Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: NCGSIYqpSbk1Av/TZ9KgYYtapUHQSRnSxz0+5nq98vM=
Subject key identifier: E5:2F:A4:A1:7C:8C:39:DF:9A:83:5E:72:F4:1A:2E:A4:83:62:AF:ED
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 0190459DA0F451E0FCB30F6E5274E33A0F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 05C7
Signing time: Sun 23 Jun 2024 15:01:16 +0000
Manifest this update: Sun 23 Jun 2024 15:01:16 +0000
Manifest next update: Mon 24 Jun 2024 15:01:16 +0000
Files and hashes: 1: 1-Jb5pMTHdjzL90lRBnW2HRKuSZo.roa (hash: oH6BwNZQb6essdSZtGHFA6V3yGgGc7hucBUAPamSYdU=)
2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: vvoLzV6LX6eMaWPJ3gmjkW1HfrHCdgug8BaCBgFlE1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:a0:f4:51:e0:fc:b3:0f:6e:52:74:e3:3a:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jun 23 15:01:16 2024 GMT
Not After : Jun 24 15:01:16 2024 GMT
Subject: CN=e52fa4a17c8c39df9a835e72f41a2ea48362afed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:c1:df:fc:72:dc:f2:ae:c4:d3:cd:1a:54:
ad:cf:4c:c0:bf:e8:0b:1a:b4:90:fa:e0:77:b7:d5:
74:bf:11:8a:5f:e7:41:16:7d:bc:b3:23:54:8b:09:
d6:93:72:ab:08:e9:bb:6a:5d:66:34:5e:8b:a7:9b:
4a:ee:32:d1:ac:79:f9:4e:af:39:c9:b7:ab:26:f1:
af:78:ba:9d:94:15:28:c8:d2:6c:01:46:eb:66:a8:
46:eb:7a:db:7e:2c:17:78:8d:4e:b1:6b:46:0b:f1:
e7:d2:41:1d:53:4e:cf:f3:93:bd:be:01:b5:11:3e:
23:2e:b0:f8:92:ef:b4:67:07:33:92:da:97:13:54:
13:b0:5f:95:df:e7:93:de:a7:30:62:12:74:f0:fe:
72:77:cf:0e:51:46:33:0e:f8:48:84:05:d1:64:9c:
6c:61:2d:a6:47:87:97:e9:1a:88:89:84:4e:38:bd:
e7:9a:27:81:3a:d0:4d:b0:ee:a5:c2:68:34:87:8f:
59:68:93:b3:c7:a8:37:76:58:aa:44:d2:be:38:13:
4d:9b:2b:00:f1:87:41:76:cd:3f:41:3e:e9:9e:75:
4a:2d:17:e3:77:a9:6b:de:10:85:22:db:cf:14:23:
38:92:e5:11:58:0c:74:63:e9:20:eb:f2:e8:1c:63:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:A4:A1:7C:8C:39:DF:9A:83:5E:72:F4:1A:2E:A4:83:62:AF:ED
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:d2:89:65:35:e4:e6:de:41:8d:8a:dd:67:ef:be:e4:da:
ce:c9:b0:cf:4d:e9:75:22:e0:3b:03:e6:2f:7e:ad:13:e7:f3:
69:6d:34:d0:e8:27:40:61:e7:e5:54:af:26:4e:0b:58:87:07:
96:ea:55:ca:65:ee:92:b3:ad:7a:4f:d5:63:34:dc:0d:e6:fc:
41:9f:55:e7:0c:57:54:ad:e0:29:07:e2:9c:e9:57:78:50:d5:
04:f4:b3:08:9c:d5:5d:bd:a9:41:be:2f:98:10:72:58:2c:10:
ba:f2:f6:e3:25:55:70:d8:08:27:35:10:ec:c5:00:33:dd:71:
31:a1:19:83:80:c9:d7:8d:a2:af:77:18:c4:e0:be:c8:84:c7:
d3:e3:7d:3a:84:e5:96:45:c4:21:d5:cd:cd:56:6d:98:74:77:
54:1e:ef:ea:7d:3c:92:62:e2:97:88:4c:c8:a9:09:b5:9b:88:
88:56:13:37:c5:1a:ac:2a:c3:e2:c2:00:37:e9:ef:82:06:41:
dd:1d:79:2e:4e:ba:66:37:be:f2:25:ac:6e:63:9a:6f:4a:28:
97:3b:70:0d:ec:35:a6:04:a2:89:55:80:b5:0d:f1:63:2d:fd:
8d:e4:10:72:a0:b0:3e:9d:97:e4:4d:99:23:96:c6:4c:ac:f8:
69:06:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:50:42 2024 by rpki-client on console-fra.rpki-client.org