Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: fAVqceGQHb3h9NrFLkrIMUUJef/LuH3iwAqRlzJmyek=
Subject key identifier: CA:6B:8B:56:1A:CB:A8:88:5F:13:03:C0:07:9C:A0:72:29:D1:98:28
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 01906D1850671EEFE0A8DFECDF4F9BE5F7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 11EF
Signing time: Mon 01 Jul 2024 07:00:28 +0000
Manifest this update: Mon 01 Jul 2024 07:00:28 +0000
Manifest next update: Tue 02 Jul 2024 07:00:28 +0000
Files and hashes: 1: OviMZTjBhYKHJCzLVCH50LSB5VU.roa (hash: fiTlmLRpj4ANtkjiMAy8pWvxHIi+A4ot9PL9uqzdiNI=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: 8+hsyKOKS6lmuf0nelpPkuQJzz84ilOlHiLERrk1+vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6d:18:50:67:1e:ef:e0:a8:df:ec:df:4f:9b:e5:f7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jul 1 07:00:28 2024 GMT
Not After : Jul 2 07:00:28 2024 GMT
Subject: CN=ca6b8b561acba8885f1303c0079ca07229d19828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:dc:05:55:69:79:e9:54:05:5d:06:29:1d:
f2:a9:76:9a:2d:4f:95:17:49:81:46:2d:d4:4d:f1:
22:12:7d:92:b0:98:41:39:96:a3:4d:c1:82:bd:03:
2f:f1:ed:b8:3e:6d:1a:d8:9f:30:8f:68:a2:c0:ab:
db:73:d3:83:66:0b:b1:24:f9:e8:e9:3d:c4:b4:09:
9d:7d:6e:a1:ce:cc:4a:48:9a:cd:54:aa:74:26:06:
87:dd:8d:18:4b:15:5d:dd:0f:d1:de:db:85:53:c1:
01:0b:f7:14:26:48:c0:a4:78:8f:12:14:5d:e0:63:
23:c2:38:05:37:5b:6f:62:18:e6:8e:db:37:61:a2:
94:ac:43:ac:93:80:df:56:31:72:25:cb:88:5d:68:
07:c2:c1:ae:51:2f:a5:13:19:26:b5:df:60:f4:34:
46:d8:30:79:91:3c:b1:d4:21:d5:26:42:1a:6a:e7:
c3:c2:9e:9d:9a:16:72:ea:7e:79:08:d1:d7:7e:73:
e3:78:a3:f1:5f:e4:53:cf:c1:d5:87:6c:61:4f:a4:
36:84:c8:3c:ab:56:b5:57:7f:8f:39:a4:96:0d:fb:
ff:73:9c:cc:d5:18:ed:92:a0:ae:d9:f6:69:50:cc:
c2:d9:97:1b:28:2d:f3:f1:db:45:a8:5d:b7:99:5e:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:8B:56:1A:CB:A8:88:5F:13:03:C0:07:9C:A0:72:29:D1:98:28
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:dd:4d:53:a6:ba:40:48:8b:32:da:c0:8c:61:d8:94:16:
ea:ce:fc:42:83:3c:d1:5d:ad:61:47:a1:ca:4d:52:df:68:9c:
a8:ea:2d:b0:11:76:7f:02:32:32:e9:b3:2f:f0:18:12:97:69:
69:f3:f1:c9:25:6c:fb:da:da:b5:62:3b:de:1f:a5:79:61:a5:
0f:07:7b:c0:f2:ce:cc:a4:66:fa:dc:df:4e:a7:cb:a2:35:07:
d8:1c:eb:00:c0:fb:42:c0:44:a6:25:d2:a8:1c:e6:03:54:60:
64:66:b9:73:bd:c0:ae:68:05:fd:cf:97:c4:59:bb:c3:d4:fd:
12:52:28:1d:b5:d0:3f:f7:4c:19:c6:c4:f1:e5:49:fd:39:2d:
2c:e6:37:d7:6a:a2:52:53:c0:f4:04:d7:84:ef:ef:36:7b:56:
4f:e9:60:aa:65:64:84:b4:69:ef:2e:a1:c8:65:d8:64:50:bd:
07:a0:b7:a5:e4:71:d7:ba:98:cb:c7:99:47:20:02:ef:90:bd:
d5:d1:74:3e:fb:e1:00:ac:b6:2c:64:20:dc:10:27:0a:f2:83:
26:f0:1e:57:05:1f:3e:9e:54:14:e1:1d:e1:04:21:60:69:57:
58:ab:47:4f:be:86:54:61:c4:53:6c:68:cb:b6:cc:b2:12:6f:
0d:f0:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:52:53 2024 by rpki-client on console-fra.rpki-client.org