Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: aXB+wgJ567SfTcwvn5NVauOoQC/AKQeRfqxHLVRJiu0=
Subject key identifier: FA:11:0E:10:13:56:72:C7:5A:F5:7F:6D:8C:66:10:CC:2A:B6:C0:AA
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 0190459D4522EA66611569BBEC8CEDB7844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 11DB
Signing time: Sun 23 Jun 2024 15:00:53 +0000
Manifest this update: Sun 23 Jun 2024 15:00:53 +0000
Manifest next update: Mon 24 Jun 2024 15:00:53 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: f5Odzo/wtTpQyLCpWPwY94inkiToVyRXO0FiUw0c17E=)
2: VloUCkknW5gRuMIPHVyAXxnenZU.roa (hash: g0RsiXVJiCl1vS+GHZyzZ1XnK2sywF/Hd7AR0FRHxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:45:22:ea:66:61:15:69:bb:ec:8c:ed:b7:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Jun 23 15:00:53 2024 GMT
Not After : Jun 24 15:00:53 2024 GMT
Subject: CN=fa110e10135672c75af57f6d8c6610cc2ab6c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:c0:6e:78:29:9f:6e:ff:f9:72:c7:60:84:
7e:0b:f7:ce:e8:36:50:f8:5b:fb:d8:e7:74:fd:cf:
35:b0:58:df:44:8d:80:c1:b4:0a:ae:72:0a:6b:a0:
cc:97:9a:f0:82:4a:0d:ef:a5:19:12:12:e5:7c:f6:
56:b7:60:21:b9:7a:ff:ea:b1:af:8c:f0:b4:a8:04:
1a:51:b6:4c:d0:31:29:ec:2d:5c:d6:18:81:fd:2f:
5d:2c:5c:89:4b:b3:de:3d:94:57:71:3d:80:9d:db:
0d:eb:ec:01:1c:79:27:ea:a4:2b:72:3a:a1:36:75:
a7:17:92:09:0a:8e:2e:01:5a:87:11:18:a2:71:b4:
65:40:19:65:a9:f1:3e:2f:fe:8c:2c:36:cd:db:fd:
7b:6d:2b:ae:e1:4c:34:ca:6a:49:5a:d6:f2:25:c2:
07:66:22:86:bb:5e:c9:12:3e:39:4e:81:54:37:c2:
41:cc:f6:9f:37:1b:77:37:22:11:fd:66:d6:15:fb:
9f:4a:e7:31:76:e0:d1:14:59:43:bc:2d:9f:05:b9:
92:80:5c:c3:10:73:22:fa:ca:16:51:09:0a:84:81:
b2:91:4a:c9:5b:c9:50:67:45:01:ce:f3:93:01:9b:
55:c3:39:51:ca:61:62:69:f8:66:e2:fd:0c:7c:44:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:0E:10:13:56:72:C7:5A:F5:7F:6D:8C:66:10:CC:2A:B6:C0:AA
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8b:80:13:3a:a3:3c:0f:3c:d2:3f:15:b6:45:0f:94:03:bc:
ae:73:63:b5:6b:1d:c4:bb:72:0e:7a:34:ab:0c:e1:c2:fa:1f:
bc:53:e8:e1:fa:27:04:15:ae:e5:ed:b7:67:25:43:9b:33:7e:
5a:56:30:83:dd:d6:ab:fa:f0:78:91:f1:0b:9a:06:c5:2f:9f:
11:47:0d:03:f5:69:9c:b5:45:40:8d:61:73:8a:1f:4b:ee:79:
91:7c:31:be:63:c8:0f:d6:d4:4a:55:7e:c8:06:cd:0b:11:d4:
6e:df:6d:a9:5b:11:4e:2d:3a:a0:b1:60:4c:89:62:67:86:32:
39:3d:16:18:53:85:6b:b8:6d:1e:93:fd:19:ae:86:5b:dc:f9:
88:42:eb:ea:cf:28:af:29:8d:f1:4b:7d:f5:46:c1:ae:ff:09:
d1:33:28:9a:4f:79:2e:14:af:53:1a:be:d8:f7:32:e1:91:d0:
85:9c:05:76:a9:56:a6:72:28:27:fc:ea:55:b6:29:8c:b6:8b:
b7:e4:f4:94:cd:41:82:88:16:45:6d:d6:fc:9e:e7:7b:4f:5b:
d2:00:74:45:13:d8:20:b7:71:23:79:62:47:03:1f:1a:8e:96:
32:16:9c:80:01:da:4c:85:13:c5:99:72:f9:1a:5d:36:16:0d:
1e:60:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:42 2024 by rpki-client on console-fra.rpki-client.org