Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: Ndrtt47DLIes9bWk0VP7PfoO2LItsGGEhM2nUSntonA=
Subject key identifier: 60:F7:E5:25:4A:C6:0C:13:E7:5C:E9:A4:B6:D6:DF:CF:A7:0C:74:ED
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01903B50901C34CF37915D161C517934C9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 0F77
Signing time: Fri 21 Jun 2024 15:00:53 +0000
Manifest this update: Fri 21 Jun 2024 15:00:53 +0000
Manifest next update: Sat 22 Jun 2024 15:00:53 +0000
Files and hashes: 1: BR3K5fXUIgTyut830-9N_EQKnNY.roa (hash: zGHEAHhLEg2+uUJ0XbGBmSIUpysKCNc17ZlWAWzKrP0=)
2: N0iQVnjKj4L889HWEOwkVYuaN8M.roa (hash: gkQ7aufg4DkJgfMxsAd1tSW4mMs9ofPLN7ug6L1Ist0=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: 5jxdVWXnYR4R6haBo+usr+dbYz0ib/v7vq3aICj2Urs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:50:90:1c:34:cf:37:91:5d:16:1c:51:79:34:c9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jun 21 15:00:53 2024 GMT
Not After : Jun 22 15:00:53 2024 GMT
Subject: CN=60f7e5254ac60c13e75ce9a4b6d6dfcfa70c74ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:81:ff:2f:98:e6:cc:02:e5:81:28:f5:ed:
f5:b5:aa:d6:17:de:b6:50:95:d2:4d:93:ca:ad:a6:
ad:e4:bc:ab:92:a3:7e:97:ce:34:07:cc:d7:53:3c:
96:55:69:a4:71:09:ae:06:c0:9a:98:37:cc:2e:9d:
61:18:ff:4b:3f:21:b0:37:2e:b4:a4:28:0a:ab:df:
36:66:2d:17:ce:6a:05:09:54:62:ee:b0:52:c7:10:
01:c1:09:35:60:15:e9:9b:59:f7:49:94:ce:57:0b:
72:25:e5:ca:61:d6:fd:40:bb:b9:79:bf:d1:e6:4c:
f7:58:cc:2d:3e:f7:8b:a7:df:89:9e:be:57:22:1e:
ac:2d:cf:0c:6b:4c:74:9e:a0:a8:ac:b5:95:67:a1:
2d:15:40:43:5c:74:84:9f:16:0a:72:7e:66:77:23:
6c:4a:c2:20:10:e1:e4:3f:80:85:de:31:29:c9:0e:
f8:f4:fd:4c:1e:16:c2:47:a0:e6:83:32:03:dc:c9:
e3:81:5a:89:c3:79:98:29:93:50:6c:49:18:f2:76:
94:9c:b0:dc:59:c3:2d:23:62:a0:ae:42:54:e3:1e:
c2:76:e1:cb:ef:e2:8f:5b:28:da:c3:fc:9a:5d:55:
d7:c4:8e:14:03:27:48:55:dc:9b:08:6c:55:3e:76:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:E5:25:4A:C6:0C:13:E7:5C:E9:A4:B6:D6:DF:CF:A7:0C:74:ED
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0c:ef:6d:b9:ba:09:1e:68:fd:95:ad:ce:b0:a3:70:21:c7:
c2:5d:00:eb:0f:20:b6:2a:ca:c7:c9:b1:76:77:b8:2a:83:6a:
47:31:83:5e:ba:f8:f3:a4:07:6b:fb:e2:3c:9f:7b:7f:c3:fb:
0a:33:b4:e5:a5:b5:b6:8a:ed:59:a0:d3:2a:8a:3a:cb:3b:83:
18:15:34:94:27:5a:0e:d4:c5:70:6e:3f:41:06:b2:75:51:66:
f5:c2:a0:eb:df:7f:f6:b0:e8:47:b9:66:5b:95:2f:ae:ec:30:
d0:e5:93:02:2b:78:af:9d:c4:07:ca:9d:2e:11:c8:ef:45:89:
25:65:55:53:8a:10:3c:bb:3e:d4:9e:99:25:ab:63:d8:6c:77:
47:45:83:b7:b8:f5:db:01:54:ee:ed:ca:60:fa:01:f6:fb:18:
c2:9f:cb:27:70:c9:56:e0:4c:6e:2d:eb:7c:6d:bd:4d:48:94:
00:66:81:5a:c0:a9:df:b4:af:0a:b0:42:8f:25:08:c0:97:32:
8e:d5:ad:f3:ba:a2:eb:86:ad:2c:70:b2:d2:7e:ef:7c:70:92:
ba:06:ce:9d:3c:b4:79:f6:0a:6f:32:2d:b9:9f:51:ea:7b:28:
e3:9e:e7:60:de:ac:33:07:6f:fc:f0:bb:c4:b6:e6:6d:ac:27:
9d:6f:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:36:09 2024 by rpki-client on console-fra.rpki-client.org