Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: K0eXbUnJXgKNhGgc8QlcRIIiAgdj9v5GwcoGeNYS76g=
Subject key identifier: 8C:E6:6F:ED:13:1E:B4:5D:0F:9D:92:7E:01:4F:CC:7A:DD:3D:F0:7D
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019238BA445CC764BE6B53A8F75D656C8F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 06BF
Signing time: Sat 28 Sep 2024 13:03:04 +0000
Manifest this update: Sat 28 Sep 2024 13:03:04 +0000
Manifest next update: Sun 29 Sep 2024 13:03:04 +0000
Files and hashes: 1: 9cLJ1GZkThvmUJU5HlMFeNYv_lc.roa (hash: p+9vB0YV4X5fW43F8A+nvO8u/l+NrIiGnqDnOR/e1xg=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: DslrhATHimCoHvPFsO91fZ2eiOEWQyEkH213bcWM+Io=)
3: mqB1uWV4FRPivd-giPowINYBT_o.roa (hash: lYWj8PP9NeZEQD9cklGMg+6kBo6SonTUii41cQLDbqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:ba:44:5c:c7:64:be:6b:53:a8:f7:5d:65:6c:8f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Sep 28 13:03:04 2024 GMT
Not After : Sep 29 13:03:04 2024 GMT
Subject: CN=8ce66fed131eb45d0f9d927e014fcc7add3df07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:cc:eb:18:10:78:db:38:50:18:d1:99:25:
74:2f:04:d7:0d:c1:a3:5f:c9:8c:0d:3b:99:8f:9e:
f7:1c:d3:63:e2:84:07:ee:2c:96:1e:3f:66:50:d5:
91:6c:84:2f:a3:64:c3:1f:d5:a4:76:5d:ed:92:0b:
4f:48:b0:c9:a3:29:cb:e2:f8:78:5c:3c:54:09:f1:
9d:83:84:a0:f5:d4:ac:dc:b8:2b:d0:64:1c:de:47:
e1:73:32:85:ad:53:c8:bf:ed:74:ce:da:7f:7b:64:
50:64:af:e3:a4:85:b1:01:be:6c:b6:4d:42:f7:36:
84:97:91:50:2e:85:00:6f:17:87:8a:07:a3:c6:38:
fa:6e:b7:d2:26:d3:46:16:d6:e0:a0:18:03:4c:a8:
35:40:26:fb:1b:93:fd:33:82:a1:9c:55:b4:76:cb:
b8:e2:dc:de:5e:c1:b8:dc:1b:b6:7e:4f:9d:10:31:
7d:71:f5:18:bb:f3:32:0b:f7:82:66:28:c4:8c:28:
9c:e8:e1:17:08:8a:45:50:73:ff:76:a4:25:94:6c:
df:2d:16:c5:83:74:f5:2d:ca:f2:5b:bf:a7:54:b9:
5c:74:f5:df:44:72:ce:93:43:12:96:71:98:32:0a:
22:d4:cb:f9:ba:29:29:50:b4:a6:83:c1:49:48:11:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:6F:ED:13:1E:B4:5D:0F:9D:92:7E:01:4F:CC:7A:DD:3D:F0:7D
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d5:70:92:ac:e3:15:87:7a:41:58:76:3b:a6:f2:bd:27:d6:
86:49:0c:cc:5e:c2:0b:3c:0a:16:23:00:a7:af:a2:b8:d5:34:
0e:e8:fc:b7:04:e2:20:d4:f1:eb:6d:79:6c:17:e7:20:a9:51:
d2:a7:5d:d6:59:b6:e7:a3:c3:9c:7d:af:3d:40:70:3c:a1:e8:
e7:9e:95:e8:25:9f:79:50:15:44:fc:0b:42:87:87:a4:97:16:
8b:9c:c7:1e:17:65:2b:8f:f5:ed:81:1d:da:db:2b:b6:3f:3b:
f1:01:d8:b9:05:9b:7d:37:fa:c4:a5:0d:b4:28:b4:2e:ef:b5:
0c:0a:5c:56:c1:cb:83:04:91:c0:fe:66:70:80:2e:fc:9d:40:
c9:92:7e:fd:b0:67:c2:81:84:06:59:2c:0f:cd:e3:bc:41:c8:
f7:40:da:7e:c5:52:5f:7c:d7:b6:8d:b9:6c:aa:42:9c:52:69:
30:10:4a:49:4c:78:b6:d6:23:47:b5:bb:7e:61:64:00:82:99:
49:92:96:47:30:50:9f:5c:27:27:3d:d6:c6:95:a6:91:79:1d:
27:f6:4e:54:59:5b:b6:1b:4c:1b:2e:ce:bd:4f:e1:d8:32:71:
e0:85:ff:a6:db:cf:9f:45:a3:d5:a7:6d:cf:53:c3:19:b4:ed:
04:59:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:39:07 2024 by rpki-client on console-ams.rpki-client.org