Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: lSRNkrvCn3wjYJa1s9pf8VUqoUu70hvBHn8se/hfV+w=
Subject key identifier: F5:D1:F9:07:59:AB:ED:42:DA:2B:29:B4:DD:92:4C:E3:FA:EC:1B:61
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019029EF16F669981E20A8B13324E80E4CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 11CC
Signing time: Tue 18 Jun 2024 06:00:53 +0000
Manifest this update: Tue 18 Jun 2024 06:00:53 +0000
Manifest next update: Wed 19 Jun 2024 06:00:53 +0000
Files and hashes: 1: 1ZUApkpoA4JxbENM9fdLq9RCw6s.roa (hash: ENqCY5S+xeW/zqIKhj0aOu8TaP/f2U9kHEfTysqP98M=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: 6gtmiFfeSueEAsHQHORGl0ajFhjZTWW2qd9ulfKRCzg=)
3: tE_QdmM4PQ4J5vmHtjGlbRDxmC4.roa (hash: fGLofq8CtG8Ve5LfMF5mwBVhEiti2I02JqYJ2kOU0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:ef:16:f6:69:98:1e:20:a8:b1:33:24:e8:0e:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jun 18 06:00:53 2024 GMT
Not After : Jun 19 06:00:53 2024 GMT
Subject: CN=f5d1f90759abed42da2b29b4dd924ce3faec1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:87:5a:87:cc:57:4c:9e:a1:6e:78:e8:ef:
61:a0:0a:61:d2:16:82:b5:7c:87:eb:1c:52:dc:2b:
ec:c9:f0:d3:17:77:7b:7b:83:24:dd:20:61:12:c2:
02:43:4b:65:3a:7e:eb:a2:94:7a:d9:41:bc:7e:0e:
36:5f:ca:1a:35:d6:ec:37:38:b2:61:41:32:f2:34:
a8:0b:72:b3:3c:0f:34:ee:c5:cd:09:80:97:f4:93:
8e:0e:19:9a:ee:f7:da:6e:6c:55:0b:2a:aa:0c:d2:
c9:6a:68:f3:26:11:68:70:d8:46:20:ba:e7:10:3e:
74:1a:02:80:66:43:f9:9a:bf:63:3f:03:b2:9c:50:
5c:6a:08:6d:9a:83:39:e4:b7:51:25:57:3e:11:53:
6a:5b:d4:1d:b1:e7:e5:fb:42:ed:c6:3b:83:5b:6c:
9a:52:f3:27:d3:76:c7:f9:fb:a5:ae:7d:68:84:17:
f5:ba:97:c4:db:1a:0d:cb:6d:2f:66:40:4a:7d:f4:
c0:7a:d2:fc:f9:47:0c:66:80:d7:9c:52:bd:42:38:
0d:dc:b9:72:9a:e3:31:d0:3f:6e:0b:14:8b:da:05:
24:ee:b7:23:a0:33:cb:5d:d9:9b:dd:46:ac:be:2f:
4d:3c:e1:46:5b:28:55:0d:85:ee:78:f3:b2:9e:c6:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:F9:07:59:AB:ED:42:DA:2B:29:B4:DD:92:4C:E3:FA:EC:1B:61
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dc:eb:bf:ce:50:19:fd:94:57:6b:f5:e2:a4:68:3b:2e:af:
31:9a:4c:ed:e8:fa:dc:65:8a:31:f0:ef:6e:b9:70:0a:31:4c:
84:d5:82:ae:b3:7b:47:82:5f:aa:57:cd:96:26:a6:26:a9:98:
3e:e3:ba:e3:14:e1:0f:4a:16:4f:70:43:ff:01:0e:7c:f4:42:
a0:ab:8b:b9:76:8f:0b:1c:f1:74:fe:74:70:b6:80:cf:7e:56:
93:75:73:f6:65:e9:6a:01:3c:af:5f:8c:34:f6:80:b8:99:b3:
23:d8:e5:ce:54:35:ab:0f:11:b1:95:85:3f:9f:81:50:bc:86:
9b:3e:9d:d3:7b:46:b0:88:96:51:72:df:2a:f4:42:23:9b:27:
19:03:cc:94:e7:a5:d3:ca:17:f5:7c:e8:07:5d:da:6d:12:c6:
01:7d:7d:ec:fa:76:c9:b6:e7:db:6a:0a:68:33:ea:eb:72:0f:
b0:7d:79:c9:5d:9b:4b:23:dc:21:35:ea:06:41:37:7a:1d:89:
c6:6d:3a:33:ba:ba:1e:91:60:ee:94:18:bb:71:ab:24:f9:78:
22:16:79:88:18:cb:18:93:9f:53:dc:a9:b5:99:70:d0:a7:4d:
62:91:c5:df:17:00:ef:d6:a6:75:81:61:11:fd:68:3b:e5:be:
2d:8f:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:31:29 2024 by rpki-client on console-ams.rpki-client.org