Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: 9xHJbVG+2R960qvUv9b/vPbv6ctksSXG5hlDbs82SO4=
Subject key identifier: F0:A7:B7:F6:E9:EB:4B:FF:C9:9E:DC:87:E4:BE:1D:4D:EC:D1:AE:C3
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 018F87B64DBBC352A5729DDFF964C22FC44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 6C
Signing time: Fri 17 May 2024 18:00:22 +0000
Manifest this update: Fri 17 May 2024 18:00:22 +0000
Manifest next update: Sat 18 May 2024 18:00:22 +0000
Files and hashes: 1: 92Ay_dnsKLTKA-91cFg2UELyoI4.roa (hash: vSw4H+Zb8DKEALIf3lnOUrYArwCYGwVgjECQBsWMOP0=)
2: BipxVQ7HkI_6z0b131jfRc3yD3o.roa (hash: yMO0UBECtZTRo/ZNmPQ82+Rz4O+u43Z9nokNAH6z5/8=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: sYgTrb59e6ECgBt/SF82qyf9WRTkWtuv3OAV2Mdh0zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:4d:bb:c3:52:a5:72:9d:df:f9:64:c2:2f:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: May 17 18:00:22 2024 GMT
Not After : May 18 18:00:22 2024 GMT
Subject: CN=f0a7b7f6e9eb4bffc99edc87e4be1d4decd1aec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:95:5c:52:4d:da:97:f9:8e:5a:0b:2d:0a:
01:f8:83:35:f8:ea:3e:85:07:4b:c9:d5:71:b0:65:
68:45:43:c6:c3:23:75:ed:42:88:d9:a2:dd:49:48:
c2:1c:74:71:fb:45:5b:3d:f2:05:bd:e6:2f:b4:e7:
0a:89:f0:65:33:cb:f7:bb:24:68:d3:94:c5:14:8d:
9e:d3:99:82:7d:21:c7:79:b2:29:62:51:ad:c7:4a:
a0:24:e2:e3:03:de:37:fb:0e:2f:6f:c5:e2:77:dc:
ce:32:b3:b9:75:88:02:cb:4e:4a:64:d2:c7:bc:6d:
9e:60:00:46:d3:59:23:8b:44:8f:69:52:cf:fb:9f:
71:9b:a9:c4:b8:7c:06:bb:96:14:bc:8b:9d:69:a8:
be:6d:af:69:9a:7d:97:b9:bc:f2:6d:a4:61:71:1b:
62:a1:c5:32:0f:2f:ea:65:df:90:aa:ab:3c:a9:8f:
b0:ab:63:d7:01:ad:4e:2b:bd:0f:fb:cb:b6:c7:f5:
85:68:24:9d:cd:4b:f5:f1:75:4a:ee:bd:0e:d6:38:
4a:73:89:95:02:e0:c5:d9:80:9b:63:fd:3f:ad:0d:
17:8c:04:03:01:15:7c:c2:72:31:25:7c:82:11:7c:
62:02:aa:95:c2:54:bb:85:b2:45:e5:3e:89:65:02:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:B7:F6:E9:EB:4B:FF:C9:9E:DC:87:E4:BE:1D:4D:EC:D1:AE:C3
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8d:d1:6d:18:a6:8d:8a:0b:71:2b:4f:c7:32:18:18:e6:12:
49:44:30:92:07:59:d5:72:18:ea:97:21:d0:ff:79:75:a6:40:
13:ec:33:cd:8a:68:71:6e:2f:f0:f3:8b:99:7e:3b:46:8a:f3:
43:d4:5d:dc:a3:d1:81:ee:92:29:a8:4e:dc:21:72:83:36:62:
9f:1f:a2:9f:77:16:e0:fd:e8:e1:58:82:c1:64:47:8c:a6:e5:
92:01:44:73:c6:f7:a3:4d:f5:eb:a6:45:ae:00:37:60:ee:82:
2c:04:1c:7d:5b:bf:b8:dd:70:0d:f9:d5:25:08:3d:9c:ec:45:
51:fa:da:28:54:21:c2:ec:0e:b1:e1:d1:5d:21:1d:4f:89:ff:
d8:15:f0:d2:82:02:9a:be:dc:5d:98:f2:af:23:d0:0f:81:ec:
a8:2f:94:d8:8d:e6:67:66:a1:ce:8e:08:47:55:dd:ea:f1:f6:
d5:ad:6e:7a:ce:57:e8:82:76:77:bc:0d:46:67:e7:13:f2:c5:
68:53:d9:b5:d4:d4:04:8d:03:c6:a5:05:9a:a6:8f:98:2a:90:
95:7c:92:29:f1:61:f0:a8:aa:c7:98:e5:23:51:e1:7f:a6:dd:
89:ff:1a:46:24:51:d9:a1:70:54:66:70:d5:c7:8a:c4:bd:bf:
49:59:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:11 2024 by rpki-client on console-fra.rpki-client.org