Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: /TtgpCra4hDt3nfZnFvgo4UJ0dDIt1Yj9Jl3EE26Ikw=
Subject key identifier: DF:10:F4:51:A4:E2:90:CE:D7:B7:EB:50:1E:E4:48:FF:4A:7F:B9:ED
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 01903773AF7FEB5A14F98F51EB974AAB389F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 11D5
Signing time: Thu 20 Jun 2024 21:00:46 +0000
Manifest this update: Thu 20 Jun 2024 21:00:46 +0000
Manifest next update: Fri 21 Jun 2024 21:00:46 +0000
Files and hashes: 1: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: sVMi38p+e/ZUDMNYhQwtCnAGi3XAUTVWe8BmiI21asI=)
2: dDElJ7RP68mS5t8HoYIZBMYw-wY.roa (hash: vz4BlLEhjEvPgAgOz6lLj/CQtWd/qqZ6q6j+JUNFfe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:73:af:7f:eb:5a:14:f9:8f:51:eb:97:4a:ab:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Jun 20 21:00:46 2024 GMT
Not After : Jun 21 21:00:46 2024 GMT
Subject: CN=df10f451a4e290ced7b7eb501ee448ff4a7fb9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:76:5b:2f:d7:b3:99:2d:7f:7d:5b:13:69:
81:d4:16:31:71:24:8d:7e:79:bf:c8:c5:75:d5:ab:
72:30:fc:5f:95:23:c4:c3:4c:8b:98:77:34:ea:15:
b1:71:38:a7:2c:8a:3b:4d:91:86:af:26:76:6f:19:
31:f2:1d:ba:d7:51:d9:75:f4:49:25:cb:85:80:77:
39:28:80:45:e0:32:df:70:33:bb:09:df:2d:33:e2:
45:63:13:40:dd:93:11:e9:82:33:57:39:db:83:8b:
99:92:6e:ef:97:2b:54:80:31:68:81:44:7f:db:c3:
d2:bd:2c:0c:2b:04:08:82:92:3b:38:8c:e0:bc:12:
a0:1c:65:af:71:83:58:c5:75:5d:2a:5a:39:0e:6f:
24:78:1c:68:04:30:96:7d:94:bb:ad:59:63:fb:ca:
4e:1e:4d:bf:b4:fd:c9:a7:a8:e8:24:f9:b2:c0:1a:
61:c1:9d:29:30:3f:f0:a6:20:8e:99:6d:34:4d:3e:
cc:c4:16:c6:e2:61:9e:b7:5f:d9:3d:b3:36:0b:74:
b8:ff:ae:e9:13:bd:77:15:47:7c:85:79:b1:df:6f:
f9:a9:4a:1e:0b:19:e6:28:c8:d6:f1:98:80:86:76:
19:5e:0f:25:bd:50:64:c1:04:c5:fb:f9:6d:a8:7b:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:F4:51:A4:E2:90:CE:D7:B7:EB:50:1E:E4:48:FF:4A:7F:B9:ED
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:1d:b6:2f:dc:f7:7b:10:e0:a2:7e:6f:fa:cc:d4:2f:6e:
b7:e7:d3:8f:0f:7f:3e:32:5c:0b:28:60:c1:3a:fb:59:1b:5a:
51:ac:20:cb:10:67:ff:88:58:64:3d:70:d1:21:6e:cd:51:68:
fa:31:76:46:41:4d:4c:49:6d:95:fe:48:2f:ab:e6:88:e1:cf:
22:d7:dc:86:5e:d8:cc:8b:01:af:a1:4c:89:f7:ca:f1:ef:36:
cc:30:e4:03:55:8e:de:f9:5c:35:2b:e5:8c:1e:11:11:b8:6b:
d3:3a:38:7b:0a:43:c6:69:d7:17:15:5b:6b:1b:a9:b3:8c:91:
ca:3e:a2:bd:23:a3:a1:c8:90:66:d5:42:25:66:b6:f5:f6:ef:
46:c3:0d:3b:ba:f0:9f:87:d0:3a:59:b3:9c:85:4d:d5:9e:e2:
0a:cc:7d:37:c7:76:f1:63:3b:64:8c:18:29:73:35:6b:b7:14:
14:06:6d:8d:91:1a:3c:f2:64:65:14:96:72:9c:25:6b:a4:0b:
dc:e3:7a:78:b3:1b:5d:26:b8:12:40:a1:c7:36:41:fb:eb:ef:
83:da:1f:80:ae:0c:42:43:d5:39:0d:8e:ec:73:f1:7e:fc:23:
1f:b4:1a:ef:6a:fc:be:5a:80:0f:89:b8:6a:c3:eb:17:2c:d2:
1d:63:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:17:11 2024 by rpki-client on console-fra.rpki-client.org