Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: CzBekeDFF2Yr9yCq9R7Jtbe7LMyA6d6TxoN3mS/sOJk=
Subject key identifier: 03:EA:4A:3F:8B:62:22:9B:5F:CF:19:EB:75:B7:30:04:CB:F8:57:AE
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 01906E2B2ADCFBA42482A4935CC2E0595F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: BB
Signing time: Mon 01 Jul 2024 12:00:40 +0000
Manifest this update: Mon 01 Jul 2024 12:00:40 +0000
Manifest next update: Tue 02 Jul 2024 12:00:40 +0000
Files and hashes: 1: B9MKzww61IiyLbuTlJd6o9PMRoE.roa (hash: DkkLksIxIpo43cd1h1AMlFWfpw2/0Josq6kmWIvqO+Q=)
2: agVBmwt7loS49wM34uw9T0GVv2M.roa (hash: c80THa0PpAycZVx4hKydHtestQjlOlsmC1aMWkVpEcs=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: ivvrYdrtdL0gRNpgK1u8+Nd4YkPGrkxf+axmjI87Gc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:2b:2a:dc:fb:a4:24:82:a4:93:5c:c2:e0:59:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Jul 1 12:00:40 2024 GMT
Not After : Jul 2 12:00:40 2024 GMT
Subject: CN=03ea4a3f8b62229b5fcf19eb75b73004cbf857ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:d1:cb:98:09:7d:0e:f5:c8:dc:dd:73:95:
65:7c:67:c0:4b:33:dc:98:7a:9d:fb:2c:48:9a:c7:
3b:42:c3:75:a7:43:55:1a:e7:42:1b:ae:4d:fd:ef:
31:25:f7:ec:4c:80:0d:4c:9f:d6:8b:4c:da:ab:22:
a0:fd:15:e1:d5:20:c9:ff:bc:72:26:c7:c8:07:12:
85:97:32:68:fe:a4:81:c4:08:fe:de:c8:f2:18:eb:
46:dc:8b:0a:1b:4f:bc:bb:cb:03:7a:d6:36:36:1a:
e7:7b:be:07:4f:67:74:96:90:ea:9c:35:da:f4:dc:
98:e8:13:5d:ba:bf:3d:be:c5:29:ce:03:64:e6:fc:
f9:82:bb:e4:be:52:59:2d:c5:01:d8:06:86:56:61:
43:3d:0c:23:c4:76:d9:a4:4c:57:cc:b7:b9:84:a1:
b2:92:4b:20:ce:8c:ba:de:96:4b:30:b1:6e:50:0c:
0e:b9:9d:ca:f5:29:6c:36:23:c1:75:2e:36:fc:59:
29:b8:1b:00:0f:ee:16:f4:65:ee:a8:8c:f4:14:e0:
85:f5:0c:9a:25:85:23:41:b4:81:2f:eb:38:b0:12:
ea:15:e8:7f:27:07:07:46:c7:e1:bc:d8:1c:56:f9:
f9:21:37:0f:a1:4e:42:4c:51:a3:86:4a:34:0a:4b:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:4A:3F:8B:62:22:9B:5F:CF:19:EB:75:B7:30:04:CB:F8:57:AE
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e8:ee:17:39:4c:a1:c8:34:13:13:91:d3:d8:d3:7c:90:d7:
84:16:b2:78:e3:e6:c5:31:4a:5e:48:c9:d9:b0:a4:7d:79:98:
89:59:ce:60:40:f0:a4:3a:eb:29:84:88:61:ef:7f:7e:1c:19:
4b:8c:2c:51:13:58:a8:50:99:4e:6b:50:d5:8a:cc:af:84:d7:
2a:21:fe:b3:b0:1d:1c:f7:cc:e3:b9:1e:ca:b8:5a:3b:d2:92:
60:07:62:1d:73:3f:e3:33:ff:c0:08:bd:4d:d3:66:65:95:69:
13:2d:05:e0:91:4e:50:46:c4:f6:eb:b6:e0:f8:bb:2f:d9:e7:
f8:cd:49:82:d2:5d:71:6c:5f:88:18:c8:da:ec:ed:3c:6f:7a:
44:ab:c9:8e:20:32:b8:04:50:44:10:5d:09:ae:1a:16:f1:bb:
ea:da:c9:17:11:93:6f:03:02:b8:ce:f6:9e:e8:b9:4b:7c:e8:
25:8c:24:49:0c:3e:6d:51:04:5d:55:41:c5:94:d4:80:b2:27:
03:44:6b:86:ff:d5:14:04:bd:1a:4f:f9:0a:69:bb:d2:5f:d7:
4c:b0:6f:8c:90:84:4b:b6:45:cc:e0:95:56:c3:79:5b:9e:3f:
30:46:8f:32:8b:a4:45:3c:b4:9f:53:15:68:f9:7d:6c:68:5b:
30:8b:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:14:25 2024 by rpki-client on console-fra.rpki-client.org