Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: dOY7ZKnjVvPz/XUTnORbcNvocvdzWIuFSj6BXGVBC+8=
Subject key identifier: 5B:A5:36:0A:2C:57:06:93:5E:E2:07:97:61:A7:5C:C1:E3:5A:2A:9A
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01906038D87AE993C8333C25C309B0443E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0AFD
Signing time: Fri 28 Jun 2024 19:00:56 +0000
Manifest this update: Fri 28 Jun 2024 19:00:56 +0000
Manifest next update: Sat 29 Jun 2024 19:00:56 +0000
Files and hashes: 1: Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa (hash: ouRcbVePhBEi1sg0DekWBBPqZw1Z5xT00z5zL5JP3jU=)
2: oDG92IltuWRAout8DiuQOd6mwN0.roa (hash: Dy1sckAy6SnN985aUfcG6wjjvbDmMJgvgTUIqqrAY6U=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: DYL8i/G3u7ulKnoBFb4S0qTbXgdQ9BlPYhtgU4P+A9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:60:38:d8:7a:e9:93:c8:33:3c:25:c3:09:b0:44:3e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jun 28 19:00:56 2024 GMT
Not After : Jun 29 19:00:56 2024 GMT
Subject: CN=5ba5360a2c5706935ee2079761a75cc1e35a2a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:dc:8d:96:1a:67:e3:07:e4:3d:c1:02:b1:
b7:9d:9d:a2:d9:16:33:01:4c:c7:2f:d9:74:02:02:
e5:3f:4f:83:e7:c5:5b:88:63:ad:71:cd:21:17:88:
99:01:c6:fb:30:f5:8f:77:56:b6:f6:e8:9a:0f:94:
e9:c5:65:8f:27:38:5a:b8:be:35:77:64:b6:93:77:
7d:c0:8a:9d:87:97:e0:95:11:21:f9:15:64:f5:f8:
ed:7a:70:71:e3:bc:a1:d4:34:8d:c6:6d:5c:c8:e4:
39:5d:0a:5c:f7:8b:4a:4c:34:9e:7d:5f:48:38:4e:
a1:49:9e:ef:9f:b7:21:53:7e:1a:67:64:6c:f5:ce:
f7:6d:4f:4e:9c:f5:ec:a9:41:20:ed:47:12:e5:fa:
ed:0a:17:9a:03:83:db:92:9c:68:92:29:dc:6f:42:
21:84:b6:b4:ca:85:a4:3b:18:b7:a5:36:c8:ea:db:
b3:68:5b:d4:34:57:02:7c:c0:b6:3e:b7:2d:b0:e7:
33:3b:b3:79:18:43:8f:b6:51:8e:42:44:81:88:6c:
86:6f:a3:8f:60:12:75:c7:44:c4:47:7e:43:4a:25:
f1:f4:8e:57:16:0b:04:24:1d:66:28:45:ae:74:f8:
bd:17:91:20:32:11:39:e5:c6:a0:81:e9:73:f6:62:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:36:0A:2C:57:06:93:5E:E2:07:97:61:A7:5C:C1:E3:5A:2A:9A
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:37:e0:68:89:f8:be:ed:85:04:02:6e:fc:d6:95:47:ae:e7:
56:1b:02:34:99:e3:bc:b3:f5:fe:e5:95:a4:e1:80:cc:44:fc:
82:4f:a9:3f:89:df:59:7b:03:32:44:54:df:25:0f:27:4a:37:
34:4e:b5:d5:23:86:fa:64:9f:a7:e8:f0:03:b1:88:e8:1a:9d:
c9:3f:5b:0e:76:a6:43:b2:de:d0:d6:b8:8e:cd:6a:a3:37:3a:
dc:ee:b0:71:46:42:8e:93:36:e3:85:a1:c8:3d:1f:82:6d:35:
89:27:79:40:1a:39:4a:54:b9:fb:e1:8c:ee:3f:9a:43:f8:23:
8f:b0:d8:fd:04:55:bc:77:a9:a2:6a:31:fb:b3:08:eb:05:ad:
c5:de:ca:0c:1d:ef:cf:ba:5e:51:2b:4b:18:c1:2c:c9:13:d3:
32:61:92:7d:71:6f:c3:db:0d:b3:a4:81:d0:31:e6:b9:5d:6d:
ae:c2:5f:92:07:f5:a8:20:e2:7a:a7:58:e4:ee:5b:6d:51:7a:
ce:26:7c:7f:83:81:0f:72:49:19:b5:b3:76:2a:35:47:d8:9a:
14:6d:60:ec:14:ef:53:3a:7d:74:71:a5:5b:dd:7a:db:da:8e:
a8:d5:12:b8:bd:d3:0d:c3:b2:5f:64:06:e4:84:c0:be:cf:ad:
df:8b:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:44:17 2024 by rpki-client on console-fra.rpki-client.org