Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: 9zwWkN44laSIy5txwyW9cN1ZssGQmJcXB/laJkg/LMM=
Subject key identifier: 11:00:C1:FA:4C:72:19:E1:6A:8B:A5:64:D1:DE:AA:77:43:97:9D:AC
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01901CA150D4B7F8345C4C7905B30C234B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 16:00:52 +0000
Manifest this update: Sat 15 Jun 2024 16:00:52 +0000
Manifest next update: Sun 16 Jun 2024 16:00:52 +0000
Files and hashes: 1: LAadCzCXSmxGBLyHFXGlsMUBllM.roa (hash: RHDggl9DR/TGEbVzBsCtbqYC4E3yIR/ilKZ0EW+A5vo=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: VUOEfvv/ZaVxLKYxdtXSb2oWgFyJGmwVvM/+jFxtGFM=)
3: vDZZPCTttl9LWfQmyI9VapvAKMs.roa (hash: EoSdisfC1jx5m/ary8JcT5Qo55zihyFh/7rGsO9z9sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a1:50:d4:b7:f8:34:5c:4c:79:05:b3:0c:23:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jun 15 16:00:52 2024 GMT
Not After : Jun 16 16:00:52 2024 GMT
Subject: CN=1100c1fa4c7219e16a8ba564d1deaa7743979dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:97:fd:50:6a:7c:19:58:76:b2:15:15:dd:
ae:af:19:13:bd:d2:3e:92:d0:37:d6:e7:71:c6:b5:
0a:f4:26:b2:0a:dd:95:07:18:46:97:44:93:30:e2:
b4:5b:4b:06:80:72:ff:bf:e7:21:2b:d8:ed:49:04:
44:2b:77:ed:08:c1:de:a7:8a:fd:b1:4b:db:e6:f1:
fc:ae:c9:56:8e:fa:3b:8e:64:0a:d6:e3:fe:d2:51:
7c:e2:26:b3:90:b8:f8:05:94:6f:a7:3b:34:81:b7:
32:a7:b8:bf:3a:99:84:07:74:f6:aa:8d:b1:cc:2c:
95:5e:d9:d1:ae:6f:e9:87:2c:ce:c9:da:e0:7e:81:
84:dd:f2:36:ea:f1:99:0e:eb:e9:18:a8:62:2b:07:
53:04:d5:10:65:d1:76:30:1b:71:3e:71:4b:ef:e9:
8a:dc:fa:46:65:45:29:78:ab:c6:e4:e8:b2:43:c0:
c8:fb:50:b1:9c:01:71:c9:7f:22:4b:2b:ac:6e:8e:
a3:14:9c:5f:30:ca:58:0b:30:8b:f7:a5:d6:ab:57:
1c:04:db:de:3a:99:8a:17:ad:27:53:03:41:41:9f:
a4:2c:57:e0:be:fb:1b:4f:56:b4:dd:8a:38:47:5a:
b5:95:d2:d9:53:c7:30:ce:7d:bf:73:f4:e3:6e:df:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:C1:FA:4C:72:19:E1:6A:8B:A5:64:D1:DE:AA:77:43:97:9D:AC
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:92:59:84:54:f2:a4:5c:f1:30:6e:b7:63:c5:81:16:56:98:
7b:0f:52:f2:43:d4:a4:b8:00:d6:34:9a:4b:4c:ce:fb:b6:9f:
40:d1:34:55:54:b5:22:39:e4:5b:a6:45:b4:c6:12:9c:e0:a5:
56:03:2b:f4:cd:04:1a:94:d0:9a:f1:dc:b7:63:83:50:ad:89:
b9:11:d2:6d:f3:32:ec:ac:f7:f5:8c:e4:93:c8:86:56:c5:04:
0f:24:fa:da:cc:49:fe:d0:70:4c:72:64:ce:bb:ad:8c:f4:9b:
63:7d:12:60:bc:4f:13:73:3f:cb:a0:3e:6c:8c:a6:5b:04:cf:
5d:42:f7:56:fb:69:ec:21:82:53:ef:e8:8d:bb:8e:1b:e9:9b:
25:74:ab:69:ee:de:63:02:87:31:f7:64:03:0f:e5:b8:cc:47:
ca:4b:c7:83:d5:3b:93:2f:be:3b:f0:d1:bf:78:1d:c3:95:36:
ae:ac:f6:85:8d:7d:69:8b:91:6c:24:a4:36:54:93:57:f2:17:
1a:e8:f0:e0:20:3f:ff:2c:c2:87:11:08:12:6c:6e:7f:5d:7d:
47:7d:00:ce:ed:57:4d:8a:bd:5a:04:62:f4:f4:e1:39:6b:9f:
26:de:9f:9c:22:78:75:e6:1a:a6:3a:40:94:ac:5d:10:50:c2:
88:92:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:58:52 2024 by rpki-client on console-fra.rpki-client.org