Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: 1bsVsAS02cwbWWlp56jDK5QdVsZRfiWxCQkpWktAYoI=
Subject key identifier: 2B:E4:A4:C9:A1:14:CC:81:A3:F8:5C:5E:5C:A4:59:27:9C:CC:18:D2
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 01903AE2BFCDB07C0C67DBD30CDD6936586C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 01FF
Signing time: Fri 21 Jun 2024 13:00:57 +0000
Manifest this update: Fri 21 Jun 2024 13:00:57 +0000
Manifest next update: Sat 22 Jun 2024 13:00:57 +0000
Files and hashes: 1: _FCjBFP4HWFAOWdj-CMnCcgY3kQ.roa (hash: mY22ywoiK3eXRAMB7GE8L9K7YNwDqBZ+P81mnmW5/40=)
2: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 9sYSWrmJ1OBD2NAUXrZwtCv2NTCIivo5psPrjTofWgo=)
3: fqmuvzgdBudOqW6R9vAAwFWhbIk.roa (hash: D2p03KOZECuZ1ieXm+G7hWelSxIwv8qj5uB04t0dDyw=)
4: kN55BNblRKCM95CNh0GwQUtwA8I.roa (hash: r/obAJafQvHAMgw3DD0ZgBesUHSIvT+FXFYfUBN3GSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e2:bf:cd:b0:7c:0c:67:db:d3:0c:dd:69:36:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jun 21 13:00:57 2024 GMT
Not After : Jun 22 13:00:57 2024 GMT
Subject: CN=2be4a4c9a114cc81a3f85c5e5ca459279ccc18d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:62:89:75:c0:1c:61:c9:3f:41:27:d4:46:
af:7e:99:f9:7c:47:91:c1:fb:e6:15:61:6c:22:02:
03:42:8a:b3:23:90:d5:3f:af:f0:61:f1:81:49:b1:
96:1a:90:79:02:79:5d:63:4a:8c:f7:4c:2d:1c:73:
b3:39:8a:52:78:8b:e5:fa:1d:61:4d:cf:da:67:de:
cf:b3:82:bc:78:af:dc:20:a4:31:b2:35:44:fa:be:
67:d3:ce:ce:aa:c4:cc:29:bf:cd:40:31:4b:52:90:
9f:a5:02:f0:2e:97:0c:6f:79:1d:8b:db:81:09:c3:
ca:ac:ca:db:ab:e1:cd:07:21:12:07:ab:b7:ad:af:
d3:c0:2c:7a:a5:7a:65:23:e2:44:ab:c0:f8:8b:13:
01:06:05:a6:cc:dc:71:e7:17:47:1f:e1:84:0d:94:
cd:d9:5e:bb:bf:12:67:7e:3d:b6:d8:c1:94:8a:b9:
d5:35:a6:48:0e:d2:e7:de:59:a2:6e:b2:ab:de:7b:
af:bd:59:e6:66:ce:fd:45:08:32:b8:86:b3:f1:c6:
d1:5e:37:e7:80:47:ed:f5:12:c2:b7:e8:5c:80:43:
8c:00:6d:9f:2d:77:e3:8d:9e:7c:07:37:4a:c1:36:
23:2f:7f:f3:d7:1f:79:b5:ff:53:e7:9b:7c:99:77:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:A4:C9:A1:14:CC:81:A3:F8:5C:5E:5C:A4:59:27:9C:CC:18:D2
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:bb:ba:c3:8b:af:eb:38:dd:22:ec:68:3d:04:80:04:08:
0a:3d:08:b6:9c:8f:88:0b:28:c6:00:cd:51:1f:29:b5:53:ec:
81:84:67:86:f6:14:d4:70:32:dd:65:14:70:2c:f4:a5:75:25:
59:d6:87:67:f5:5a:7e:7e:1a:b2:a6:a0:24:f7:91:0d:c2:e3:
ed:f8:2f:52:e8:1d:06:a5:ac:7c:9e:08:8b:c5:5f:fb:52:c2:
f8:2e:9e:b4:eb:57:23:61:b9:8e:ac:ed:a0:b1:d6:66:c5:dd:
b8:94:fb:20:93:ee:60:03:9d:f4:2a:b7:00:e4:eb:d2:2d:c2:
61:52:23:06:63:36:2f:40:9d:0a:60:53:9d:87:3d:90:f8:a6:
42:f0:56:0f:62:47:79:5e:65:b8:e4:0d:cb:bb:25:ba:76:08:
87:7a:ad:cb:60:b1:82:0c:39:8c:12:01:1b:b9:52:d9:64:74:
ca:38:7e:87:3c:37:ef:07:7a:f5:07:b2:33:28:75:6c:de:e2:
0e:e8:15:91:83:b8:92:bb:c2:da:5b:2d:91:03:1c:78:de:1f:
e7:0a:e1:e1:a0:9f:e0:72:42:c6:1c:4a:a7:a7:f4:40:ea:04:
ef:dd:47:44:86:99:b1:f4:13:2e:4e:e6:80:e1:8a:83:ff:78:
e5:e4:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:29:02 2024 by rpki-client on console-fra.rpki-client.org