Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: EM5LQiWFYgrqeDqEUPTrhhtvm9WyQ1fm9DcYp/0VQII=
Subject key identifier: 3A:06:3A:9C:BF:7B:85:3A:31:C9:AA:DF:0B:EC:2D:17:9E:A4:E8:6A
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019004D23468297E1DE53DB7B5C94D4440CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0511
Signing time: Tue 11 Jun 2024 01:03:23 +0000
Manifest this update: Tue 11 Jun 2024 01:03:23 +0000
Manifest next update: Wed 12 Jun 2024 01:03:23 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: aet/GYNbpCk4JnquT/o+VMP24y/lP9miqu3biNT/pq4=)
2: 5XvwNjKkTW4R5dUHAdjDeBB-HdM.roa (hash: nANU17Vrmt0dljIHFCFYl4/voRlTQLrNLZPakIq330c=)
3: A_MeFnosYInt_wKb3C6gC-a8n1Q.roa (hash: DbdQRrtiGLTnygD+x/rwSpwTHIsmidrVy8O1notg+3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:04:d2:34:68:29:7e:1d:e5:3d:b7:b5:c9:4d:44:40:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jun 11 01:03:23 2024 GMT
Not After : Jun 12 01:03:23 2024 GMT
Subject: CN=3a063a9cbf7b853a31c9aadf0bec2d179ea4e86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ff:64:2f:c5:d3:88:72:09:ec:73:a0:11:3c:
dd:94:d3:93:73:1c:13:66:1f:a2:39:48:0b:a7:2a:
99:f9:ef:bb:a6:d0:4b:f0:9a:20:d9:f8:25:b7:90:
70:90:8e:5e:80:a4:b1:b5:5b:07:6b:0f:b1:0a:2f:
ff:4f:b3:91:60:50:ce:5b:52:39:7a:d1:90:cc:60:
4b:5d:7e:83:27:a3:76:65:75:cd:c2:f0:75:51:d1:
96:ca:50:cf:b0:49:9e:ba:9e:5b:35:0f:57:27:bd:
0c:1d:ae:dd:9c:38:51:8d:83:af:dd:7d:a3:91:b9:
e3:a7:12:de:86:4a:6c:98:ca:26:7b:b1:42:fe:16:
ff:54:c3:5a:97:31:4a:45:d6:ee:d9:40:ee:e4:b0:
cb:bd:60:b1:c7:71:3f:01:c9:6b:6e:83:f6:e3:cf:
4f:66:db:93:3b:e0:b1:33:ff:93:24:dc:04:99:52:
47:20:0b:a4:70:4f:a7:d2:76:67:39:9e:69:c6:58:
8f:6f:39:31:33:97:19:6c:d9:ef:f5:1e:94:74:b0:
a6:b7:c3:42:ba:b2:67:d0:71:45:fd:92:a2:bf:85:
60:72:9a:b3:4d:ef:fe:ce:ef:ed:6f:b4:29:49:0b:
91:e2:d0:4b:de:2d:fb:78:d4:3a:c7:43:c9:16:c6:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:3A:9C:BF:7B:85:3A:31:C9:AA:DF:0B:EC:2D:17:9E:A4:E8:6A
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6e:68:db:f4:df:56:81:1c:ea:10:82:a2:66:d4:fb:ad:e7:
73:d6:c5:6c:a7:26:db:83:14:37:5d:bf:ff:56:3c:71:24:d8:
69:8e:08:90:89:ed:62:d5:c4:4a:99:8d:b4:97:d7:ce:5a:d2:
38:1f:40:28:52:25:ed:67:db:37:7c:c4:61:ca:bc:d8:3d:ed:
2c:f6:6f:a1:9c:82:4f:27:48:7e:10:02:b1:8a:bb:83:09:d5:
8b:73:05:79:cf:18:82:6b:06:61:bf:58:dc:88:be:ef:07:9b:
ee:c7:62:12:7c:7d:e8:06:78:3b:36:f4:18:68:b3:f1:07:9b:
c3:f3:c6:4a:77:a5:94:18:b6:4c:32:ac:7c:67:dd:36:53:83:
39:20:31:8e:05:8d:61:35:57:64:d8:6f:f8:2d:98:c3:86:fe:
00:36:46:48:94:d5:72:46:aa:7e:97:70:a1:47:d9:00:79:43:
e3:d5:44:31:b3:ce:75:8f:88:56:65:f2:63:df:1f:15:f7:cb:
c5:6e:1d:af:7e:d0:e3:35:3d:ed:71:e0:09:72:0a:bb:97:58:
95:a8:e3:b0:0c:3c:dd:c8:9e:ed:94:3e:6f:7b:f3:98:7d:6d:
55:93:76:28:2b:df:58:a4:ea:66:ce:14:43:8a:1a:ff:fc:db:
ed:2d:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 08:12:54 2024 by rpki-client on console-ams.rpki-client.org