Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: HYcVPMV35BaHLYuotLakGsg7OxQ+OyuGMdVxo7Y3vMo=
Subject key identifier: 07:17:36:40:7A:95:80:E7:70:8F:DC:28:FA:DC:BB:55:52:A7:FE:F6
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 018F5B838E709105A8155B43E4116A50992D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 06FA
Signing time: Thu 09 May 2024 04:01:39 +0000
Manifest this update: Thu 09 May 2024 04:01:39 +0000
Manifest next update: Fri 10 May 2024 04:01:39 +0000
Files and hashes: 1: KCt6vRaN193YobStHJwvIzkRKfc.roa (hash: xVRPI+lcYUMaQrInbbM2+8sqMl1sir5/M7jWnYp4ucs=)
2: QpgFlw0-DKUIva8O3uhtPm_FUZk.roa (hash: gh+lxhuX/59ZD/WA2cuSIw4CdW0ygArUittC+V8f6OM=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: yT4gByQAqUAZrhOAMIGZxRJuAKvHCObJLBv1CYzL+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5b:83:8e:70:91:05:a8:15:5b:43:e4:11:6a:50:99:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: May 9 04:01:39 2024 GMT
Not After : May 10 04:01:39 2024 GMT
Subject: CN=071736407a9580e7708fdc28fadcbb5552a7fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:d7:01:42:92:81:df:68:1c:50:eb:01:6e:
e1:5c:9a:d4:8d:0b:4a:01:32:93:e5:a1:96:2b:94:
a1:b5:b6:07:00:1f:52:f1:c4:42:db:d9:54:02:17:
32:ac:46:d5:da:3f:d9:2b:80:3c:9b:2e:3f:cd:e3:
d4:5d:0a:45:63:7d:f3:b1:da:5a:cc:7b:33:0a:18:
4f:fc:bf:f3:dd:43:5d:6a:df:6e:1c:52:cc:89:54:
e2:ca:94:f8:d6:d5:44:bf:bf:1c:e0:b3:8c:d2:ce:
d1:cb:31:34:79:4b:8a:88:f1:37:ab:4b:1f:4c:f4:
bd:f6:76:0b:e9:3f:a1:7d:c5:a1:e0:9c:46:81:f6:
83:4f:52:6d:2b:14:24:ed:af:ed:41:b5:98:a0:75:
f4:51:fe:e6:7f:a1:0b:95:b1:f2:af:23:eb:4e:38:
47:44:ef:24:53:9b:0a:94:d4:5a:bc:92:b0:77:1c:
90:03:25:c0:69:67:0e:e4:4c:82:53:7a:c0:47:14:
62:76:5c:22:a1:03:22:87:57:ff:a5:0e:21:e9:4c:
33:71:db:03:2d:18:3b:fb:0e:69:69:2a:55:6e:11:
b9:a5:d4:3c:8f:34:04:34:b2:ec:f5:ab:60:57:10:
3f:a1:39:36:58:b0:d6:70:b7:a5:af:df:ff:8f:2f:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:36:40:7A:95:80:E7:70:8F:DC:28:FA:DC:BB:55:52:A7:FE:F6
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:31:44:e3:31:9b:38:1d:0c:b9:3d:1d:d9:b0:de:ad:d1:
72:1a:21:0f:26:9b:85:ff:85:9f:0a:d8:e5:4b:50:95:85:b3:
86:40:2a:6e:e2:c1:dc:77:ec:cb:d6:4a:40:95:ad:3f:a5:25:
61:51:cc:a1:62:eb:a2:6b:9d:12:f9:21:66:55:47:de:ba:c9:
05:09:72:b7:8a:6a:98:c6:9a:9d:bf:f9:c4:46:3e:ad:04:8e:
1e:74:9a:95:e1:64:fa:0b:b5:91:26:27:33:db:59:d1:32:19:
7b:b8:69:ad:08:a6:7c:de:78:34:a0:fe:64:c9:ae:f4:80:4e:
0d:74:bc:f6:2d:09:de:7e:cb:fa:cc:ca:a9:ba:c8:e0:2d:f3:
4d:20:61:66:fa:b5:83:a6:74:ce:e9:09:4e:89:11:5f:30:49:
e3:22:63:c7:0d:5e:53:c1:23:41:f5:d6:55:be:c5:ec:ce:1f:
99:50:d5:fb:80:62:1c:60:24:76:e8:6b:f8:48:81:34:b7:c0:
e5:3f:5d:87:3f:f1:30:cf:73:ae:8c:07:15:d4:99:e6:d2:52:
55:fa:e5:97:88:56:d4:12:ba:eb:7b:6b:73:1a:42:08:77:c5:
a9:45:f5:1b:73:04:d3:98:9d:28:84:5c:a1:db:c9:83:9a:65:
ba:f4:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:38:08 2024 by rpki-client on console-ams.rpki-client.org