Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: MlxSZWHdRIeLthFqpXWNm8ve+Kwx9+wLLbVyKuIpxEA=
Subject key identifier: 84:59:9C:EA:0C:06:F7:A0:B6:7A:22:C1:A0:37:A7:31:16:35:1F:7C
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 018F2F85BD57D2BCCD14820D63469B8E4CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 0C35
Signing time: Tue 30 Apr 2024 15:00:44 +0000
Manifest this update: Tue 30 Apr 2024 15:00:44 +0000
Manifest next update: Wed 01 May 2024 15:00:44 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: mf8o+ByxyJIfenTYKG00qGXvLp0dDHdj04b5cki92pM=)
2: Vf14MAvAMXxK7x8IiBZ_RdGWu1c.roa (hash: WCIoZHKuOG5Z5VpBlRDrM962LR1pcGz1eETxqlMjmTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 13:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:85:bd:57:d2:bc:cd:14:82:0d:63:46:9b:8e:4c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Apr 30 15:00:44 2024 GMT
Not After : May 1 15:00:44 2024 GMT
Subject: CN=84599cea0c06f7a0b67a22c1a037a73116351f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:59:95:f2:16:8c:ae:7d:25:7f:a0:c2:26:
26:d1:83:69:fd:dd:df:c9:91:1e:67:ce:1e:dd:69:
b6:56:0a:58:a3:72:bf:62:25:d2:d3:e4:e4:e4:f5:
03:b0:a2:6e:ae:24:40:2b:7c:a0:4b:28:76:5b:78:
2e:a6:2e:8e:76:04:7a:c7:59:5b:d6:3f:50:e7:0c:
a5:2c:af:5c:f6:82:8a:cc:f5:b0:59:5c:e1:c3:77:
af:62:0f:a4:98:65:61:63:03:16:b7:80:23:06:d5:
71:1b:22:0a:3a:92:ae:b2:19:2a:0d:47:99:02:ab:
bd:61:0e:e3:38:bf:f1:49:fc:d1:6a:ff:92:11:f2:
3b:c1:c0:57:eb:c3:de:91:d1:ab:0e:16:62:f5:b4:
df:90:32:90:3b:7e:0c:91:4c:d7:e7:e0:ef:72:bd:
50:89:42:34:ff:14:73:6b:ca:b8:45:6b:90:92:fb:
73:ea:94:a2:11:9d:4b:bd:4c:50:86:a4:34:c1:68:
2c:cd:46:df:de:e4:e0:d5:a6:f7:1d:5c:fc:26:ec:
d9:9d:d3:75:89:37:b9:22:1b:bc:a8:00:4c:a2:ef:
cc:ed:ad:e6:92:d7:f6:81:e9:ed:0d:f9:ef:0e:82:
68:ee:45:5b:3f:84:eb:30:f9:a9:2f:13:bd:e1:3c:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:9C:EA:0C:06:F7:A0:B6:7A:22:C1:A0:37:A7:31:16:35:1F:7C
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ff:e4:a5:93:00:88:e8:b3:35:e0:ca:a3:c8:d6:0b:ff:17:
8b:d6:77:68:62:15:63:ae:72:22:4d:50:d5:95:78:2f:a5:f7:
99:4d:a7:b9:5b:a0:6a:76:af:02:1d:87:d6:7e:f8:ca:68:32:
c5:e0:41:0e:29:b1:68:26:e1:d7:9f:9c:d4:55:04:3f:1c:71:
5f:18:9f:b6:4b:84:77:1e:da:da:9f:16:c2:36:6a:fc:c2:65:
f5:4f:18:c9:d4:f1:8a:9e:91:7f:17:37:38:c6:1d:45:6d:20:
d7:c9:f3:6f:4a:c3:fd:9c:ca:2b:1e:83:cb:85:e4:03:20:3f:
41:fc:ae:50:75:f6:c6:25:ad:99:62:b5:c3:e9:7a:3a:8b:d4:
0a:15:d1:d6:fe:47:8c:cd:90:49:38:6c:d9:15:86:8e:61:a3:
3c:23:85:8e:2d:f4:da:3d:1f:11:c4:d5:4e:56:87:5d:43:56:
98:d6:bc:d2:46:70:27:5d:86:cf:0b:b7:3e:76:37:20:00:93:
7f:c2:de:fb:a4:1b:84:cc:1d:69:93:6e:d6:c3:1e:50:c6:b1:
f5:b3:67:73:9c:04:33:1c:d6:c2:0e:d1:7c:28:af:c5:4e:ba:
c1:dc:58:ec:40:79:25:a3:98:a9:86:ed:54:30:82:22:c6:81:
9a:aa:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:34:45 2024 by rpki-client on console-ams.rpki-client.org