Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: 2/GjrXsCJ6IbARzH8RLmKBkQhawIelQi8ED3hMUnsRQ=
Subject key identifier: 4B:89:4D:63:E7:00:3C:6C:43:F7:A4:3A:8D:7E:43:9A:EC:3E:99:45
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 01901EC6E25F43CB89B7FB80203B0FDD7D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 11C6
Signing time: Sun 16 Jun 2024 02:01:08 +0000
Manifest this update: Sun 16 Jun 2024 02:01:08 +0000
Manifest next update: Mon 17 Jun 2024 02:01:08 +0000
Files and hashes: 1: 9mviu7JST6AIvEKX9gHv8L_wXHY.roa (hash: sNtGVmRruhOkuzd1VXvV+YvrxaMCplBAyvla2w7+4Vc=)
2: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: 7L0G8LdXll+rydNNmkOQ1WJa5oJ+mGy914OzbRFw5dY=)
3: ePVmukbUOzwmxyyVm5H20Via1fw.roa (hash: vJQk+gAZ6WQzTda/ofKWEYfW4iOsF6E/xJtNrCeY8Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:e2:5f:43:cb:89:b7:fb:80:20:3b:0f:dd:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jun 16 02:01:08 2024 GMT
Not After : Jun 17 02:01:08 2024 GMT
Subject: CN=4b894d63e7003c6c43f7a43a8d7e439aec3e9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:5d:9d:f5:0a:b9:cc:cb:ed:83:77:8f:1b:
8e:b4:03:d7:d1:8b:0b:ff:b7:95:0b:c7:2a:c2:e6:
0f:41:4e:e0:2f:e9:33:e9:ae:95:5b:3e:f2:f8:1f:
84:e5:4e:3e:61:e2:25:90:54:ba:40:6d:a4:a6:be:
4f:dc:bc:0e:13:3b:06:cc:a6:e7:7b:32:56:1a:06:
c1:b8:1c:1b:ba:aa:3c:96:88:d0:f4:2d:c6:3d:f1:
12:81:25:24:e7:2e:7e:45:8f:79:87:f4:d6:bb:b2:
e3:2f:26:e8:6a:62:2b:6c:70:ef:21:d2:a5:61:06:
a7:b1:3f:e1:cb:2f:8c:4c:9c:76:b3:11:db:bc:36:
f5:a7:e1:41:c8:9d:ff:81:d8:53:a4:f6:42:66:d9:
56:61:6f:9f:e1:ed:90:f4:10:aa:f0:28:17:44:bc:
7f:87:7a:79:ab:71:78:2d:fd:41:ea:b3:67:49:2b:
29:c6:1b:b0:6d:d8:f4:d7:2d:60:0c:73:03:c7:d4:
91:c4:d2:1e:33:e6:91:5e:16:b2:e8:7a:36:d8:38:
bd:47:f4:7c:8a:52:2e:50:80:6c:fb:33:c7:f7:5b:
9d:58:0e:98:c4:d6:16:2c:f9:04:05:73:8b:72:a1:
f4:e1:2e:ca:98:c7:48:b0:b7:5e:79:6a:79:19:90:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:4D:63:E7:00:3C:6C:43:F7:A4:3A:8D:7E:43:9A:EC:3E:99:45
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8d:13:d9:8c:33:69:30:7a:49:1b:f5:ee:21:20:81:ca:6f:
35:af:e6:24:fd:ff:90:ca:f1:b4:6b:7c:5b:8e:22:8c:ec:bf:
81:73:78:99:74:41:a8:c0:7f:0c:32:96:c2:33:29:0e:e0:58:
ac:1a:24:95:10:6e:98:10:50:98:5f:6f:cf:af:46:51:06:3e:
7f:c7:74:85:d0:c3:6e:8a:f3:a3:86:16:3e:c8:ab:21:38:7f:
09:d4:38:d2:f7:dd:c9:d8:f9:40:46:a1:e9:f2:7b:5d:bb:13:
e5:7d:31:bb:74:ed:14:e8:a6:b8:d4:f5:79:67:ae:82:57:7c:
f7:b4:3f:de:2d:ab:11:2d:49:b5:ea:9b:3e:68:85:54:db:9a:
27:0f:fe:92:66:ab:da:c2:b4:4f:d7:11:58:17:ad:25:24:b9:
78:05:1c:6e:37:45:a3:8f:b7:51:04:f0:0e:8b:7f:8c:84:8d:
16:4a:74:60:50:50:09:e4:8a:02:c9:8f:50:27:fc:bd:b9:df:
a5:4b:e6:8d:45:d0:1c:22:f9:80:ba:43:82:fc:bc:1a:93:eb:
c8:25:db:2d:3e:7c:bc:e9:0c:0a:bd:a9:9d:65:14:2e:48:2b:
2f:6c:b0:23:24:49:fd:0d:02:67:d4:33:c8:4d:bd:d4:fb:1f:
fc:50:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:56:27 2024 by rpki-client on console-ams.rpki-client.org