Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: ZQBf/MRbukUVR4ar8oqHQw+FqzdX0ILJVO9Vlzu5flM=
Subject key identifier: 3A:27:FC:BE:46:C6:76:2C:31:EA:64:25:B1:80:1A:E6:01:F8:B6:37
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 01901F347E5B326F1159F74DFE9ADCAA09F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 0D17
Signing time: Sun 16 Jun 2024 04:00:52 +0000
Manifest this update: Sun 16 Jun 2024 04:00:52 +0000
Manifest next update: Mon 17 Jun 2024 04:00:52 +0000
Files and hashes: 1: FlDbEKehQsJSjo0s3jft5nTjGgA.roa (hash: 8omC+UNO6ZgyRaUkiBfOGc7v1TGPR0cK3QR8z3+gqyY=)
2: GD7mekuGefVvda4o_6FnPgGHbrc.roa (hash: RkCdUgqNHEIFaudhuJ2GwsHlY49UtrmqEUjYqLog5q0=)
3: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: JJX9EgrNzdnL/NTaP2VKoiSsq7Uk3T0Pyp8zp2/vRwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:7e:5b:32:6f:11:59:f7:4d:fe:9a:dc:aa:09:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Jun 16 04:00:52 2024 GMT
Not After : Jun 17 04:00:52 2024 GMT
Subject: CN=3a27fcbe46c6762c31ea6425b1801ae601f8b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:74:c7:db:25:13:2e:9b:54:20:64:30:14:
e4:41:35:e0:0e:28:f2:71:ee:9d:15:32:75:c7:4c:
7d:5f:b4:43:32:fe:97:a0:93:5c:37:00:02:13:75:
fb:10:72:a4:2f:65:e2:88:59:28:1c:96:09:e7:10:
11:de:d8:93:82:79:41:61:4b:ed:e0:da:08:d4:b8:
82:e2:54:aa:f9:64:87:ed:7f:2e:f4:16:5a:43:d1:
f9:e0:9b:7a:3b:a2:f9:60:dc:6e:dc:87:91:7a:98:
1c:1a:e2:5e:9e:f6:4c:92:70:42:d5:52:91:22:42:
17:52:59:2a:94:7e:3d:57:ab:4b:33:09:a8:f1:f0:
4b:83:3a:19:af:fc:df:dd:50:df:e3:f4:7a:4d:ea:
99:e1:16:71:3e:6f:a9:df:a7:aa:eb:9c:d8:d0:7b:
8b:67:96:39:a2:eb:09:10:90:96:97:9b:02:25:c3:
fa:cc:3d:c8:08:04:5a:28:64:bb:67:f5:87:da:a0:
39:93:cd:38:3d:79:b4:b9:d8:32:aa:de:f6:4c:fa:
db:b8:0e:b0:39:d5:dd:ac:8b:ca:07:07:1b:0c:82:
47:0b:be:46:da:d4:39:7d:54:73:ec:23:e7:b4:b3:
33:e7:75:66:48:43:80:4b:0f:f6:62:8e:b8:39:1e:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:FC:BE:46:C6:76:2C:31:EA:64:25:B1:80:1A:E6:01:F8:B6:37
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:40:46:da:0a:b3:ad:63:a1:af:60:c5:ec:52:9c:ea:87:55:
67:a8:c8:ec:4e:0a:5e:f1:c2:4c:c7:b9:c4:e9:3a:f8:c7:e9:
25:29:ea:bb:87:17:05:f6:f3:2b:c7:1a:31:8e:a6:6d:3b:41:
a9:8a:ee:b1:52:72:74:da:94:ce:9d:8c:d2:8e:72:25:82:69:
40:e5:81:83:ea:ff:ed:b0:61:8d:31:ae:47:d0:c7:aa:3a:22:
b3:33:eb:bb:79:64:c7:4e:28:81:5f:5a:36:e9:5d:95:08:22:
38:50:fc:79:f7:b7:7e:57:e0:7f:b0:f5:86:f2:cc:65:64:c5:
bd:e7:e0:99:08:1e:2f:e8:b4:a5:00:05:cb:ef:ad:18:7e:8c:
1a:1d:e0:b4:41:31:28:e9:91:18:4c:9a:fc:6d:e8:61:c0:0d:
04:76:c8:4a:c9:d9:0b:b0:37:5b:83:ca:47:31:77:c2:11:67:
cf:7a:f2:05:08:92:dd:15:98:c1:cf:ed:e7:7f:ae:a5:df:f9:
5e:68:0b:42:b6:f8:b1:35:4e:47:ca:92:d2:f0:b0:32:be:cf:
39:c5:7b:2a:2a:cf:67:2c:b5:75:26:49:c8:68:ba:ad:5f:95:
2f:77:40:b6:01:bb:d9:0c:3e:1f:e2:e2:60:21:1b:eb:41:39:
b6:e0:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:39:04 2024 by rpki-client on console-ams.rpki-client.org