Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: 9Y8BOVuD+ED+EUtpKg5nzrSda0ESyeqChLFFGCMjB3Q=
Subject key identifier: 93:19:BF:B9:57:3B:99:1E:26:CF:4C:BE:2E:29:DB:22:1A:F4:8F:92
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 01906D1B21480B94C7B5E6D6347320B405E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 11F0
Signing time: Mon 01 Jul 2024 07:03:32 +0000
Manifest this update: Mon 01 Jul 2024 07:03:32 +0000
Manifest next update: Tue 02 Jul 2024 07:03:32 +0000
Files and hashes: 1: Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa (hash: AYs54YuahU47W3ufWTPFdWolo1KxORage57OLCRBPok=)
2: sU57-kAFS3RBv5oa4nnSUQuKBpA.roa (hash: yYkIUdShAboEAMGur19e8gKBwgA6CPtPSAFxBOcGHrU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: n92G7dUNyKJ9zGPvzLwj0YH9BoeifXG/sL1omzMfg1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:1b:21:48:0b:94:c7:b5:e6:d6:34:73:20:b4:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jul 1 07:03:32 2024 GMT
Not After : Jul 2 07:03:32 2024 GMT
Subject: CN=9319bfb9573b991e26cf4cbe2e29db221af48f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:2a:c2:a1:ef:17:8b:96:c3:33:9e:df:fc:
2d:71:27:ae:6e:8e:db:06:3b:9c:50:86:d0:67:28:
53:7c:a9:eb:7c:0a:b3:1d:7b:c5:65:a3:c1:b8:20:
95:2e:83:97:36:6b:bd:93:27:75:5d:ac:a0:19:ec:
2f:d7:51:24:7a:bf:31:e9:d5:7a:86:ea:7f:30:0f:
97:b0:0c:54:21:94:a3:7b:63:dc:17:15:51:fa:7b:
d3:9f:cc:5e:92:af:f0:d6:94:fd:6c:1a:77:b4:c0:
c5:d8:ef:dd:70:82:52:66:f7:f5:d8:7b:23:16:d6:
a9:30:58:06:2e:7d:a5:3c:85:8b:ef:0c:d9:8e:70:
5f:3d:da:61:18:78:73:e7:c0:de:77:86:7b:3e:b4:
27:33:b7:ff:4c:e0:1a:f2:9e:15:39:af:74:7f:83:
e8:e7:c7:dd:8f:b3:a9:52:81:54:b6:89:d8:30:fa:
a5:de:bf:cb:c3:15:6c:43:34:74:2b:c1:48:09:ae:
a3:4b:8c:2e:c7:37:99:83:4e:08:53:96:46:71:ef:
5e:75:52:d4:b7:14:b3:38:cf:cb:be:77:e7:2f:75:
91:be:18:d2:a8:2b:0a:91:62:4c:05:17:a8:32:a8:
56:1b:a7:69:2a:2b:59:21:08:d2:26:ea:b8:70:6e:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:BF:B9:57:3B:99:1E:26:CF:4C:BE:2E:29:DB:22:1A:F4:8F:92
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:12:63:e2:9a:9c:e2:b7:25:29:9f:08:e4:8b:2d:fa:06:
90:9c:6b:7c:24:8a:ef:a0:df:05:c4:64:42:8b:97:8e:3b:ed:
84:8d:5d:94:b0:4e:e1:0a:36:a0:fe:c3:bb:39:06:35:3e:4d:
1e:a3:bc:f6:35:9b:67:96:1f:c5:aa:74:95:b6:6d:37:b3:9b:
35:a5:e4:90:6c:78:cf:42:0f:ea:55:b3:d9:12:dc:92:19:9d:
f1:35:04:2d:15:11:6d:dc:fc:6d:0e:a8:bc:f1:dc:5e:b9:0b:
40:5a:83:ec:10:4d:ff:f5:55:52:29:14:c2:8f:6a:13:6b:9c:
87:7d:3b:ed:75:ba:77:85:0a:91:80:ff:1d:ee:13:23:30:f1:
10:20:df:67:84:dd:58:fa:e0:fd:8d:2b:19:30:21:7a:f2:46:
48:5d:95:7c:c6:2d:46:7b:e8:0b:4d:8c:59:55:f0:07:44:d1:
ed:77:de:9c:25:ef:cf:16:30:6e:ab:94:ee:a4:1b:5d:5e:b9:
59:0e:bc:ec:83:a6:60:89:fd:e4:f2:05:60:88:1e:3f:6b:9b:
a6:4a:b2:61:97:bd:c6:50:15:d9:dd:90:46:d3:a3:54:ef:0c:
c3:ee:15:31:cd:bc:2e:67:c4:67:05:f7:d0:5a:64:8a:59:30:
68:a2:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:47:48 2024 by rpki-client on console-fra.rpki-client.org