsenHzCl8dyiR/h+GTUX/Cc=)
3: msuImJO_o4oR1O6uUQOxkSVzufw.roa (hash: bSWP60/C7CScbo4rxaKvStncSJiR2QfZOjdD6gVT8tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:ad:19:7c:16:cb:1e:8f:52:be:09:90:f0:eb:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jun 22 02:01:12 2024 GMT
Not After : Jun 23 02:01:12 2024 GMT
Subject: CN=31e9810bb38e8ae0361664a1bc6d03436c80649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0a:4a:b6:e8:e2:66:5b:4a:0c:5b:ef:d3:6a:
98:df:c8:fc:d8:85:bd:92:3a:5a:49:ac:eb:8b:78:
5f:86:15:59:f4:10:91:a6:7d:ac:f2:cf:36:55:66:
10:83:3c:42:55:21:09:2d:bd:66:93:28:1f:36:9d:
80:e1:7b:78:80:73:af:7d:98:fe:f0:a9:7d:38:29:
14:c0:28:27:c7:6d:66:51:13:ca:fb:76:e2:ed:99:
13:95:81:86:28:06:25:de:fd:26:aa:1d:69:c0:d5:
38:fd:dd:b5:d0:06:e6:a3:ac:a8:16:64:54:df:89:
90:81:55:58:a7:35:b7:10:c3:e0:93:ec:0b:0f:ce:
0f:5d:bf:5a:d5:f2:60:2a:16:6c:8d:54:29:e3:bf:
b0:2f:e2:b9:82:78:e3:c5:98:ed:28:e5:93:e8:e0:
97:65:10:5d:30:08:eb:29:22:99:21:47:e1:98:8b:
bb:07:1f:f7:f7:ee:f6:0f:d7:f6:1a:4d:b5:ca:90:
df:13:be:c1:e9:c6:dc:35:32:fa:47:c9:fb:41:0a:
70:1c:be:66:53:46:b3:72:72:3d:70:60:a7:e9:ae:
d0:f1:87:17:3f:f2:b6:1e:c4:e0:2d:a3:dd:42:ae:
70:37:1d:66:4e:ba:c0:29:52:75:5d:84:b5:d5:a9:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E9:81:0B:B3:8E:8A:E0:36:16:64:A1:BC:6D:03:43:6C:80:64:9D
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:ca:61:32:21:37:dc:f1:d6:d9:24:13:38:b8:86:8e:6d:
e4:6d:2c:95:79:4e:27:dc:d5:4e:fd:f3:be:75:4c:83:fb:8e:
a0:67:a6:14:9f:4c:14:a1:f9:b7:27:74:b9:6f:a1:2c:45:c5:
ee:f7:fb:ad:a0:32:10:bc:cb:38:26:25:f1:40:61:25:d7:db:
72:f3:2b:8a:6d:cb:7e:ca:a9:07:4e:ca:b8:bd:44:6b:60:46:
aa:10:fc:46:c2:47:35:a5:0e:6f:1a:12:59:7c:2c:df:ac:f6:
c9:31:9b:32:7c:ff:78:3a:ba:63:74:cf:26:aa:a0:1d:1d:88:
66:88:cb:75:ee:fa:69:39:82:62:ba:f6:e7:59:cc:35:c4:d4:
b6:2f:72:43:d6:e6:79:30:eb:32:4e:01:b8:b9:16:0a:4e:97:
2d:58:77:f1:46:6b:bd:51:88:e5:b6:e0:bd:c6:0e:ff:0d:8f:
e9:5b:6d:fc:a4:07:9d:cd:72:cc:de:2b:89:73:e9:8d:9c:b2:
d4:26:b5:99:d3:b3:ec:d7:1c:a5:28:a5:de:13:2d:8a:00:32:
c1:b0:dd:58:eb:a7:1f:28:9d:1f:40:73:8b:7d:ae:53:11:3b:
df:43:dc:c9:3e:3d:08:12:56:e2:60:12:d6:07:0f:34:16:ce:
aa:5c:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:12:54 2024 by rpki-client on console-ams.rpki-client.org