Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json)
Hash identifier: B/pkxns9R1MZcbwInUccbuAVShU1lXq0EnXnJRziits=
Subject key identifier: 91:33:0C:89:07:73:B2:EE:CD:CD:17:0F:0F:DE:D5:22:C6:3F:05:EA
Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442
Certificate serial: 01901F350A660281FAC3045718EF64586B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
Manifest number: 11CB
Signing time: Sun 16 Jun 2024 04:01:28 +0000
Manifest this update: Sun 16 Jun 2024 04:01:28 +0000
Manifest next update: Mon 17 Jun 2024 04:01:28 +0000
Files and hashes: 1: OK6c6QaepeNGoOGafZTPA-qwMfk.roa (hash: 6lP8xsrXaWDut+dHBr333teIOV2mx6u5gcvbkyrhI+M=)
2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: houdHio8iPnGPS0khYSVXRbAYR79zVBWlS2F7/jmqoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:35:0a:66:02:81:fa:c3:04:57:18:ef:64:58:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442
Validity
Not Before: Jun 16 04:01:28 2024 GMT
Not After : Jun 17 04:01:28 2024 GMT
Subject: CN=91330c890773b2eecdcd170f0fded522c63f05ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:27:1f:3f:05:40:6d:fd:8b:e1:41:be:a6:
84:e5:0d:ad:fe:91:30:cf:aa:89:18:b3:77:41:fd:
c1:35:20:c2:11:67:b8:2d:70:cd:8d:fb:1f:6f:eb:
49:81:18:be:19:6f:41:5d:9d:3a:1c:63:e0:f5:10:
f1:2f:3c:db:bc:93:2e:ca:f9:e9:ee:7b:97:2b:41:
9c:ad:c7:6f:ac:d0:48:9b:cd:2d:53:a5:33:7f:1c:
46:df:44:fa:47:99:6f:da:64:55:ec:99:6d:c7:34:
da:ba:c9:b7:9c:5e:d0:9c:ea:01:d8:a5:9c:57:16:
8d:cb:1f:32:fb:56:d6:82:70:dd:78:a9:16:57:cb:
fe:6d:e1:9e:5d:34:64:dc:e9:11:24:84:50:63:1f:
6f:81:96:d8:63:90:81:8f:74:ca:b4:cb:3c:25:39:
01:39:25:a4:81:b0:71:5e:98:3c:60:81:a1:8a:1d:
08:f4:56:8d:03:e0:87:66:c3:81:10:5d:a8:1f:bd:
ed:09:58:c7:08:61:2e:5a:91:15:1f:eb:ab:58:29:
0b:b5:af:e1:23:a5:e6:c5:f5:b6:73:5f:ab:19:ae:
4f:5f:40:b4:25:d0:d5:62:24:9c:6b:a5:c3:c1:64:
f9:8c:a4:02:6e:97:82:9d:c0:4f:18:76:d0:83:d3:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:0C:89:07:73:B2:EE:CD:CD:17:0F:0F:DE:D5:22:C6:3F:05:EA
X509v3 Authority Key Identifier:
keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:52:49:df:1d:43:f0:bb:60:be:9b:15:52:a9:2a:1c:7a:2d:
cc:05:36:bb:b6:8f:e9:6f:d0:8a:0d:f9:3e:3c:a5:6f:ec:f1:
b4:36:9f:cd:52:a7:80:b6:11:c6:30:08:74:a2:b3:82:cc:3d:
f7:36:21:d0:2c:c6:c1:5b:44:e6:e0:f5:03:13:f7:e0:2e:2c:
ee:90:35:d1:ca:28:92:84:dc:7a:23:0a:c7:dc:88:a1:87:a5:
0f:11:81:87:4e:37:47:35:6a:80:fd:9f:0c:d6:f9:32:19:cd:
a2:79:cf:dc:45:a7:8f:35:14:1a:d2:bf:a0:0f:c8:8e:9d:e3:
b4:92:ce:77:77:b2:0c:e5:3f:ad:3f:c8:e1:ce:3a:c2:a5:bb:
4c:e6:fc:cd:94:32:b5:ac:49:12:93:51:ad:01:01:ce:db:5f:
ad:8d:79:cf:2d:92:48:5d:f4:f7:a5:e8:b2:67:bd:72:97:29:
03:6e:7a:53:b5:09:70:68:ea:1c:81:1b:b8:d2:89:9b:1c:84:
03:9b:1f:e8:14:3a:43:55:48:7c:1c:cd:0e:7e:5e:1d:72:38:
39:af:6d:9c:e9:1f:f0:ad:1d:f6:52:38:a6:c3:16:e2:ec:ab:
93:f1:2f:ab:f6:c7:78:fc:da:47:c1:3c:ca:c4:1e:ab:ec:0b:
5b:5c:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:50:38 2024 by rpki-client on console-fra.rpki-client.org