Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: xM2qkhkcZ6qyULuLHSSuFhhG4367C9TvFe1q6WzdV6E=
Subject key identifier: A7:3D:8D:A1:C6:37:12:D1:57:E6:E6:03:1D:9C:2C:CA:F7:09:99:79
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 018F3440EBBE2116053D3CB707DA350954EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 039A
Signing time: Wed 01 May 2024 13:03:40 +0000
Manifest this update: Wed 01 May 2024 13:03:40 +0000
Manifest next update: Thu 02 May 2024 13:03:40 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: paQfZHWpewI/Qe1GT+/uxSbUCRmeIX1SOb8v15DnxNo=)
2: HCAGV0GA-oqIG2fP1OBzOjNi5cc.roa (hash: UMzo6Zazj7XP+EQEGkg8nJvk7IaUakl6cvCza0uK4zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:40:eb:be:21:16:05:3d:3c:b7:07:da:35:09:54:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: May 1 13:03:40 2024 GMT
Not After : May 2 13:03:40 2024 GMT
Subject: CN=a73d8da1c63712d157e6e6031d9c2ccaf7099979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:c8:ec:8a:ae:93:19:60:e1:64:09:fb:d8:
b2:d2:85:a6:11:0a:5d:32:ae:2f:d1:d5:ed:33:9b:
4a:d4:49:33:50:74:d7:e3:30:f9:d5:15:fd:c8:c9:
11:89:9b:37:40:dc:aa:59:d7:2e:32:86:7c:19:60:
0b:23:70:36:1f:be:93:f0:85:2f:8e:23:26:e3:f8:
8c:0e:87:c5:ff:c1:12:fa:3d:91:1e:11:e7:77:5c:
1e:13:37:05:e9:f3:7d:8b:b0:7f:57:70:d7:64:03:
b7:9c:2f:55:9f:06:d1:d5:b5:3d:7b:3c:37:fa:76:
d6:b7:6a:ad:5a:14:96:5e:39:00:ea:0a:f2:5e:12:
f0:5f:cc:7e:72:55:2f:98:03:71:b5:2e:c9:5f:45:
7b:be:f1:90:2a:b8:41:fb:fd:fb:53:61:e9:cf:70:
92:4b:7f:35:ba:f3:03:db:06:80:94:fe:fc:16:e0:
d7:b8:a4:03:ed:48:a9:b2:86:a4:43:75:c3:91:e8:
81:e3:58:9e:de:86:e3:e4:d8:8e:a6:5d:82:94:48:
22:84:b0:ff:5e:23:a2:6b:ae:c5:b0:e0:4b:4e:17:
ab:c6:48:f2:a1:13:79:84:0f:52:4b:08:dc:9d:9e:
66:58:ef:b7:1c:4f:31:3f:13:19:8d:d3:29:a1:b7:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:8D:A1:C6:37:12:D1:57:E6:E6:03:1D:9C:2C:CA:F7:09:99:79
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fa:f1:0c:88:77:61:30:29:f4:11:cc:84:93:6f:df:ad:2f:
e1:7d:1c:65:7a:e0:3c:de:30:83:5b:44:ce:31:38:90:45:b5:
9d:42:55:a7:33:ea:a9:51:a0:fc:83:c3:9a:f6:b6:09:15:e5:
17:96:b6:ed:f6:55:d0:7a:de:4d:15:23:92:47:f1:ed:5c:f7:
53:10:98:01:e6:3a:28:57:1a:d5:1c:f0:26:d1:08:7d:ea:e0:
70:e0:4e:32:ba:5b:49:ed:58:b7:e8:81:32:41:13:f3:50:fa:
3c:ec:ce:a8:9f:2a:e6:12:b9:eb:12:11:9d:db:2a:77:a7:5d:
5b:a4:e7:21:61:e1:85:5a:dc:22:74:27:69:a2:e6:a5:7f:fa:
4e:1f:48:9f:db:b2:9f:74:ea:2b:63:f9:7e:4d:dc:da:fd:64:
c0:13:6e:35:48:8c:f9:b8:d4:19:d3:14:42:92:d1:e4:e4:4a:
6d:eb:e1:ed:22:18:6e:94:50:d1:89:b9:34:b3:7a:b9:8f:68:
7f:f0:4a:de:22:26:0e:0a:bf:19:6f:19:c9:92:76:44:63:a4:
cf:29:dd:df:01:d0:77:5c:85:35:5c:e3:3f:f7:67:43:fb:db:
ce:be:13:d0:60:a9:50:91:f2:c4:4d:4f:03:e1:f6:8e:a0:22:
ef:27:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:24 2024 by rpki-client on console-ams.rpki-client.org