Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: Su3zbb5bYxM3Q4a6sRM62NJjlp4ySVTQCUWBTf86tGg=
Subject key identifier: 7F:FD:AD:BE:41:1E:BC:08:39:67:28:56:14:07:F6:3C:64:04:06:D1
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 018F866C9749E5C006CA29D4C7C0CF4592ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 09C0
Signing time: Fri 17 May 2024 12:00:14 +0000
Manifest this update: Fri 17 May 2024 12:00:14 +0000
Manifest next update: Sat 18 May 2024 12:00:14 +0000
Files and hashes: 1: CHA6WrB-cqAmqwnunAg4c1ECpBw.roa (hash: MMUdoJJ8QknCFE7ytjLP786S6D94qojoEAbjmIc+JWA=)
2: bwFfGFRYrRyt-Pom5KKD_ZaGi5I.roa (hash: Q2G+76CKqWm/dyojr4Eoe266RoUI7UCXpQYkPn7m1UM=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: yQ7+NDK5NK8MEuefTk9HillI5FjxOClOX6pi8vzOFx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:97:49:e5:c0:06:ca:29:d4:c7:c0:cf:45:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: May 17 12:00:14 2024 GMT
Not After : May 18 12:00:14 2024 GMT
Subject: CN=7ffdadbe411ebc08396728561407f63c640406d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:78:cb:fb:e5:2f:b0:6d:e1:1b:f7:26:58:
d1:95:1a:33:8b:06:27:c5:ac:c3:38:86:7e:49:e9:
cc:01:7f:ef:35:ff:ac:15:ba:16:98:95:f4:0c:52:
64:ce:6b:68:37:69:e3:bf:86:c6:ef:36:b5:da:27:
e6:24:9f:04:92:45:b0:68:c4:7c:89:4a:84:f6:59:
f5:a1:e0:c0:a7:a7:8a:97:61:3e:0c:8b:ab:2f:bf:
75:85:32:87:47:52:57:80:f1:44:61:99:63:e0:46:
cb:f3:26:30:cc:59:16:fc:47:28:cd:5e:38:08:73:
52:26:1e:48:84:15:2a:e2:08:8f:af:8d:8c:8b:6f:
57:42:11:52:0d:35:3a:38:f9:6e:3a:ba:61:89:8c:
28:ea:25:ca:81:bd:37:e9:eb:2e:66:cd:c6:26:87:
0e:57:95:31:64:8e:f2:d2:6e:fc:4f:33:29:75:82:
58:b3:e9:cb:6e:49:5d:6c:b2:1b:94:1f:38:e2:c1:
21:97:60:8e:fe:be:2b:ca:fb:3a:36:ac:94:83:14:
85:db:2c:31:32:89:e1:bf:ba:9f:c5:ab:a2:46:ba:
93:60:a9:a5:b8:3e:2e:01:2d:60:5d:35:a7:12:92:
5b:03:4a:6d:47:85:e9:ed:cb:77:79:ed:c3:39:ce:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:AD:BE:41:1E:BC:08:39:67:28:56:14:07:F6:3C:64:04:06:D1
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:9e:d5:8d:c8:6b:dd:45:78:64:cb:59:a5:3e:0b:21:17:
d5:b5:8f:7a:c1:67:ea:0c:19:ce:56:62:1e:69:11:24:3a:77:
5c:31:3a:b6:a9:1f:a3:c4:da:21:d9:30:00:52:30:f3:f9:6e:
0c:b8:8c:29:58:32:a2:52:60:c0:b2:b6:ec:ff:97:37:f2:bf:
7e:dd:d8:b5:f7:eb:88:c8:5e:f0:01:9b:fb:55:44:64:ec:42:
61:fc:b0:8e:ec:0f:f0:61:71:0a:1a:7e:7b:c0:81:6d:80:05:
f2:4e:4d:dc:d7:6a:03:6b:43:e1:ea:9a:a5:55:f3:7a:60:c3:
8f:6b:5d:d4:c1:39:d3:99:20:12:3d:00:a5:de:7b:78:c5:bd:
be:93:ea:fc:d0:63:ec:ee:4f:a7:cc:43:95:91:fc:fb:26:75:
60:7d:30:31:99:03:df:e8:e4:89:df:95:04:e4:52:40:55:71:
56:a0:d4:8b:49:20:d3:cb:0c:13:99:2c:7b:72:ba:35:d5:a8:
03:96:75:a9:b3:ab:fd:6e:ec:32:92:61:49:1b:f9:af:00:11:
e3:18:78:8b:d5:82:3c:6d:38:ca:10:3d:2e:79:ce:e6:95:6c:
bb:c3:44:42:ca:0e:93:c5:7d:d2:8d:bb:83:75:29:13:4e:ba:
b8:74:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:14 2024 by rpki-client on console-fra.rpki-client.org