Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: eDzxK9wjAeAZjROA/0m9EqfIUVIMFaVsuE/f3kW2pWI=
Subject key identifier: 4C:B7:A7:AC:75:E1:3F:29:84:E8:4E:FA:EF:F2:74:5A:FF:F3:1C:E3
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 019040AFFAFCE4FC7272D98E7E0AA2565B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 11D8
Signing time: Sat 22 Jun 2024 16:03:13 +0000
Manifest this update: Sat 22 Jun 2024 16:03:13 +0000
Manifest next update: Sun 23 Jun 2024 16:03:13 +0000
Files and hashes: 1: EcTg3dEN8RDARjIY5GSRnEFZcpY.roa (hash: yxX/MPRefpLCoD9oURO/PwhSPYPUVYypHQyfNenx4Ao=)
2: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: 6djOuiktOuxu6VqGh/mZGbfAvEIIN6JtSmvJ64TLtK0=)
3: zjBKO7n2aAjT_WIdb3Ie2Rbh50w.roa (hash: dqQwDekCLXmGlQnip2R4a8D8gRdXpyWj3m8wviKoNBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:af:fa:fc:e4:fc:72:72:d9:8e:7e:0a:a2:56:5b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jun 22 16:03:13 2024 GMT
Not After : Jun 23 16:03:13 2024 GMT
Subject: CN=4cb7a7ac75e13f2984e84efaeff2745afff31ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:b1:dd:4f:5d:52:3f:b2:cf:1e:fc:ea:2a:
7f:81:2e:e0:e1:5a:25:b1:4e:18:94:97:50:e9:90:
39:e0:9b:92:7e:7a:db:ed:8a:94:ff:50:9c:84:8a:
c4:b8:bd:01:84:62:31:0c:4b:1f:61:44:2e:44:57:
7a:f2:a2:06:f7:fd:b9:8b:ff:da:00:e1:ca:f4:6e:
85:ed:55:5f:c5:58:f0:66:1b:67:19:4a:8f:9b:8d:
0c:a4:fd:d6:f3:7c:d4:e9:b3:e2:82:24:65:3c:43:
27:ff:df:2f:78:90:d1:d1:77:1d:00:ce:01:66:ba:
e8:22:99:79:2b:ac:3b:73:68:d2:c6:13:52:18:59:
b1:7b:3c:6a:f0:bf:24:b8:df:cb:32:e7:07:02:46:
c6:45:16:23:34:04:de:e8:46:ce:ca:77:99:e1:a5:
59:79:25:84:e5:45:15:e3:54:c2:f9:ea:2d:d8:5d:
ff:a2:c4:47:51:11:31:f1:56:92:79:09:02:e1:8e:
15:6a:64:a5:99:f1:d1:92:8c:28:94:e6:c3:9e:7f:
66:5c:ba:04:af:49:68:57:70:22:52:9c:8c:d0:ea:
f7:37:0d:ad:7f:91:d3:ca:a8:d1:ba:e4:e5:be:54:
98:fa:4b:44:e7:87:d1:cc:27:ae:bf:b6:46:41:39:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:A7:AC:75:E1:3F:29:84:E8:4E:FA:EF:F2:74:5A:FF:F3:1C:E3
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a0:f5:cf:ab:9e:6c:db:af:79:d2:32:ee:1f:41:24:90:46:
47:f6:e3:b3:c7:cb:f6:4a:78:2c:03:89:8e:e3:4e:ab:85:6e:
79:97:da:24:4e:b5:5e:ce:de:0b:bb:63:1b:07:c4:a3:3d:d9:
e5:40:e7:b2:61:19:4e:27:41:8a:cd:6a:52:f1:b4:cf:6a:fe:
31:7a:23:78:b3:47:9c:b9:34:7a:a8:10:66:b3:fd:ca:34:fe:
25:68:8f:29:9b:a7:a4:93:48:88:d2:a2:6f:c6:00:95:8f:22:
c7:69:69:92:96:ee:06:59:d0:64:0b:4c:e6:9f:81:1e:3c:c5:
41:80:f8:3b:25:84:1a:3d:95:7d:c8:ab:35:2e:e3:b9:3a:08:
fa:5b:be:5d:d5:de:7d:d3:c3:8e:e2:b7:25:31:cc:96:d2:40:
00:9b:35:ca:c4:f2:47:84:5c:34:87:a6:8f:0a:21:40:64:3e:
2a:43:8f:a3:5f:0c:cf:f3:e6:87:d3:03:47:2a:f1:13:1c:53:
d8:76:fd:37:3e:6f:bf:59:04:c5:42:ff:12:d5:1d:a1:d8:0d:
74:36:81:5f:5d:19:3f:ae:c8:68:a4:0f:3e:e9:fd:77:cf:48:
9a:48:62:a6:5a:a8:f0:70:da:aa:82:9c:c7:89:d7:ec:5a:85:
c7:94:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:08:12 2024 by rpki-client on console-fra.rpki-client.org