Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.mft
File: rK7JVPR2937xozthnUSlcwvr178.mft (raw, json)
Hash identifier: r0aCH/skmhbxQ2bZf4FzpzxJGQ80SLz0joMtglc8nv4=
Subject key identifier: AF:3D:F5:DC:0D:77:0A:A1:80:12:44:E4:E6:35:26:0C:97:A1:1A:A1
Authority key identifier: AC:AE:C9:54:F4:76:F7:7E:F1:A3:3B:61:9D:44:A5:73:0B:EB:D7:BF
Certificate issuer: /CN=acaec954f476f77ef1a33b619d44a5730bebd7bf
Certificate serial: 01906B9881BAE2B1D7DE8190E7CEBA8F2C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK7JVPR2937xozthnUSlcwvr178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.mft
Manifest number: 0C98
Signing time: Mon 01 Jul 2024 00:01:15 +0000
Manifest this update: Mon 01 Jul 2024 00:01:15 +0000
Manifest next update: Tue 02 Jul 2024 00:01:15 +0000
Files and hashes: 1: 9v0pcjqLca1PxwtXAyi2tIbYKB4.roa (hash: 0ZyHILMmXFP1SkSvHJkkOZ6S2yOtgKK3MuomUBpLQks=)
2: QIUOVfb5jhSP19zw-AfJZDEBSDQ.roa (hash: /f8XESytBDCef7DcXpH/WMjEpqm/kxED5HRmB6fJIDA=)
3: rK7JVPR2937xozthnUSlcwvr178.crl (hash: MXpB4TvA8OGSogYswIH1Ut39592hOzL+uWN6acYLNbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK7JVPR2937xozthnUSlcwvr178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:98:81:ba:e2:b1:d7:de:81:90:e7:ce:ba:8f:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaec954f476f77ef1a33b619d44a5730bebd7bf
Validity
Not Before: Jul 1 00:01:15 2024 GMT
Not After : Jul 2 00:01:15 2024 GMT
Subject: CN=af3df5dc0d770aa1801244e4e635260c97a11aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:73:48:87:ef:4c:d9:be:47:09:db:4c:5c:
f4:71:b7:49:e0:e6:da:7a:a3:bb:fe:ce:24:4b:47:
d6:6f:c9:d3:2e:cc:68:9b:05:00:27:a1:27:5a:a1:
f0:cb:0f:09:09:99:cc:29:8f:e9:72:9e:8b:8c:23:
c6:bc:54:b8:c7:e4:e8:d3:95:87:92:ec:f8:3c:15:
53:a3:57:a6:53:48:da:2a:ed:ca:6f:f0:10:f6:fc:
a7:d1:f6:4c:8f:01:eb:c4:a3:bd:39:f9:17:f9:c5:
aa:69:31:4d:1f:d6:71:b1:72:89:24:5d:b3:c3:e7:
cc:1d:e3:4e:83:67:16:26:72:aa:64:c1:ed:20:19:
f9:86:05:2c:a3:0e:d5:93:ed:84:38:b0:6a:f3:c6:
5b:35:56:9f:a2:a9:7a:51:f2:75:11:14:07:d0:80:
89:5a:25:a5:b7:07:ce:1e:6a:0c:33:bf:3a:df:ef:
c3:dd:8a:14:14:bf:a0:42:c3:42:a2:ba:f5:00:b1:
2f:08:d2:db:7d:04:9f:5c:dc:3e:49:18:b8:eb:2d:
78:27:de:6b:a4:b9:59:35:e7:2a:c3:bb:cb:e6:c6:
af:2b:a9:81:c8:a7:e8:5a:03:3d:9b:b3:90:68:df:
90:3d:1f:a2:dc:5b:bf:6f:e8:16:73:e6:10:d0:13:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:F5:DC:0D:77:0A:A1:80:12:44:E4:E6:35:26:0C:97:A1:1A:A1
X509v3 Authority Key Identifier:
keyid:AC:AE:C9:54:F4:76:F7:7E:F1:A3:3B:61:9D:44:A5:73:0B:EB:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK7JVPR2937xozthnUSlcwvr178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2eb41a-6fa6-416b-8752-36ef73f2c900/1/rK7JVPR2937xozthnUSlcwvr178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:ad:1b:04:42:c0:af:84:09:36:7d:b7:ed:e4:81:dc:86:
6c:ed:c1:c6:76:ef:70:e5:64:6a:70:d0:fa:cd:9a:2c:82:4d:
c3:b8:94:cb:29:04:ad:c2:71:d3:03:d8:74:04:6e:4a:ae:fe:
d0:ce:0e:97:f2:76:ba:10:62:2b:f7:94:b1:fa:50:05:a1:fb:
f1:33:8a:8d:bc:f5:c1:13:28:c7:fd:1d:ed:6c:e1:7e:9d:a0:
27:8c:02:83:0d:4d:24:58:b5:4f:ca:e1:a1:00:3a:03:36:c3:
13:b9:0a:4c:a6:59:71:d2:c8:ac:09:7f:be:77:f3:c9:26:b6:
dc:52:4d:38:cd:56:0c:db:06:64:db:8a:16:99:b8:23:45:a7:
f4:0f:c0:bc:71:cc:d0:e7:2d:03:62:dd:1f:7a:cf:f4:8b:05:
5e:9c:4a:cf:08:0c:bc:65:1b:30:1f:52:b2:2d:c3:95:b0:90:
80:22:5e:0c:56:04:98:2f:8a:4f:c0:3f:42:e3:42:25:89:31:
4e:53:2a:64:b9:2c:88:fc:8f:e0:b2:9d:ce:7d:dd:39:06:d3:
26:c6:1a:66:d3:d6:c2:fc:cf:53:7f:94:8c:7d:83:52:b2:7f:
af:02:89:ee:0d:da:dd:d7:16:60:f6:43:88:b0:65:21:d5:24:
98:04:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 07:57:50 2024 by rpki-client on console.sobornost.net