Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: Cdc1lOO+qFjm5OvtVZbLlD/N4qWE4yEGZKOblA7/gdw=
Subject key identifier: 58:B5:C7:88:EF:36:CF:33:05:D5:79:07:AA:C5:09:87:34:4D:3B:EF
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019062CBDF1581F0ABDD864C7A7E2A6D6467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 0D95
Signing time: Sat 29 Jun 2024 07:00:46 +0000
Manifest this update: Sat 29 Jun 2024 07:00:46 +0000
Manifest next update: Sun 30 Jun 2024 07:00:46 +0000
Files and hashes: 1: XFupdCNwpqEnCTJQqZIzkCEE_gw.roa (hash: aXb+V05PGRqV65BaIWMNIMOApG2SR/+9bAtIG1jdo1E=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: qtEkDFQPGvvvQexi0IA+AnSVnjL7qSzBqmqbp/U5EZA=)
3: lcOTo4ScTg8b-c7XX9Dv9XcdIDQ.roa (hash: bOuv1PNys97/geyGQQKbN74k7Kxxr0ZJUCSjvXz4Vpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:62:cb:df:15:81:f0:ab:dd:86:4c:7a:7e:2a:6d:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jun 29 07:00:46 2024 GMT
Not After : Jun 30 07:00:46 2024 GMT
Subject: CN=58b5c788ef36cf3305d57907aac50987344d3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:a0:52:db:93:63:3e:13:e7:6e:ae:b2:80:
ed:11:57:d8:a6:b6:8f:2d:c6:a5:ca:e9:82:2b:25:
75:df:2f:da:42:a0:31:ed:21:50:32:5d:5b:f7:91:
42:0b:68:0a:7d:db:59:20:54:81:49:20:48:5e:db:
9a:c8:20:e6:30:f6:d6:5e:8f:b7:18:41:a3:f6:14:
6a:92:8d:6c:fc:bd:b1:1e:d8:6c:fd:8a:69:a1:45:
a8:3d:21:a6:5b:26:ee:44:2d:46:c1:ed:e5:49:a6:
b8:48:0f:63:50:37:84:b1:82:3a:c3:09:1f:01:93:
58:8e:a6:4a:de:1b:c6:4a:21:f3:bc:91:7d:95:1c:
48:e1:13:3a:8c:e2:38:7f:1f:05:20:29:d5:9c:30:
a6:a8:99:e1:fe:96:97:c6:c0:40:d3:96:9a:ce:1a:
28:4d:08:3c:78:64:c3:af:1a:e5:84:99:c8:41:bb:
18:bc:da:4f:25:71:a6:14:52:07:60:09:fb:98:e2:
e2:c9:39:18:72:d2:7a:db:94:65:42:e2:f2:c5:b7:
7f:63:69:5c:02:d9:79:c8:25:95:50:46:a4:76:6b:
bf:af:ea:b1:38:34:eb:2c:e8:e1:cc:9d:c6:c0:46:
b8:c2:13:ce:6e:58:51:4e:53:47:b3:3c:1a:3b:18:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:C7:88:EF:36:CF:33:05:D5:79:07:AA:C5:09:87:34:4D:3B:EF
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:29:40:e8:ad:0b:19:f5:d5:ea:69:c9:74:05:87:f2:88:
7c:40:27:2a:32:8a:0e:b0:1c:30:db:d9:eb:02:cf:e6:11:13:
63:42:a3:b1:6b:7b:64:f3:78:f2:40:d2:99:54:a3:06:df:38:
a0:64:27:9f:56:63:9f:7b:0a:b2:3f:09:50:a1:fe:f8:06:f5:
bc:b1:4b:48:3f:c6:43:bf:cd:40:0a:95:58:bc:4a:4f:53:08:
c7:a7:2d:80:b9:2b:5c:67:a0:a9:e7:22:79:fe:79:49:60:ac:
ce:c9:d3:a6:28:a3:82:d8:e7:66:aa:ed:3e:c5:1f:b8:2e:49:
ed:6b:6b:aa:cd:5d:d6:f3:df:11:b4:14:9b:06:87:2a:4f:6b:
20:c4:22:6d:93:bd:55:9e:0d:fe:e2:ab:5e:36:84:03:42:1d:
f1:79:16:19:8b:cf:0c:6a:7a:ad:b1:e7:e9:77:17:1a:c4:2f:
29:c6:59:fe:59:a4:69:42:56:ce:f1:d8:5e:3d:59:e1:39:d2:
9a:32:0e:ab:10:35:94:3b:15:ae:08:98:9f:86:6c:8b:24:fb:
f9:6a:5f:69:51:cf:0f:4d:71:c1:14:f6:ce:4f:bf:5c:a8:f7:
23:86:91:a5:f0:c8:83:79:9b:2f:5a:c8:92:9e:23:3d:ee:49:
a7:1e:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:57:31 2024 by rpki-client on console-ams.rpki-client.org