Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: V+ksz5ecbYKkHutPQAsc5odRNvQeyvKiJbks6i+FoSA=
Subject key identifier: 69:93:AC:35:76:AC:EF:90:3A:E3:66:12:0C:77:49:01:61:36:9C:61
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 01901EFDBF3D776CD6602B0B9B697549B651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0BAC
Signing time: Sun 16 Jun 2024 03:01:04 +0000
Manifest this update: Sun 16 Jun 2024 03:01:04 +0000
Manifest next update: Mon 17 Jun 2024 03:01:04 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: bGb2dBCX5VoJVCWwFQkpNorLL3QMEyJaWBXhHH0O3ac=)
2: Qpt_WE7u7qPmZQvhid6Wdj14J-Q.roa (hash: +cZhAWwD80FbGGP1sJdoVLy5zcq2Q13OMjQP9BRud4A=)
3: WsXo6KzMdkKbb0SJeF67fmXx1UY.roa (hash: Uqr8i/vkCMRK6A1aMGnGd681unOZfqOxTg7fohwjogE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:fd:bf:3d:77:6c:d6:60:2b:0b:9b:69:75:49:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jun 16 03:01:04 2024 GMT
Not After : Jun 17 03:01:04 2024 GMT
Subject: CN=6993ac3576acef903ae366120c77490161369c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:91:0d:dc:2d:f0:56:a0:8b:84:04:d4:4a:5b:
cd:92:28:c4:6f:13:b8:4e:e1:0c:e8:e6:e6:d5:6e:
06:70:2d:81:c7:76:0e:31:88:e5:35:95:67:ff:18:
cb:ca:0a:5a:80:ff:bb:30:cc:91:c2:99:bf:c7:5c:
e9:81:7b:1e:8c:64:25:bc:b5:9f:f0:92:e9:4d:7a:
39:72:c0:4e:a8:ac:01:94:3c:66:e6:65:9e:60:b3:
ff:04:d5:3a:9c:af:72:98:15:5f:5d:3e:2c:b6:4f:
03:af:31:bf:af:aa:9f:75:e1:03:ed:56:98:65:ae:
fc:36:52:d2:cf:95:ce:d7:0e:f0:39:68:fd:54:5e:
5b:2b:a2:2e:04:87:05:11:ae:e0:44:b2:7e:12:bc:
ea:da:16:f1:65:e4:e6:4f:bd:09:9e:ca:5b:16:1e:
f6:76:c1:e8:96:df:7c:a4:04:6c:ea:d1:5e:d8:8f:
ac:a0:f1:09:cb:f3:56:1f:15:dd:b9:f8:23:46:53:
90:a1:09:61:a2:b5:4b:46:de:ff:53:9d:c9:40:42:
02:41:5c:37:53:b3:fb:a7:73:2c:40:1d:59:d3:34:
77:86:44:00:ef:00:db:7e:f4:6e:d8:e3:64:13:a0:
e6:3e:15:9f:ac:56:16:92:6d:4e:5f:40:03:e6:83:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:AC:35:76:AC:EF:90:3A:E3:66:12:0C:77:49:01:61:36:9C:61
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:77:f4:82:29:39:7b:ac:54:7e:f1:58:33:26:ca:34:c1:1f:
1c:d9:38:1b:89:57:58:ae:16:2f:c7:d2:39:be:fd:de:69:f6:
57:92:04:39:0c:db:6e:99:46:48:ce:41:c9:bf:95:ab:d9:d2:
cd:13:2d:20:f0:4f:60:b7:19:c8:74:c8:59:d0:f5:74:ff:6d:
b6:f0:50:ca:16:50:fe:48:cf:42:68:9d:6e:3f:2a:76:58:02:
1a:e4:ea:8e:01:e5:06:fe:09:30:0d:42:64:68:5b:b8:f8:45:
9e:bc:70:6d:cd:07:84:8f:54:d6:8a:bc:f3:23:ab:a3:7a:3c:
be:e2:b1:a5:9b:93:c8:bc:96:68:09:61:73:fb:7f:99:ad:89:
32:1f:b5:c8:9d:90:57:2c:80:e8:5c:94:29:4d:4e:8f:ec:71:
94:cf:77:f8:f2:86:38:8a:d0:3c:24:9f:78:b3:fa:31:89:54:
dc:9f:fe:c3:01:44:2d:1a:a6:fc:49:0d:c6:11:1a:b3:ee:8a:
e0:99:ec:25:ec:6d:9d:56:3c:51:3d:45:e3:17:e3:41:b2:2d:
8b:15:5d:ad:68:fd:bb:e0:a5:fb:5a:13:dd:11:49:14:46:52:
05:07:7a:a1:d4:5c:24:5e:21:a4:19:fe:ee:9c:2a:98:c5:ec:
8c:a4:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 10:58:23 2024 by rpki-client on console-fra.rpki-client.org