Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: z041ymZ4Uh0AqL2Hi6jFSNkEKk5EMLX1K6f820PMMNE=
Subject key identifier: 85:B4:7B:74:EC:65:C3:72:1A:22:AC:0B:3F:63:D8:18:05:DE:11:CA
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 019040ADDA17D1C088FDD670F2A685135903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 098C
Signing time: Sat 22 Jun 2024 16:00:53 +0000
Manifest this update: Sat 22 Jun 2024 16:00:53 +0000
Manifest next update: Sun 23 Jun 2024 16:00:53 +0000
Files and hashes: 1: KICw7nNQh0jI5Mn3r7Y7-SXtxIw.roa (hash: CJOFLgYEHcQqmQcYh9JPMInPPA34y5FPu2DwwTOL1cM=)
2: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: 4H7ReCJsTQKqtev1yYDn4q6CCLKUuWCxdB/B56qQIYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ad:da:17:d1:c0:88:fd:d6:70:f2:a6:85:13:59:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Jun 22 16:00:53 2024 GMT
Not After : Jun 23 16:00:53 2024 GMT
Subject: CN=85b47b74ec65c3721a22ac0b3f63d81805de11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:d7:57:fc:2f:11:f5:87:59:55:66:77:aa:
45:19:e3:8a:60:43:65:50:1f:26:6e:3f:6b:3f:93:
17:1f:63:fc:ba:b6:f6:ea:2b:fa:73:13:a0:8a:82:
35:fd:df:ce:51:ce:20:02:bd:8e:eb:73:71:64:a6:
5d:92:a4:f4:6e:50:9f:15:59:7f:6f:4b:60:57:4d:
71:64:eb:24:09:70:94:3b:65:e4:e9:63:84:28:dd:
08:73:9a:79:80:f0:a2:61:99:a4:8a:61:23:e4:19:
48:64:bf:d2:e3:b7:62:f7:29:ac:8a:f2:dd:e5:a9:
ad:de:73:ca:2c:a8:c8:6a:ac:bf:41:a0:c0:ed:be:
bf:64:ce:0f:19:fa:76:12:97:df:c8:e0:06:a6:d7:
52:9c:31:e0:02:89:c3:f0:93:6c:08:6a:65:7b:34:
7a:a3:b9:52:8e:0f:0a:61:1a:39:2b:b9:d5:f2:2e:
fa:8c:4a:c3:5d:8d:50:b5:67:90:b3:30:26:c4:8c:
3f:72:a4:21:2a:11:28:89:69:9d:3b:fa:ef:74:06:
0b:c3:bc:45:52:a0:e6:59:c2:ec:a1:00:73:2c:44:
de:27:87:20:50:52:e2:93:c1:7a:c5:61:08:7e:43:
22:e1:f7:ad:ae:13:9f:99:cd:57:82:7f:89:a7:bd:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:7B:74:EC:65:C3:72:1A:22:AC:0B:3F:63:D8:18:05:DE:11:CA
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:56:66:da:dc:92:c5:1f:78:b8:78:42:44:f5:5f:6c:d5:
ff:a0:c5:45:4a:6d:46:32:b8:b9:93:45:f4:9a:5a:ce:86:ef:
7c:78:ac:8e:d8:d1:32:1d:6c:9a:7c:46:3f:88:68:4f:c4:ef:
85:9c:4f:9f:26:a6:e5:a8:3c:f6:ad:b1:57:04:82:79:02:0b:
5a:76:fb:37:0c:4f:e8:bd:f7:f0:0e:31:5e:5b:35:92:06:82:
18:8b:60:47:d3:5b:1d:43:ef:ab:22:e4:4a:63:67:e2:69:60:
9d:40:dd:72:85:62:ba:b9:3b:cf:ae:cc:35:f6:5c:a2:f4:b1:
43:c9:29:8e:30:94:71:0b:5b:61:87:8b:b6:8c:cb:09:9e:00:
fa:72:20:a2:05:d0:c2:b7:c9:76:d0:d4:71:ff:f4:79:17:f6:
5d:4f:28:16:35:f8:51:5a:9b:2e:6a:12:c3:ab:68:e0:19:86:
9c:95:f0:1d:4b:88:25:bd:ca:4e:64:74:f6:5d:d3:8c:8c:67:
7d:7f:b0:2e:0b:7e:8c:7f:d1:70:0d:b5:25:84:9f:73:8b:c3:
0d:09:11:56:43:a8:7b:0c:bd:48:2d:43:20:2c:53:6f:bd:f4:
8b:dd:1e:ef:f1:13:e8:f0:e1:2b:b0:32:5f:a4:86:eb:04:63:
df:84:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:41 2024 by rpki-client on console-fra.rpki-client.org