Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: 8X3ENYTc6VoT9ZkE5NOsKEqR+cewkNPZRU4my9ucAGo=
Subject key identifier: 46:29:32:6F:C8:0F:E2:07:A8:8A:D2:9F:15:2E:A2:E8:6D:92:CA:40
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 01923AA6C252A6DEBD2D0CA7D7D0AF1D372B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 107E
Signing time: Sat 28 Sep 2024 22:01:00 +0000
Manifest this update: Sat 28 Sep 2024 22:01:00 +0000
Manifest next update: Sun 29 Sep 2024 22:01:00 +0000
Files and hashes: 1: iYD17s3tsaOOMPUOKzORlwDeSQ4.roa (hash: szsX7VfRjs7HlW2zx1S4kNLHyTcMAGc7aCMg7nW3KoE=)
2: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: OIJZqCE5FqbjsPkPcGDhUwKNSXsJC9thzF+7yEsz4Sg=)
3: pOa3mva2TPJjuMonrSyv7tssVjs.roa (hash: 2pXxVcn+z35BZovq0P23uf2JupkAfayMooyXSjmXRY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a6:c2:52:a6:de:bd:2d:0c:a7:d7:d0:af:1d:37:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Sep 28 22:01:00 2024 GMT
Not After : Sep 29 22:01:00 2024 GMT
Subject: CN=4629326fc80fe207a88ad29f152ea2e86d92ca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:1c:e0:8f:5a:d9:7d:68:7e:c9:99:c8:be:
2e:83:7b:de:a9:29:03:1f:c9:cd:69:2d:51:53:6f:
6c:94:36:13:d8:8b:de:ba:9d:ef:0e:7a:95:36:fc:
92:27:3a:f8:66:cc:7b:a7:16:d6:a5:4c:ce:58:03:
fb:8b:3e:5a:3b:d3:b9:3d:31:63:47:a0:c5:f7:26:
9b:a0:ea:d6:12:ed:d5:76:8b:ef:84:e6:bf:df:e7:
b4:8f:23:66:bb:0e:fc:79:eb:6b:ed:03:3b:f4:fc:
25:8c:a3:6e:45:6a:da:31:98:4d:d2:3c:5e:a2:ad:
f8:03:f0:ca:0f:4e:5e:82:15:b5:c6:a2:d9:e6:4b:
3f:dd:f0:99:0d:8d:d4:90:fa:a6:07:c8:7c:94:10:
f2:b8:e4:8e:59:f6:f5:8a:13:b4:e7:ee:30:86:8f:
dc:26:90:e4:eb:1c:17:9e:2f:af:ed:55:50:35:a8:
7e:30:c9:ab:c9:20:4d:02:f9:64:73:a4:e3:1e:f8:
39:8e:58:43:0c:96:85:6f:84:8c:b0:bc:13:6a:56:
f9:f8:6d:2d:88:7a:1d:24:29:7a:15:ac:60:59:57:
0a:82:41:4a:e6:20:ad:e1:bf:4a:92:5b:64:bb:a6:
ed:49:1f:6f:a9:bf:c6:59:6e:d7:70:03:64:a1:50:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:32:6F:C8:0F:E2:07:A8:8A:D2:9F:15:2E:A2:E8:6D:92:CA:40
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:c5:98:36:7d:89:4b:d7:d0:80:0c:3d:34:33:5a:45:7d:
1c:bf:be:70:80:62:4a:1e:1b:57:6c:a3:a9:4f:14:45:1c:07:
6d:fc:e9:c3:f1:59:f1:54:d5:fc:dc:79:ec:f0:c2:b7:08:28:
4c:0a:a6:b8:a3:17:a3:0d:74:bb:7c:e9:0c:bd:ed:0c:92:7d:
ba:c2:8a:9e:74:01:22:02:3e:b9:bb:26:01:44:e2:f9:71:8a:
6b:5d:16:fe:a8:9c:d6:b1:d1:e1:59:5b:d8:17:17:66:9a:10:
0c:17:a5:a9:bf:a3:0b:0d:a7:92:2e:35:70:b1:15:14:c9:23:
ec:d2:7e:b3:56:78:be:5e:37:aa:e5:85:3d:92:e2:22:2e:f1:
75:b8:50:df:36:5a:7a:2c:03:08:d6:74:ac:f0:27:43:8c:c2:
87:d2:19:9b:bd:be:c4:4f:2f:5c:c8:2e:4e:63:8f:43:a7:2b:
ae:07:31:5b:33:34:2a:29:92:22:d6:b0:ba:8a:b7:30:3d:92:
9f:03:3a:0f:d6:0d:c8:4f:be:84:df:bd:81:8f:10:08:55:ff:
5e:7b:93:ec:85:3d:51:02:0b:87:a4:0c:2a:36:d4:f8:90:c8:
fe:fd:35:ac:12:d7:8f:4b:fc:c9:87:41:70:ab:12:02:30:8b:
b3:fd:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:34:35 2024 by rpki-client on console-ams.rpki-client.org