Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: mzm/J40pIPeKE2vZ0TqXDJQ2+swLKMLZuvc1yL2YCC8=
Subject key identifier: 01:A4:23:8F:8F:DC:84:55:07:CF:8B:8E:F5:E3:5F:66:7E:12:55:A3
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 018F8936D98DDC458C7AE7D7FFDE2E84D18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 09A6
Signing time: Sat 18 May 2024 01:00:24 +0000
Manifest this update: Sat 18 May 2024 01:00:24 +0000
Manifest next update: Sun 19 May 2024 01:00:24 +0000
Files and hashes: 1: Am-JTOTVUfUlVjj7YWkmV1cgCcU.roa (hash: vWSA3yoXKlwxZklnLvOhixkEd/mLHxgs1OO1D5BH/UE=)
2: okHGe2tEUdAq6EWzMEQJSAcgCUw.roa (hash: Lomk9S59psJjTd4fiLSeS+yPGt4K2YDMCol4PCFIm20=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: MxKhaulJ+uEdX56Uys/ZKcLT1rvie6WpN4s6OBLwCPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:89:36:d9:8d:dc:45:8c:7a:e7:d7:ff:de:2e:84:d1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: May 18 01:00:24 2024 GMT
Not After : May 19 01:00:24 2024 GMT
Subject: CN=01a4238f8fdc845507cf8b8ef5e35f667e1255a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:78:ab:32:19:ef:f2:a3:b1:fb:7d:7c:ce:
d5:dd:99:7f:5d:43:79:ee:ef:b8:65:39:25:16:e0:
94:f4:7d:69:22:a7:22:bd:1b:eb:e5:da:a2:93:3e:
0e:f5:e9:56:ab:4c:c1:08:f6:de:ce:6b:8e:82:38:
a4:80:40:85:1d:1c:52:bd:14:c0:6d:4b:c8:33:84:
61:45:1f:67:e6:ac:01:7c:c3:29:10:8f:fa:7c:e7:
8b:6d:10:8b:4f:83:81:3b:38:bc:a9:e6:c1:68:71:
f0:fe:95:a9:71:b8:0e:97:8f:1b:09:45:ee:f9:1d:
62:fe:c8:38:5c:4b:a7:2c:54:cb:39:b7:94:45:33:
69:ab:19:59:5b:64:c2:9a:de:9c:36:f7:62:45:79:
e4:57:db:f6:18:ec:5b:31:31:d4:03:ac:df:49:78:
01:4f:1e:0f:8b:6c:37:27:d6:57:41:ce:75:60:cf:
fe:c9:3e:7b:1d:a1:4b:d4:9b:eb:0b:25:03:f4:83:
56:27:a0:cc:df:d0:73:90:2c:11:af:e4:1c:a7:fb:
46:50:85:41:9d:76:b7:de:4c:4d:31:fb:1f:31:17:
2b:16:c0:c5:ce:41:7c:5f:8a:57:6c:f2:43:e8:c1:
6e:72:6c:2a:89:72:3b:85:d6:7b:04:c1:f7:b8:87:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A4:23:8F:8F:DC:84:55:07:CF:8B:8E:F5:E3:5F:66:7E:12:55:A3
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:81:77:d7:40:2a:2c:82:d8:2f:dd:bc:43:42:d1:74:a0:
f8:5d:e1:47:25:83:cb:2f:93:9c:a1:56:94:d6:94:ee:29:26:
96:e6:97:db:ad:00:0e:bd:8e:be:af:df:85:f7:a5:5c:5e:59:
46:58:9e:9f:77:02:2e:23:34:3f:1c:02:1d:9c:4f:62:7b:45:
0d:8e:72:2a:f4:06:dc:77:10:de:eb:cc:05:c0:7b:57:f0:87:
66:da:4e:d6:60:ed:b7:1e:7c:a4:01:4a:1a:c9:c3:ad:0d:77:
e2:56:7b:fb:a6:5b:8c:8c:b8:c5:fd:a5:ee:be:9d:42:1b:76:
e7:a0:64:b7:f5:4d:a8:39:00:1d:5a:f2:6f:bc:4c:26:2a:55:
09:27:83:8b:a7:e4:fd:00:d0:ae:21:0b:07:2c:1b:f2:4c:bc:
95:7e:c9:2d:62:73:0b:4b:f1:36:13:36:46:07:ae:e5:e2:a9:
20:e7:4f:a3:8d:3b:4e:5f:d6:22:a1:50:40:1b:c3:63:c2:4c:
00:65:94:d5:93:1f:9f:62:fa:8e:26:32:64:fe:ae:ea:af:96:
6c:5c:42:9b:00:a9:f9:52:45:6a:91:31:f7:a7:f7:69:8e:4c:
7a:d5:10:1f:41:a6:f3:9a:0d:5d:b4:96:e3:7f:f6:b5:01:17:
77:10:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:02:23 2024 by rpki-client on console-ams.rpki-client.org