Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: EAHhh/9i2/KRhO9xLpi2At9Ys6aWu6g/4I2BcXyCIYA=
Subject key identifier: 7F:06:DB:47:76:5D:35:A4:FC:D9:7A:FA:9B:20:B4:70:21:4F:E4:6E
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 01904152915CBBE44FE7CD6377463B180DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0A7F
Signing time: Sat 22 Jun 2024 19:00:48 +0000
Manifest this update: Sat 22 Jun 2024 19:00:48 +0000
Manifest next update: Sun 23 Jun 2024 19:00:48 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: maEr+NKPJ0vpdFALYJF9wWG+H/N/ySldWntP9p2hqrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:52:91:5c:bb:e4:4f:e7:cd:63:77:46:3b:18:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Jun 22 19:00:48 2024 GMT
Not After : Jun 23 19:00:48 2024 GMT
Subject: CN=7f06db47765d35a4fcd97afa9b20b470214fe46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:11:2c:93:ec:75:0d:b8:a4:11:2e:78:f5:
2d:08:39:cd:bd:1a:81:bd:cf:98:dd:79:a1:ca:86:
3d:89:d1:50:25:9a:9b:e1:15:62:64:9d:7b:d5:79:
a0:17:4b:cd:f5:f5:06:18:60:ff:60:b9:f9:9c:ab:
df:e1:54:ee:00:e4:01:ef:7a:f3:23:02:5c:d6:15:
28:cd:fd:dd:67:c0:25:25:f3:b3:e8:63:ab:48:d2:
74:57:3e:fc:d2:b2:9d:b9:fc:e7:8b:1a:ae:c3:7a:
9e:a3:f2:3d:e1:37:2c:96:88:99:47:77:a2:c4:89:
85:ab:71:e7:88:62:31:26:42:74:8d:1e:70:3f:2b:
64:41:69:79:3a:9c:ae:71:b6:96:83:c0:55:aa:73:
0a:70:d1:80:06:3c:2e:72:d7:06:63:9e:6e:c0:4e:
88:a1:87:4f:d7:32:bf:1e:f9:d7:9e:59:3d:c2:f5:
74:15:79:df:be:72:6c:a4:04:b6:3f:01:cc:f0:1e:
8b:e8:43:32:d4:be:5b:e5:3f:1e:ab:25:80:76:e8:
cc:74:09:64:a5:26:25:4f:43:eb:3b:8b:06:74:6c:
3c:40:93:09:cd:2b:df:d1:12:36:2a:f3:a8:3c:02:
65:5c:b7:33:49:bd:63:46:b9:c9:14:1b:9f:fc:ff:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:06:DB:47:76:5D:35:A4:FC:D9:7A:FA:9B:20:B4:70:21:4F:E4:6E
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:f8:38:95:bc:2d:53:51:17:d4:21:86:18:8c:c5:9c:0d:
75:19:47:05:fe:97:08:99:9c:c7:b2:72:cf:1f:53:70:7e:b8:
50:de:1d:78:ac:bf:17:ff:32:69:5c:41:a8:1d:a0:ba:ea:53:
15:4b:c8:f7:02:bb:f2:8b:55:be:22:0b:f0:b7:e1:44:d7:d6:
1b:60:57:22:6e:d3:ff:90:c2:20:7c:9b:89:f6:4d:e2:da:83:
ee:4d:6f:da:1b:22:66:12:96:99:50:1b:9f:5c:69:db:44:35:
e3:12:07:40:05:5f:a5:1a:29:c4:41:08:f9:a0:43:be:be:93:
91:3d:58:c6:b6:4b:3c:ad:6b:d3:e9:d4:fb:3f:27:3f:9f:80:
1e:f4:b4:4e:31:08:59:45:b7:38:66:6c:d8:b1:39:02:6c:3c:
3c:51:7b:9d:fc:26:1e:21:c4:3c:ea:f9:24:92:47:fe:af:79:
c5:cd:0b:19:fc:4c:0c:db:18:3e:6c:61:04:1b:19:38:e2:92:
b8:88:2e:1e:be:c7:e7:76:9f:0f:20:14:4a:38:20:ba:9b:5c:
af:31:08:00:68:e3:16:b2:9f:b2:3b:4a:2d:9a:2b:87:c1:af:
f0:f2:84:a8:18:f8:e6:f6:3d:8c:64:b9:08:c0:45:03:12:72:
a5:80:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:46:52 2024 by rpki-client on console-fra.rpki-client.org