Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
File: POLD7bU5f4Mu6P5qnuw8XkNicHc.mft (raw, json)
Hash identifier: Cr8aV8hGuHIcWuicwmnq3Y2eCX9jjEv4z6rqmj9Oduk=
Subject key identifier: E6:77:92:F7:9C:C3:9D:1C:2C:8B:90:2A:2C:4A:1B:58:BC:32:F6:58
Authority key identifier: 3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77
Certificate issuer: /CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
Certificate serial: 01903818A71A98EA13CFDAE24881F9F1240F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
Manifest number: 11D5
Signing time: Fri 21 Jun 2024 00:00:58 +0000
Manifest this update: Fri 21 Jun 2024 00:00:58 +0000
Manifest next update: Sat 22 Jun 2024 00:00:58 +0000
Files and hashes: 1: 1-do1qLz8HTjQT7OXfmacOYKjq-I.roa (hash: Fvz4+/8l8qQFUa0T0LCiTofizynOLz3quOhSwT/POaI=)
2: POLD7bU5f4Mu6P5qnuw8XkNicHc.crl (hash: jlWtj9BXSQnc2P0RgCotT5Uww6nq/MBTrtliKdBwfe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:18:a7:1a:98:ea:13:cf:da:e2:48:81:f9:f1:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
Validity
Not Before: Jun 21 00:00:58 2024 GMT
Not After : Jun 22 00:00:58 2024 GMT
Subject: CN=e67792f79cc39d1c2c8b902a2c4a1b58bc32f658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:12:b6:23:8e:64:52:e3:74:9c:83:e5:8e:
d7:3c:ec:b5:6b:d5:d1:a1:42:a4:16:7a:ea:99:10:
90:f9:aa:92:a5:eb:8b:d7:39:a9:56:21:91:cb:b7:
2c:db:75:93:f7:bd:1d:46:c3:b5:da:76:9c:58:ad:
96:57:45:cc:47:5f:6b:e4:2f:5a:f6:7d:f7:ef:aa:
8c:75:37:c4:eb:e1:a1:3b:38:77:54:39:e9:09:fe:
d5:58:37:06:3a:e0:e3:b0:b6:ce:92:d4:92:f9:02:
a6:7a:8a:a9:48:39:2b:e5:f5:44:00:e5:fb:17:2a:
39:3f:a8:7c:2d:02:8d:af:1d:51:14:5a:0e:ee:71:
5f:66:77:0f:ca:23:0a:92:c7:30:63:02:71:91:22:
3f:4d:c6:c2:d7:a6:71:60:cb:47:36:3f:eb:3d:4e:
34:4c:85:fe:d2:a9:b5:c9:27:c2:b5:dd:b2:34:0a:
18:80:75:02:30:f8:bb:9a:26:1a:6d:0c:51:aa:73:
b5:1f:e0:35:b9:88:b8:0e:9c:fb:6b:2f:76:ce:74:
b7:49:73:e0:5b:d5:95:38:98:02:98:1b:35:78:d9:
15:68:a4:7d:78:67:5b:c7:3c:90:8d:6d:2a:3b:82:
50:aa:9c:2c:98:5b:28:3e:5b:a9:47:d5:22:6b:89:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:92:F7:9C:C3:9D:1C:2C:8B:90:2A:2C:4A:1B:58:BC:32:F6:58
X509v3 Authority Key Identifier:
keyid:3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9f:3a:92:d5:c2:21:e4:ab:7e:b3:fe:09:aa:fc:ad:a4:4f:
1f:8c:2d:dc:ae:ca:43:ef:d5:58:ca:13:fc:29:27:7f:45:d4:
8a:9d:73:ec:b5:68:1f:8b:ce:f6:6a:00:cb:d6:7a:e3:f8:db:
80:a0:6d:44:02:22:21:d8:c9:9f:65:20:6a:c0:3a:8a:9b:03:
90:0f:d1:e1:23:84:02:8e:de:c4:0c:bc:73:29:62:fe:98:f4:
cf:79:98:3e:39:a8:ed:3d:e8:43:40:7b:f0:76:f8:5b:c4:da:
fc:76:35:2f:17:cf:ec:9e:85:f2:e7:f2:e2:d2:de:93:8b:95:
e9:da:6d:96:6c:a1:a0:a6:95:00:c8:d3:0f:25:87:63:8c:3e:
66:29:36:17:de:47:b6:a3:75:52:9f:b8:b0:45:7f:e3:b8:3b:
c5:7a:09:5f:f0:4d:40:34:44:56:bf:c0:bf:cb:0d:f9:7c:39:
a9:51:8b:d1:28:f7:ad:63:af:74:07:75:3d:b9:b9:c5:9f:47:
3b:6b:f7:9d:b0:02:7b:6d:0b:a4:9b:a5:50:a0:12:25:f0:ea:
a5:06:6c:90:65:2c:5a:25:9f:8c:36:fe:61:69:be:4c:04:28:
a4:c9:23:68:30:60:bb:2a:b5:a4:a3:c6:ab:66:d6:bc:fa:0e:
cc:5c:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:02:54 2024 by rpki-client on console-fra.rpki-client.org