Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: zOaNQJ39pXUf58cHjwJZHlR7kw8Gqd6BOeHk9voUUY8=
Subject key identifier: F9:1E:B9:04:15:B4:5B:B1:AB:88:33:72:12:5D:D1:E8:9F:8C:CC:ED
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 01906B2A46A97832A9983E05F0D1DE8D0FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 0DB3
Signing time: Sun 30 Jun 2024 22:00:50 +0000
Manifest this update: Sun 30 Jun 2024 22:00:50 +0000
Manifest next update: Mon 01 Jul 2024 22:00:50 +0000
Files and hashes: 1: WoGSb6XfIv1-1k6gmCDrwXStnkw.roa (hash: IyVqtJ5KVyyU/3xN0m1UxylmSSHrcnG156TL7CnoNUM=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: /PXEmT99YG3ElOcDMgFy9DLJQBTjHL9McBpVqbGxs6w=)
3: wbOpu5lvsVAW8KILVvNKMQyfUN0.roa (hash: ziyMrUoVMTSRf/IMRWtrWK9wHd959PUBbvpw+4hHeB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:2a:46:a9:78:32:a9:98:3e:05:f0:d1:de:8d:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jun 30 22:00:50 2024 GMT
Not After : Jul 1 22:00:50 2024 GMT
Subject: CN=f91eb90415b45bb1ab883372125dd1e89f8ccced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:05:a9:db:96:7b:76:6f:06:bf:01:c3:09:
f5:e6:5e:be:66:99:5d:fc:a7:8f:f8:07:f7:32:6a:
bd:e4:1e:2e:db:01:13:56:e7:b7:47:84:7a:0a:6e:
b5:fc:2e:85:a6:2b:53:f9:a1:91:5e:30:13:c2:ea:
dd:d7:d1:52:0c:0a:03:98:66:5d:cf:52:dc:64:f0:
e8:03:c4:c7:6c:1e:59:ca:c0:15:d4:8c:cc:2c:70:
4c:f2:cc:f2:90:fe:78:6b:0e:1f:51:64:93:39:2c:
33:57:73:b6:d4:90:56:cd:6e:fa:1b:17:1e:fa:c8:
d8:47:93:ef:41:06:22:7a:d3:36:8f:ad:c1:2a:8b:
84:6e:4b:2a:fd:26:f3:8a:c4:06:72:bf:c7:f8:84:
7d:5a:a8:c6:85:4f:4b:1f:37:be:43:5c:99:3a:ab:
06:f7:be:b3:d4:19:2f:b0:17:0b:02:00:09:88:d5:
61:12:c0:e6:e8:c1:63:21:7a:fe:20:3c:8c:ad:6d:
8e:96:3d:ab:5d:ab:20:dd:0c:d8:dd:a1:96:92:34:
ea:d5:2a:2a:91:04:a1:b9:62:62:74:2f:03:73:0f:
2e:ac:98:82:d1:0a:1c:8c:d9:32:fa:af:c4:fd:6d:
71:98:85:4c:00:e3:e3:4e:e9:d9:b0:23:6c:d0:37:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:B9:04:15:B4:5B:B1:AB:88:33:72:12:5D:D1:E8:9F:8C:CC:ED
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:94:b1:23:bd:76:44:46:a1:50:9c:fa:24:83:d6:ea:76:
c8:f0:eb:d9:71:64:1e:e3:10:71:60:da:55:87:c3:30:bf:b2:
29:6f:fc:18:33:6a:3d:f4:bf:cd:11:88:0c:81:ce:16:5d:76:
ab:a3:75:61:f2:5f:79:bd:1b:b1:89:af:9b:a6:02:cb:8a:c9:
4a:83:51:d5:27:6b:68:ff:4a:f0:53:ad:38:cb:eb:a0:7e:f5:
8a:25:98:1f:8b:ae:e1:3d:12:0c:a7:65:79:50:e6:59:67:68:
74:ce:2e:05:8b:46:86:ba:31:ff:9f:e0:2f:78:05:cd:70:8b:
4f:ef:bb:c0:7f:45:1d:89:f2:6c:42:88:11:91:c0:ec:69:56:
f8:38:27:8f:0e:32:b8:11:6d:18:ac:25:ac:fa:df:51:28:8b:
39:8e:7a:0e:29:ed:3e:ab:33:fa:62:81:8c:bc:19:32:6b:f3:
87:c5:7a:a3:b3:28:84:8c:85:56:1d:1e:8c:60:41:04:f4:94:
04:af:46:b2:b9:30:3f:34:79:3f:58:fe:33:49:9a:49:a6:9b:
42:d9:3a:12:04:e1:c4:2a:a6:b8:14:c0:21:9f:69:47:99:cb:
79:01:88:77:d6:69:c2:40:a2:66:91:9d:b9:09:56:9a:47:d4:
5a:13:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:54:24 2024 by rpki-client on console-fra.rpki-client.org