Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: FX2JPNBXsN5qiHkjmUEBf8Z/LdF9qVNkNe6jaYHjdDg=
Subject key identifier: EA:AE:B9:D5:6B:6B:0D:92:3A:64:1F:88:FD:70:3E:00:DC:E3:99:C1
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 018F99F3667020D8F08264DBDE3A4078C7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0601
Signing time: Tue 21 May 2024 07:00:16 +0000
Manifest this update: Tue 21 May 2024 07:00:16 +0000
Manifest next update: Wed 22 May 2024 07:00:16 +0000
Files and hashes: 1: 3WSvUUMaVvzA-YyrSH299fVfwLs.roa (hash: 3fN8f4K0/j12dSft3+xxEEH+4qD0Fy3jh2DbdzrDYEE=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: 2ZmXCAlIOT3W3Ryqp3z4DUZi8rHz2+GeUmjVVvjvmf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:f3:66:70:20:d8:f0:82:64:db:de:3a:40:78:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: May 21 07:00:16 2024 GMT
Not After : May 22 07:00:16 2024 GMT
Subject: CN=eaaeb9d56b6b0d923a641f88fd703e00dce399c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:9e:fa:27:cb:85:10:5e:49:7e:5b:2d:8f:
d9:c9:97:2a:09:2a:b5:e6:22:31:8a:3e:61:51:b0:
cb:76:29:ab:16:31:6f:8d:be:b0:e7:a0:32:f2:51:
84:c4:a5:30:14:b0:e5:dc:c3:46:3c:61:bc:8d:4c:
a6:4b:8c:ce:e6:45:33:b5:34:23:48:60:be:a0:42:
25:fa:5b:38:43:56:dd:4a:2c:7d:5a:7e:58:00:03:
d4:14:1c:68:5a:41:97:03:11:f6:41:43:df:c9:cf:
60:45:8f:f5:a6:aa:4f:5e:61:e8:07:b6:20:58:34:
cb:21:82:c1:ba:3c:31:39:ac:80:19:d3:2e:37:99:
52:0e:f3:15:65:ae:15:16:e4:0a:dc:57:ac:ce:70:
94:01:14:02:47:b6:22:3c:d4:ac:eb:d6:57:dc:27:
45:c9:89:e4:92:4d:af:94:40:fd:46:75:db:ac:b8:
25:20:bb:f7:39:72:bf:0b:e0:75:4a:ba:d1:91:6c:
58:fe:79:04:f6:b9:a2:72:04:2c:99:21:8c:fe:1c:
7c:ae:86:ca:ab:b9:d8:c1:95:e2:39:36:b2:3f:ca:
0c:3d:2c:ad:6f:fc:8c:77:ea:f8:c8:92:d0:83:68:
c7:7c:69:1d:62:78:e4:4d:e1:d7:fb:2e:ae:92:31:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:B9:D5:6B:6B:0D:92:3A:64:1F:88:FD:70:3E:00:DC:E3:99:C1
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:d2:42:eb:c3:7e:63:12:2b:3a:a2:20:18:5f:b0:36:23:
6c:47:0b:9d:bb:fc:9c:1c:e0:cd:4d:63:99:ec:fb:de:81:b1:
f6:e6:7b:52:52:41:2c:8f:65:a4:e6:2e:a1:5a:42:0f:e8:ae:
0b:c4:f5:10:ca:7c:ef:0c:52:67:4a:54:d9:f8:b7:5e:c2:a7:
f0:71:50:3a:10:71:5e:95:25:4f:69:b7:63:26:d5:0d:25:57:
49:9c:3f:4c:b7:cb:92:b9:8b:59:8a:5b:f0:bb:13:c2:12:49:
8c:6f:da:db:dc:ca:e5:7c:93:74:6d:ca:70:c4:10:e4:23:12:
53:26:a6:ee:94:99:64:f8:ce:50:53:99:80:d2:d5:5c:13:88:
ae:5e:69:94:96:60:64:4a:d5:10:d5:10:1a:f8:05:eb:82:a7:
a6:d1:91:f2:0b:ef:df:8d:9d:73:3b:1c:3f:e1:b8:c9:6c:a7:
0e:8b:cd:34:10:01:ae:8d:52:12:94:ce:cd:15:e3:60:ce:45:
93:95:e8:82:8b:b7:5d:72:67:27:11:95:cb:40:62:3c:11:d9:
3b:c5:ee:45:78:af:1f:8a:56:60:3b:2a:4b:cb:58:17:46:1f:
c1:0a:68:92:c0:bf:76:4a:95:19:5f:25:18:ff:23:25:cc:9b:
aa:40:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:12:44 2024 by rpki-client on console-ams.rpki-client.org