Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: GAz38Jijd2pNXZlpQlt6gMQZE27TmQ5Yy/V+CAUZpzU=
Subject key identifier: 63:84:EF:C5:5F:43:A9:D0:67:85:5E:0C:AA:46:83:CB:2A:7C:55:E6
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 01901E8FB5ABBE09065E59A9CF7D3BDADB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0A6D
Signing time: Sun 16 Jun 2024 01:00:52 +0000
Manifest this update: Sun 16 Jun 2024 01:00:52 +0000
Manifest next update: Mon 17 Jun 2024 01:00:52 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: EjnliWpRZ697zUcZ50+vMJdW0H5gzRDE/3trjj8F0is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:b5:ab:be:09:06:5e:59:a9:cf:7d:3b:da:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Jun 16 01:00:52 2024 GMT
Not After : Jun 17 01:00:52 2024 GMT
Subject: CN=6384efc55f43a9d067855e0caa4683cb2a7c55e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:8b:84:24:72:74:65:e2:18:15:48:5e:23:
1f:83:86:4d:a1:31:a2:bf:b4:87:12:5f:4f:63:3a:
a0:c2:0d:0d:14:db:fe:e6:f0:b8:de:86:a1:6e:ac:
e3:2f:99:11:93:69:24:da:c2:a8:93:01:79:27:64:
70:49:ec:a0:f2:65:77:a5:7f:05:ba:8b:32:a5:c2:
0a:2a:18:c1:b7:16:99:33:88:d9:71:f8:5f:ae:aa:
b5:19:72:30:0e:34:03:d9:d1:e5:48:f6:2f:71:6e:
81:76:d4:a3:6e:8d:57:f7:82:43:88:ea:3a:97:92:
15:27:77:0c:a4:2f:75:c6:d7:9d:01:41:cc:c6:56:
f5:4b:af:81:80:54:f9:7a:e9:f9:63:53:f3:e3:04:
07:e2:85:6c:5e:97:ba:3e:5e:1e:74:a4:7c:1c:6b:
a2:89:60:28:90:45:d5:bd:60:11:9c:de:e4:79:fc:
04:68:22:ca:5d:c2:92:2a:3b:bd:ad:1c:14:a4:77:
7c:f8:cf:99:aa:47:43:87:0d:89:8f:7f:d5:8c:00:
b6:31:10:aa:ae:be:26:61:6a:b4:77:c7:9a:af:ea:
08:79:c1:db:de:db:b9:e0:ff:14:e5:8a:82:2c:49:
a0:10:b3:1a:34:17:74:14:0b:98:0a:ec:15:ba:eb:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:EF:C5:5F:43:A9:D0:67:85:5E:0C:AA:46:83:CB:2A:7C:55:E6
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ea:f1:ae:17:22:f1:29:21:1e:06:4f:71:55:4c:5c:20:de:
b8:fc:e0:c8:37:47:b8:54:3c:69:25:7d:05:7b:63:9f:21:df:
38:61:92:a1:cc:6f:b9:18:85:6c:ae:a9:73:d1:97:92:47:32:
7b:e9:97:df:47:08:c8:15:87:70:a7:64:7c:d8:94:8f:4f:7e:
d6:49:d2:1e:3c:d7:bf:10:b4:04:5a:e7:33:e9:d1:66:c6:8a:
db:71:f3:3d:1c:d4:74:3e:59:1f:ed:a0:e1:20:a2:cf:03:92:
a6:b6:41:a7:9c:bc:a5:c1:2d:d6:bf:06:12:b9:98:e6:65:74:
07:76:7f:9a:2a:c9:0f:ae:48:0c:8f:6a:ad:c0:86:f1:8f:cd:
f5:7a:c8:09:46:23:ee:8a:8f:d0:13:c1:f4:72:56:14:ce:98:
95:65:c8:24:ab:f0:4b:f4:89:c0:4f:a0:bb:66:f6:75:86:14:
d5:b8:ac:9d:20:ba:21:1f:ee:dc:a7:cf:bd:fe:c3:cb:d6:5c:
09:1c:fe:e8:50:72:3e:01:4b:f9:11:7f:15:86:18:db:db:a1:
a6:2a:0e:7a:8f:c1:3a:43:67:44:e3:5d:c7:32:b2:59:e2:1a:
33:cc:c0:ae:bc:db:c5:5f:af:83:1a:39:54:3b:51:d6:08:c3:
47:0a:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:27:41 2024 by rpki-client on console-ams.rpki-client.org