Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: JiToeFEcgdIeAXkDw3x7SSRUxw1/fI/eL0cnX099unU=
Subject key identifier: 14:A7:91:35:3C:F3:DA:B8:61:0E:2E:02:8D:A6:AE:5B:23:F6:AC:84
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 018F51A4E5B3E57B39A09AD6B4BCDA694D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1160
Signing time: Tue 07 May 2024 06:01:52 +0000
Manifest this update: Tue 07 May 2024 06:01:52 +0000
Manifest next update: Wed 08 May 2024 06:01:52 +0000
Files and hashes: 1: ABIMNM-eevlJMiZ77fDlM3iiL_c.roa (hash: BLY4dduGfB0cpjA0AXqCFF1f3x/TVX8dEQK7HNl+ZCw=)
2: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: jiGJopF9L/j4gdLJn9QPiUokW80i+nCwGos0vt3homo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:a4:e5:b3:e5:7b:39:a0:9a:d6:b4:bc:da:69:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: May 7 06:01:52 2024 GMT
Not After : May 8 06:01:52 2024 GMT
Subject: CN=14a791353cf3dab8610e2e028da6ae5b23f6ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:ee:b8:40:9f:5a:cd:8b:9b:20:66:e7:98:
a7:c0:8b:04:e2:ee:9f:27:19:81:51:a5:ad:cb:0a:
ee:0f:c1:52:1c:db:df:4f:b2:d5:82:0a:80:81:28:
8c:09:39:dd:c6:ab:7b:cd:41:1c:0c:c3:98:0d:1f:
68:ae:e8:49:31:f8:53:3b:55:78:99:2d:99:0b:02:
9a:0f:80:25:f4:21:36:df:34:3e:b4:2b:bb:7c:8c:
4c:e5:75:5f:a9:a1:99:02:51:91:af:6a:3a:f6:de:
fe:4f:e2:99:99:2c:1b:4d:d8:d7:b9:f3:8a:30:db:
66:91:ff:d7:62:02:ce:5f:1d:09:94:7f:eb:56:20:
18:2f:ac:c5:ba:be:4f:1f:cf:e8:50:50:d2:f1:af:
8c:c1:2c:4a:e7:d4:57:93:e3:9d:a6:e6:5c:3e:bc:
23:f6:51:e7:3d:71:39:2d:aa:37:76:ab:c8:79:c4:
1e:02:a9:98:70:f2:5a:2e:1f:b9:6c:c0:47:7d:1e:
00:91:fd:1e:63:fa:33:07:eb:c5:61:10:47:6c:df:
55:58:c9:e4:09:35:a7:5a:38:02:ff:8c:2e:92:18:
78:f3:28:0e:56:78:dc:e4:17:9b:b1:86:ea:bf:ab:
1e:52:0b:88:a2:b2:65:bd:51:d0:38:3b:01:50:92:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:91:35:3C:F3:DA:B8:61:0E:2E:02:8D:A6:AE:5B:23:F6:AC:84
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:dc:77:5c:56:ef:68:01:0b:04:6f:41:66:6d:9e:e0:62:eb:
91:7d:e2:ed:2a:46:7c:93:d3:02:18:b5:be:93:0d:a4:41:66:
e5:4a:5d:01:dc:5c:a5:32:87:d5:38:7c:7c:42:cc:57:75:33:
46:0c:ae:c2:0b:44:d4:02:87:e0:b8:56:3e:92:c6:21:de:1e:
4b:16:a2:19:66:55:91:3a:a2:fc:64:85:2c:da:49:0f:79:b1:
7a:e1:7a:c1:b4:3c:d5:1d:d4:c8:46:c3:50:ae:02:56:60:04:
99:53:25:e8:07:f0:80:7f:ea:c1:32:69:d6:64:89:70:4e:b6:
de:b6:c5:ba:e4:5e:2b:03:44:a4:ca:ce:ec:0c:12:18:d5:00:
fc:06:28:b7:0f:d0:a9:70:6c:2f:ac:f8:4c:90:c4:ea:98:94:
7a:32:69:74:ac:5a:59:62:44:06:92:ec:01:1e:a9:58:c1:63:
ad:14:16:87:01:12:17:22:30:c9:09:ea:8d:52:cf:c2:16:dc:
3a:28:54:58:ff:3e:3c:ac:df:61:c7:f8:48:ae:71:8b:89:2a:
9a:c5:0d:33:6d:dd:f7:03:46:c0:a7:cf:27:5e:ef:70:f0:f4:
a4:ac:c1:7f:7a:bd:2c:1e:5a:ca:18:ca:14:47:39:7b:e0:69:
3f:32:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:44:02 2024 by rpki-client on console-ams.rpki-client.org