Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: 78S1rECvxwaAIjiJz+jNb50da82wzZuGTHtqHUfnLO0=
Subject key identifier: 6B:69:A1:C7:44:2B:33:B8:03:27:4F:BD:40:6A:1A:79:3F:36:D3:75
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 018F87ED7EBDACECC81F9AE6995B411301B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 02BE
Signing time: Fri 17 May 2024 19:00:39 +0000
Manifest this update: Fri 17 May 2024 19:00:39 +0000
Manifest next update: Sat 18 May 2024 19:00:39 +0000
Files and hashes: 1: LSPPCdR7ndRuzHRFL_KMzKb1FnM.roa (hash: eJnG3LZbJGrzURd7j5QEhkbE/MoUlDQaJd/GqNDEkfE=)
2: X_aqwEMJvZO6dKEURgJe-8o0wOs.roa (hash: NEH0yWQws2RYYkcpFdnlZ4k3GoHVcnMz8hJjDDTzp8c=)
3: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: Ca63rhaOSNZJuRLSHh4p26klzqxnbteAQx9HLKADbqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:7e:bd:ac:ec:c8:1f:9a:e6:99:5b:41:13:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: May 17 19:00:39 2024 GMT
Not After : May 18 19:00:39 2024 GMT
Subject: CN=6b69a1c7442b33b803274fbd406a1a793f36d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:e0:e8:51:3f:02:1e:3d:c1:ef:f6:17:24:
8a:a5:4b:58:25:2c:b4:0b:f8:ed:9f:8a:dc:13:ef:
da:57:53:94:f3:e4:90:16:87:60:af:ae:a3:5c:ef:
da:e9:6b:09:93:f5:e1:db:72:1e:f6:40:b9:d5:79:
ef:c5:c4:83:db:a8:2a:43:85:05:fb:50:65:34:21:
02:7f:a5:2d:b8:0e:6b:37:ca:cb:a0:56:46:1b:34:
9e:74:72:a5:41:c4:f2:b8:b4:46:01:9b:e9:f0:3a:
82:1f:2a:02:7e:c2:ed:0a:cf:a3:c9:2e:58:0a:d3:
2a:e1:f3:92:af:04:84:40:ae:51:c6:e2:d0:53:5b:
01:c9:64:7b:fb:fa:03:0b:56:ba:a9:5c:06:4d:03:
75:47:35:7d:ee:bc:49:9a:90:35:e6:d4:72:65:c6:
28:a7:e0:bd:fd:31:e0:0e:9d:39:e4:e2:60:2d:8c:
99:23:2a:a9:d1:58:ef:57:f1:8a:f8:10:51:dd:43:
d8:8e:99:23:bc:f7:6f:92:fc:fa:4e:b7:73:71:2b:
3f:9e:9f:e6:1e:68:de:0f:49:91:8e:4d:42:f2:fd:
eb:3a:cc:bb:85:aa:87:d3:f2:f3:6a:3f:f9:f4:2a:
40:f3:23:1e:d1:40:3f:8c:fc:4b:c5:8f:02:7b:a4:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:A1:C7:44:2B:33:B8:03:27:4F:BD:40:6A:1A:79:3F:36:D3:75
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:3c:32:82:6f:18:32:a3:7f:0d:d0:ac:95:e0:c6:77:f9:
0a:95:61:3c:30:04:85:9c:fd:a2:cf:46:02:69:60:95:d3:4c:
14:4c:85:ab:96:15:68:10:a9:ea:63:b7:2b:c5:6a:43:13:6a:
17:d6:f9:1a:e0:65:99:34:1f:41:d1:f9:f7:b1:85:24:b2:52:
2a:4f:66:fd:14:ec:4b:06:ad:62:e1:aa:bb:ce:0b:2b:e7:2e:
1a:16:db:b5:4c:a5:43:2c:fa:76:54:40:9d:dd:92:d5:26:e3:
25:2e:41:a6:2c:5a:34:5d:d7:36:b3:a5:ac:45:ff:d8:33:5f:
f1:6d:aa:53:01:6d:bb:60:ce:97:aa:cf:e1:9e:f4:a3:5d:ed:
3b:bd:5a:9d:25:d4:e1:3a:f7:60:d3:55:b8:38:95:90:96:66:
fc:44:2c:fc:19:f2:c2:4c:98:5a:2e:fd:eb:83:2c:94:bf:f9:
9c:9a:75:d3:9f:c3:76:16:d9:d1:f2:c8:89:66:1c:0f:e1:4d:
74:a3:f4:28:38:fe:2f:87:90:b0:eb:9b:2b:05:be:db:70:e5:
d9:d4:19:de:48:95:fe:92:25:ff:16:e6:9a:be:cb:9b:d3:6a:
c7:a2:a0:9b:56:f7:67:7a:54:3c:23:a5:db:c0:46:73:5f:a0:
90:a2:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:10 2024 by rpki-client on console-fra.rpki-client.org