Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
File: h1_IAkLS5p69DyK148xFdZSukKw.mft (raw, json)
Hash identifier: tamHunP6ctwrPmZSsvOXATlU9u/7sGvBRItRA5yhYOs=
Subject key identifier: 96:18:C0:9C:94:BA:D0:DF:B9:33:F3:17:98:C9:9F:55:1D:B4:E1:06
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 01904453AC4489A6D5352B217F96F67A50C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
Manifest number: 0722
Signing time: Sun 23 Jun 2024 09:00:52 +0000
Manifest this update: Sun 23 Jun 2024 09:00:52 +0000
Manifest next update: Mon 24 Jun 2024 09:00:52 +0000
Files and hashes: 1: 5rfCFk_bmdbujk_vtGklU-YAldI.roa (hash: 9YVUlrxmzjtmpqAr+WzkHZkrS/i6WbwXEvP2BUCBS0Q=)
2: YacFjvCwQm9rBsjgh3bLcuMU5mI.roa (hash: a6+9tnseMlBAWUH6LElCMFnpZN4bHojZG1uuSiXjUmo=)
3: h1_IAkLS5p69DyK148xFdZSukKw.crl (hash: qp9Fxv5UeL5m8ax263nbNMWJvR5BrIdY0KJOkja83DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:53:ac:44:89:a6:d5:35:2b:21:7f:96:f6:7a:50:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Jun 23 09:00:52 2024 GMT
Not After : Jun 24 09:00:52 2024 GMT
Subject: CN=9618c09c94bad0dfb933f31798c99f551db4e106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:2c:f7:59:9c:65:c0:b3:ff:aa:2b:66:27:
8a:43:1b:1b:4c:0c:6d:34:bf:87:90:25:81:6a:69:
ce:3a:cc:06:0e:c5:cc:6a:fb:fb:93:8a:df:52:dd:
97:5c:d8:e4:6a:7f:34:86:c4:44:77:ab:dc:17:96:
76:e7:40:27:a7:16:6a:8c:d7:99:51:6b:59:a4:38:
9f:ab:88:49:3e:58:2c:cf:f5:4b:0d:d7:d6:ff:21:
1f:e9:cd:19:35:e7:5d:88:3e:78:af:a6:d8:c2:3d:
1f:a7:d7:0d:83:99:30:55:ee:18:c6:b5:4a:18:3a:
d4:a7:42:ca:2d:3c:c7:3b:eb:85:0b:26:60:e9:b0:
a8:86:45:25:64:71:42:13:3f:2c:29:f8:96:f8:b4:
df:a5:5d:2a:a8:7b:79:7d:db:b4:1d:84:12:c9:63:
02:5e:4a:a1:8a:89:1c:fe:87:66:7e:4a:7e:f6:f6:
7a:cd:c7:ce:52:72:0a:3e:fe:c9:d7:f8:05:c3:ec:
b0:84:73:85:91:a9:57:3f:bd:e0:c8:ca:53:85:33:
aa:e9:1a:da:10:11:b5:43:ed:17:97:62:c3:07:64:
d4:3c:34:63:b2:4b:3b:fe:3a:b3:e2:83:68:59:88:
1f:b4:0f:cb:84:3b:67:58:c8:6a:77:81:e6:e3:af:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:C0:9C:94:BA:D0:DF:B9:33:F3:17:98:C9:9F:55:1D:B4:E1:06
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:af:11:bf:c8:7d:aa:2e:89:04:0e:b4:40:48:5e:68:5c:
f7:c3:8f:98:f6:68:51:b2:2b:ae:c9:4b:bf:3a:04:9a:ab:4b:
01:3a:b3:6b:b2:e7:13:f4:d3:ed:c7:7f:fa:ba:b2:df:de:56:
d3:ab:ea:1a:38:3d:2e:68:91:8b:5d:01:0b:f2:67:16:82:89:
b3:4c:e0:19:50:de:6c:0b:28:95:2d:77:db:5a:a2:46:08:d8:
b3:99:be:41:53:92:85:c6:2f:ab:f7:c6:bc:e2:29:01:63:b0:
6e:0a:d4:7d:b1:60:66:89:8e:88:a1:20:fc:c5:c3:fa:61:f4:
7c:fb:bf:eb:87:4c:ce:92:f3:38:1d:d5:b1:81:2f:6d:8b:54:
7a:a7:ed:a2:73:0a:fd:93:0a:6b:a8:07:26:ca:17:d8:de:19:
ce:05:96:a7:c7:39:ea:1b:83:2e:14:21:fa:06:6f:98:7a:38:
d8:eb:51:6d:1d:25:9b:a6:7c:49:26:e1:27:93:47:49:09:82:
89:b9:8c:2f:04:c5:68:30:93:22:44:df:fe:e5:7e:e0:a6:61:
5c:43:c2:fd:7e:ac:ae:30:eb:55:31:12:9e:4c:cf:f3:a2:61:
a3:80:80:72:b9:8e:f2:1d:58:ec:80:c3:08:4e:60:93:c2:99:
42:a4:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:09:19 2024 by rpki-client on console-fra.rpki-client.org