Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: D+kewkpeQC/NzV214sR6cqFu25dj/fRhNPwnTyPE4Ug=
Subject key identifier: C9:14:DA:70:1B:99:D4:E7:9D:BA:CE:00:96:5C:35:08:FE:45:67:80
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0191FA7E0BCCC46713A00433DEB2E8E61E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: FD
Signing time: Mon 16 Sep 2024 11:00:50 +0000
Manifest this update: Mon 16 Sep 2024 11:00:50 +0000
Manifest next update: Tue 17 Sep 2024 11:00:50 +0000
Files and hashes: 1: 9DDH3YfchDyH8LlyDluHGmrHxxg.roa (hash: ZPnfc6OdikB1wbOnUc5tCqGuHcx8uUe1XlNKvP46OSU=)
2: Y7__psEgVJ-5U2CvWaPegschMUo.roa (hash: SgilgulaxRZWs69BuXZaOR+J493/d2wuoQiMvuh5oGk=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: oWrIMsAhk4Nf/lDNI6IbCD0NuUYDJEXcc63CTqZvfy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:0b:cc:c4:67:13:a0:04:33:de:b2:e8:e6:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Sep 16 11:00:50 2024 GMT
Not After : Sep 17 11:00:50 2024 GMT
Subject: CN=c914da701b99d4e79dbace00965c3508fe456780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:d0:b7:b3:af:20:71:48:0b:84:37:40:fd:
4b:69:f7:37:09:16:a9:ab:dc:7b:c1:3d:61:dd:50:
ca:b6:43:34:89:bf:ad:2a:03:4b:c5:e5:36:dd:1f:
a2:cd:4c:03:5c:78:53:f0:a4:aa:c3:97:95:43:21:
96:4c:40:2b:e4:ac:73:a7:d9:08:04:24:7d:ec:32:
41:46:53:da:cb:0f:5b:e6:2b:d1:a8:da:ca:31:f5:
1f:ed:99:29:87:a6:3d:a0:fa:f8:db:b6:28:3d:aa:
8f:a4:5e:1f:93:44:46:32:73:05:2e:57:68:42:12:
4c:e2:a1:32:91:1d:a0:18:03:dc:1e:38:e0:de:17:
01:6f:a4:f1:ba:c9:3b:60:7b:ed:35:cf:85:36:80:
a3:45:4d:91:45:e1:3c:93:0e:c0:1e:b9:bb:45:52:
4d:c2:b5:c0:90:91:84:8a:ab:f3:c0:31:87:31:8c:
74:d4:fa:44:e6:f5:47:58:e7:b7:57:62:48:22:f6:
c5:2f:36:5f:c3:79:83:4a:1e:4e:92:ff:f8:ec:70:
2f:01:bf:fc:bd:f0:6c:d0:85:95:74:a7:64:73:40:
a4:f0:f8:84:c0:5b:f5:f7:fd:fb:61:46:fa:29:b8:
79:3b:c3:f4:ec:b2:10:48:a6:5d:c6:4b:50:c2:27:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:DA:70:1B:99:D4:E7:9D:BA:CE:00:96:5C:35:08:FE:45:67:80
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:14:71:a1:8b:9b:3d:82:6e:09:b6:0c:77:3d:3d:12:43:
8a:1b:f5:34:d6:4e:e7:f0:b8:8e:a5:e9:9b:db:d3:9d:df:88:
d9:16:7c:5f:a9:a4:5e:8d:6a:27:cc:c4:f4:7d:69:68:a3:59:
1b:f8:87:c1:97:86:db:93:cc:ed:20:8a:fa:af:93:0f:3f:ec:
29:d6:20:01:3c:f3:36:9d:90:86:fc:47:cd:17:d6:9a:21:7f:
5c:c4:a4:94:0f:a1:51:cc:0e:b9:59:24:b1:a3:11:d5:3a:30:
3f:fc:e5:59:d2:71:91:ec:3a:5d:fe:33:b0:ee:f5:ac:98:09:
7a:d5:e7:ac:47:6e:d1:76:39:53:8e:ed:7d:7d:ac:2b:c7:a5:
39:3a:91:86:bd:be:43:17:b5:43:d3:91:ad:9c:64:d2:76:4f:
b2:a4:48:e6:05:bc:0e:72:65:15:f7:35:20:1a:16:2a:38:02:
12:6d:c1:ba:8d:73:b9:d9:25:62:08:4e:6e:27:68:dc:84:23:
73:0b:d3:68:18:c2:10:52:d6:63:9d:f6:ee:ec:65:ef:3a:0f:
d9:30:53:00:33:28:63:b6:16:b3:b8:cc:f6:a1:3e:b5:86:23:
95:f0:ca:c1:cb:db:fc:05:22:ad:e3:92:20:84:43:a3:8c:51:
b4:c2:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:44 2024 by rpki-client on console-fra.rpki-client.org