Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: mljx7+Vu2dlbgC1PrJXtjQb3mLobUUZOCVLvxg+pmHY=
Subject key identifier: 32:C5:7F:00:90:CB:29:B8:FA:EE:F9:1B:33:D1:96:5A:F3:A3:76:8F
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 01901DEDAA5662040A034DBFCF932BF5BABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 0FA3
Signing time: Sat 15 Jun 2024 22:03:53 +0000
Manifest this update: Sat 15 Jun 2024 22:03:53 +0000
Manifest next update: Sun 16 Jun 2024 22:03:53 +0000
Files and hashes: 1: ChFzTQyDe2rUWR_lesDMTvBCVo8.roa (hash: /iLoKMTx/x26nDfvAxNEhaHYzWIGiByKXdPIpUTwebg=)
2: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: v1Gi9TeOYr9+g/EkiRdtYbyAjB2Ybprf1pTXfm9VCrs=)
3: l9d0U-tpIe0mGZQbfqNZ-M4aoVs.roa (hash: 2eUTk6VBBs9hR1T7rEa3G3hXQ1mh4+U5kzPyLu9h5yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:aa:56:62:04:0a:03:4d:bf:cf:93:2b:f5:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Jun 15 22:03:53 2024 GMT
Not After : Jun 16 22:03:53 2024 GMT
Subject: CN=32c57f0090cb29b8faeef91b33d1965af3a3768f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:c7:27:3b:2c:7f:57:37:e6:a0:12:1a:70:
c4:06:2d:e7:eb:92:dc:37:0d:c9:ac:84:cd:e4:80:
f7:96:f5:49:f9:f9:6c:46:d6:62:ab:71:0a:af:f3:
96:ad:38:d9:ac:ce:82:c5:84:b9:1a:0b:51:ce:ea:
36:b2:82:fd:c6:5d:34:dd:b8:0f:cb:fe:27:f7:8d:
45:d4:8c:cb:8a:15:02:83:17:3e:96:cf:10:80:63:
5f:1d:d5:cb:e4:96:48:12:8e:ef:ac:3c:a8:44:6b:
22:c3:6a:00:3a:b7:a7:36:fc:3c:8d:e5:40:91:fe:
a0:ff:9c:34:63:6f:64:f0:b1:2e:5d:69:5f:8d:3b:
47:18:60:63:bf:08:27:f7:97:d7:bc:d5:8a:35:a3:
0d:af:cb:e5:92:13:55:3a:e6:c5:8b:51:cc:aa:04:
dd:2d:79:fe:fe:c3:df:34:26:93:56:c5:f9:59:31:
bd:23:5a:ca:00:5e:8e:2a:02:8d:7c:53:92:4e:92:
18:63:78:77:dc:58:be:a8:9d:33:1a:cf:0e:d2:93:
37:2c:07:8e:fa:53:ee:2c:7f:93:9f:bd:65:e5:f8:
f1:93:11:c4:68:46:48:41:67:86:50:48:e1:0c:12:
e4:01:39:2a:d8:61:85:36:db:4e:ca:13:18:06:6c:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:7F:00:90:CB:29:B8:FA:EE:F9:1B:33:D1:96:5A:F3:A3:76:8F
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:72:dd:36:44:7d:9b:43:b5:26:2e:f1:90:14:98:21:65:
10:77:81:41:1d:f0:36:c3:0b:a6:cb:98:b6:a3:5a:b4:8b:1c:
94:79:ef:3b:01:3b:1d:27:71:ce:8f:2d:17:f2:f2:94:29:fd:
2c:ff:04:3d:88:b0:ff:18:d7:68:94:b9:0f:3d:4c:bb:aa:74:
4b:ce:21:54:55:2d:18:d0:2a:df:ca:9a:2f:8e:8d:50:1f:94:
93:26:88:12:f8:c6:c1:5a:78:47:bb:d7:37:f7:0e:df:60:88:
49:01:03:c5:6d:58:f3:74:b0:92:f8:c8:86:7f:11:7d:8f:f8:
34:b9:ff:7f:04:74:cf:46:d3:5c:35:94:d1:97:1b:d2:a1:cb:
db:fa:f1:d7:72:b1:39:77:a0:76:1d:85:ae:5e:9b:2f:e4:8d:
8f:ac:ce:9c:f8:c6:ed:0e:45:a4:99:c1:9f:55:28:8d:67:69:
81:e4:f3:09:66:b0:af:4c:9d:70:79:50:40:5c:e1:86:2e:1b:
4d:60:0b:61:10:cf:35:1a:55:41:8d:55:1f:bb:1a:21:fc:af:
71:d5:8d:9b:85:18:ad:e9:13:3f:a1:0b:91:5b:f5:e7:f4:93:
c2:a5:27:70:cb:2c:e8:da:04:0a:14:2a:84:b1:9c:ae:43:3a:
75:0a:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:18 2024 by rpki-client on console-fra.rpki-client.org