Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: sD/qf9nHoeiWqtQwT9W/2EngTNR0jRLGOHckrzwMIZ4=
Subject key identifier: 15:E4:37:9D:7D:42:C0:37:62:EA:DB:D2:F8:8F:52:36:63:D0:57:02
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01903519F63F15ED64D834B00EBF962E0259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 08B3
Signing time: Thu 20 Jun 2024 10:03:32 +0000
Manifest this update: Thu 20 Jun 2024 10:03:32 +0000
Manifest next update: Fri 21 Jun 2024 10:03:32 +0000
Files and hashes: 1: cd5VJMtoq6FnrI2-ahBgc7dpgo4.roa (hash: SxKn16Xi8KP+QQCqPTNxFWgBx56Jc9IC8rDflnyMECw=)
2: kWhDWYQ-96bavKdEOzI3CKe6Zm4.roa (hash: 6oYd2kjdbrfT4ovAkkTbHGkZKfAZyTbdts5n2qHWFjY=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: kBpQ5+nGsaLqzQIyzc8gDGcZdkEnog8toeEniS6R8Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:19:f6:3f:15:ed:64:d8:34:b0:0e:bf:96:2e:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jun 20 10:03:32 2024 GMT
Not After : Jun 21 10:03:32 2024 GMT
Subject: CN=15e4379d7d42c03762eadbd2f88f523663d05702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:6c:59:38:3a:7c:04:fe:64:85:9f:dd:c4:
45:de:43:a5:bc:24:6b:cd:35:29:3a:9c:e1:54:4c:
41:34:c1:67:59:44:a8:73:38:de:a2:14:c9:c0:e2:
aa:63:8a:68:5f:ba:cb:81:26:c5:28:13:47:2c:8b:
f4:05:e1:94:37:d0:99:0f:18:89:e0:fb:bc:3c:1f:
e2:09:24:99:1f:6d:cc:cd:28:a9:15:74:42:36:de:
d9:ae:78:6c:e1:33:d1:d2:64:1a:cb:cd:03:ac:74:
e2:93:94:6c:f5:49:09:d8:4b:2c:07:5a:a3:95:7a:
a6:98:0d:3c:b4:58:39:a5:8d:44:96:ac:d8:9f:69:
25:37:c3:a4:b5:4d:34:23:7d:db:e5:be:29:70:96:
7c:2d:62:6f:c1:94:87:af:5c:d5:25:9b:9b:19:25:
52:09:3d:54:38:4e:07:8a:2b:a4:37:58:7f:10:75:
ea:e9:2d:e1:be:25:4c:96:e4:35:cd:c8:e4:6d:97:
70:6d:94:1e:be:97:f3:68:39:22:b1:51:a8:08:94:
9d:e5:3a:77:5a:3e:10:0d:6e:71:0f:11:a2:de:85:
f8:6b:18:91:20:4a:f1:7c:d6:54:d6:8f:6d:ff:11:
8e:b0:58:d3:99:b8:d0:55:96:84:86:94:03:da:cb:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:37:9D:7D:42:C0:37:62:EA:DB:D2:F8:8F:52:36:63:D0:57:02
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:58:86:5a:1e:33:36:30:58:cf:62:8a:bf:28:ff:90:3a:f3:
9f:ca:dc:2d:1c:b0:fb:c9:37:20:b2:14:72:23:0d:b3:fe:3d:
f6:3d:c1:30:ce:b9:20:fc:98:a5:15:13:20:74:a8:98:7f:b9:
eb:88:c4:94:a6:4e:58:b1:0c:31:39:8f:0a:5f:c3:41:3c:b3:
91:dc:d9:a7:19:d7:9f:de:28:9a:e7:87:dd:c5:b6:a1:45:ac:
6e:ce:8d:ac:fb:62:2a:8f:0f:2b:2d:9d:ab:0a:fd:ff:74:c0:
2a:bb:c3:95:5a:87:37:4a:0f:88:2b:32:76:24:b0:23:e4:71:
4f:c6:ed:9f:03:b8:f8:7c:78:b4:9e:1e:69:49:c3:24:4c:18:
17:2c:e8:e8:5d:41:4e:ea:35:7a:a8:a7:b4:bc:fa:83:c1:29:
cf:b7:4d:3b:66:ba:a4:1c:41:04:69:7f:ea:dc:49:f9:d0:35:
9f:b4:60:4d:9f:95:38:22:d2:05:fd:aa:20:bd:83:7b:98:37:
56:56:49:17:fc:bb:16:f1:b3:6a:14:fa:ae:1b:3a:3b:35:fc:
2d:f8:c2:68:ee:48:28:13:88:d5:45:ff:dd:22:a6:51:74:00:
b1:75:e1:0d:13:02:42:dc:67:bb:73:cc:20:fe:28:20:c7:c5:
ec:19:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:05:07 2024 by rpki-client on console-ams.rpki-client.org