Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: +XW1cWenZVcy4Pgfhxy2nwiDJyvuEABMiL2o72biX5Q=
Subject key identifier: 3C:3E:68:DA:5A:1F:E2:E3:C3:4A:BF:9D:85:68:11:34:9B:FA:69:FE
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 018F953AF694A6B9F78111509756B6AEB0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0277
Signing time: Mon 20 May 2024 09:00:20 +0000
Manifest this update: Mon 20 May 2024 09:00:20 +0000
Manifest next update: Tue 21 May 2024 09:00:20 +0000
Files and hashes: 1: dtlk-_ARiPBiQMJAS1IpGYFXUTA.roa (hash: JAHUiyJYxqaRgU56TOKpXCfYZYjhYIwTc6HRpdjOLMk=)
2: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: geJ2tmYTIxvNNueoZNFDAqKHJeRfj+m2khG1gQzZ9FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:3a:f6:94:a6:b9:f7:81:11:50:97:56:b6:ae:b0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: May 20 09:00:20 2024 GMT
Not After : May 21 09:00:20 2024 GMT
Subject: CN=3c3e68da5a1fe2e3c34abf9d856811349bfa69fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:1e:3c:c9:2c:93:2d:02:8b:94:a7:58:a3:
75:df:9e:fe:47:74:86:00:42:cc:ca:e1:4a:ce:71:
a2:c5:8c:6b:f2:66:73:f6:4a:7f:ce:c1:8a:99:e1:
4a:84:c3:b7:70:e7:48:bc:e8:d3:2e:4e:0d:f2:db:
8e:78:68:6d:7c:1a:98:5e:4b:95:2b:f8:03:eb:fc:
8f:2b:3d:09:ab:3f:04:29:a6:70:89:88:05:77:05:
7b:fc:59:db:62:b4:9a:57:08:08:2a:02:11:7d:ea:
88:cf:37:52:fd:04:8b:10:ac:09:cb:4b:b6:a0:17:
f2:32:17:99:40:b9:88:6f:ed:87:91:aa:49:4b:cb:
79:da:91:6a:5a:79:db:82:ae:36:fd:6b:0e:ae:69:
9c:51:b2:44:4a:e5:70:1b:db:56:6b:28:af:02:2c:
3d:f7:4d:c9:b7:4f:96:ff:a1:74:ad:ee:84:43:2c:
d9:56:18:a6:68:32:19:02:8e:7a:5a:35:28:3f:be:
5d:16:04:c3:8b:af:40:02:a3:4d:25:53:95:1d:c8:
3b:30:8b:af:20:21:32:a7:da:ed:99:56:68:49:e0:
06:37:e7:73:92:30:7e:f2:87:e8:58:24:37:6b:4a:
89:8e:d3:dd:2e:53:f9:83:02:3a:d7:06:66:05:27:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:68:DA:5A:1F:E2:E3:C3:4A:BF:9D:85:68:11:34:9B:FA:69:FE
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9a:67:2b:19:c4:c6:8a:a9:45:0e:c9:ba:89:e2:cf:6f:2d:
ee:6b:f8:1d:a7:e7:40:ed:f9:6d:32:81:97:e1:58:9b:55:a2:
9a:97:ed:21:18:90:23:61:ab:5e:00:fa:40:22:86:d0:3b:6b:
51:75:55:a4:a4:a6:3d:dc:9b:3a:0a:9f:65:4d:aa:10:85:6f:
0a:d5:a7:15:92:68:d0:a1:04:7f:52:3d:86:91:5e:56:96:a9:
b2:7d:54:e0:02:d2:eb:cb:0b:d0:12:f8:05:e5:3c:14:43:81:
d2:5d:91:f7:74:e2:96:88:21:0d:77:e6:bc:9b:ee:d6:4b:4e:
59:21:79:5a:0c:c2:6c:17:f9:18:9f:41:79:81:e2:7d:3c:d4:
15:09:d1:d3:13:08:39:c7:6a:7e:63:0b:8e:42:75:39:3c:58:
16:4f:c7:e2:12:3d:7b:57:1c:9d:41:d1:e3:b7:c7:3a:87:7b:
f3:c4:83:3c:8b:37:53:ea:42:d3:b8:c2:46:52:35:b2:6d:97:
83:a8:a1:59:24:17:65:6d:8e:5d:ab:f7:a2:20:6f:17:0a:02:
0d:45:0a:b1:4b:ca:a3:8d:a9:0f:4c:66:39:63:77:0c:50:50:
e6:9d:0d:25:a2:86:a5:e5:b8:77:23:db:34:2c:4d:4b:28:2f:
96:26:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:45:42 2024 by rpki-client on console-ams.rpki-client.org