Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: rftKpnNZqXYevzu5DnL5riVmfBNXZFHQ/ST7SX03DGU=
Subject key identifier: 7E:3D:D6:62:85:A1:83:75:75:49:19:7E:5E:C0:EF:8F:74:2D:FB:0E
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01901EC6A4417D6A3F6C20F06AF2EB4E298E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 118B
Signing time: Sun 16 Jun 2024 02:00:52 +0000
Manifest this update: Sun 16 Jun 2024 02:00:52 +0000
Manifest next update: Mon 17 Jun 2024 02:00:52 +0000
Files and hashes: 1: AaukAvTMr-fEtm3UPs_ob2rgQkY.roa (hash: QU5OeN2cRmSMs/IAni/TzIUSTmbbzt5UWLmPGmWKeo0=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: +qzvwKdZMNyZri1aKEX4Cc2vjTT4zwjODwFOb2l0KEc=)
3: ayi9NE0BDJVFeNnxu0P3XU3ANGI.roa (hash: B6BkZH831YZxkclfkR9Ask6ZlIZ1rkmIeblIOMH+NQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:a4:41:7d:6a:3f:6c:20:f0:6a:f2:eb:4e:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Jun 16 02:00:52 2024 GMT
Not After : Jun 17 02:00:52 2024 GMT
Subject: CN=7e3dd66285a183757549197e5ec0ef8f742dfb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:e4:97:2e:fc:70:fd:bf:0f:02:12:9c:98:
93:46:76:98:b5:d6:03:d8:04:1e:88:20:73:ff:55:
11:0c:59:27:0e:bf:43:b3:01:56:af:e1:e6:c6:1f:
a8:71:47:5e:90:7e:74:1a:ed:4b:49:74:c5:2f:9d:
f6:8c:a6:fe:c1:66:41:3b:ca:84:af:72:40:f6:e2:
9d:98:ab:69:a0:ef:b8:ea:dd:eb:d8:35:87:95:26:
89:96:75:aa:69:e9:bc:06:41:91:7c:63:d3:b1:6a:
d8:7a:fb:46:18:04:6a:f1:8a:5b:15:82:e2:b2:1d:
3b:d9:bc:6b:67:1e:26:43:87:34:ad:56:16:05:2b:
82:d7:4c:0e:ad:2c:2b:67:47:dc:4a:ca:35:63:61:
7b:87:4d:b5:d9:9f:6e:5a:6a:ad:04:21:de:27:78:
b4:dc:4d:1c:d4:0e:c9:85:b4:aa:ec:a1:0b:4b:c9:
dc:a5:7a:e3:6a:9f:60:cc:82:af:26:e4:30:30:f7:
b3:cd:a0:c3:c9:65:54:72:c8:e6:a7:81:cb:15:19:
5b:73:2a:76:78:07:e2:68:84:e6:ac:5b:31:8d:3f:
ec:4c:b9:fa:7f:87:c1:fd:01:41:80:2b:51:57:61:
02:3e:72:4f:d9:13:be:2d:d6:90:29:9d:8e:81:26:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:D6:62:85:A1:83:75:75:49:19:7E:5E:C0:EF:8F:74:2D:FB:0E
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:88:b9:6c:af:ec:89:17:a4:09:fc:b0:b7:f6:d8:a2:9c:c7:
11:20:83:bd:88:e8:77:46:54:ec:0b:53:41:4c:a5:9b:0a:bc:
16:20:4c:f0:81:ac:77:c7:76:72:9b:5b:fa:19:27:82:22:ac:
df:d8:c9:60:9b:a1:fe:68:8f:d9:2e:08:b5:3d:bf:bb:ef:eb:
56:16:a8:32:96:e0:4a:61:46:c5:13:cc:c4:92:bb:ab:27:08:
1e:54:11:c9:7d:5a:06:15:b7:91:4c:4a:4d:e1:23:73:0b:ad:
12:15:6f:69:2f:5a:94:8e:95:89:8c:36:7f:e2:8c:bb:6b:8e:
7d:54:6f:08:7c:7a:d9:63:d5:9a:9e:b5:14:1e:38:01:b7:91:
ca:16:e0:60:9f:91:45:1e:a4:ec:83:9a:08:63:a9:ac:40:3d:
61:ec:00:c4:22:1d:0b:82:0e:18:13:c1:11:4b:43:77:f8:4d:
cb:f9:96:e8:77:c0:0e:08:64:22:1c:35:25:4d:f1:f4:b3:15:
7c:ea:c7:68:6b:d9:15:7a:c2:22:e2:ea:5c:6b:26:5a:c4:22:
70:84:70:86:20:96:ef:1e:23:30:b3:49:4a:ab:4c:24:e9:89:
3a:eb:57:20:4d:df:52:ea:36:b3:99:63:19:1c:1c:17:c5:64:
d1:f7:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:29 2024 by rpki-client on console-fra.rpki-client.org