Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: 1kkKEpgbM6RRVeOQZiGDPjzYrlmX/Qmc9jHmwroz/Uw=
Subject key identifier: DF:38:24:1E:06:93:F3:6B:1D:D0:F8:95:FB:1B:1E:DD:C9:CD:91:F7
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 0190452F96116C847B3C28EC4B1B797A8FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 10AC
Signing time: Sun 23 Jun 2024 13:01:04 +0000
Manifest this update: Sun 23 Jun 2024 13:01:04 +0000
Manifest next update: Mon 24 Jun 2024 13:01:04 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: TRCsSW3INIEzBbiquVNCETiDUxfRjRzqP+qYdy9gKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:96:11:6c:84:7b:3c:28:ec:4b:1b:79:7a:8f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Jun 23 13:01:04 2024 GMT
Not After : Jun 24 13:01:04 2024 GMT
Subject: CN=df38241e0693f36b1dd0f895fb1b1eddc9cd91f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:a4:ed:f6:57:64:5f:39:db:df:57:36:74:
a6:e0:bb:f8:eb:c3:2b:23:df:27:00:5e:8f:e7:e9:
ed:93:03:3e:12:21:e6:01:7f:0e:fd:54:65:c8:bc:
5c:8d:bc:ab:a4:1e:46:ee:a5:8f:91:c8:84:74:d8:
41:4f:ad:9e:5d:a9:35:14:d7:d7:eb:09:8f:de:7f:
cb:59:83:25:77:bb:b9:ba:bc:eb:89:a4:24:54:e4:
35:79:ca:61:37:4a:94:79:4a:ff:98:ca:9e:ea:47:
c9:74:71:de:e4:87:1f:8d:9e:a6:58:e1:ea:57:c3:
7e:bd:07:06:b1:5c:9e:7e:5f:a8:77:a3:57:ad:67:
ac:12:b2:f5:92:34:b6:30:6b:70:d0:16:ad:8e:df:
dd:55:c7:e2:5a:54:47:a5:98:88:8e:b9:5b:d0:d5:
de:73:3e:32:ca:08:cf:6b:66:b1:80:01:04:0f:f4:
13:e8:c2:ca:bb:eb:44:bb:ee:3e:96:61:72:59:b6:
eb:51:ed:85:c2:a0:3d:16:89:92:63:22:fe:73:57:
6e:4f:1d:61:6f:11:e9:0b:e7:ad:2e:81:0a:f6:3f:
4d:b9:b3:b4:33:0c:37:64:5d:15:be:c6:14:3b:7a:
dc:bb:a2:a5:f7:37:e9:fb:ee:15:d7:b3:f8:ce:50:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:24:1E:06:93:F3:6B:1D:D0:F8:95:FB:1B:1E:DD:C9:CD:91:F7
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:85:42:56:04:5b:c3:db:70:ac:c4:21:11:b8:16:e3:64:94:
28:0a:56:4a:c6:a1:26:1b:70:8a:39:3b:dd:25:a5:1a:1e:4b:
f1:d9:f5:ec:d6:09:b3:38:d2:28:21:f5:42:02:b8:ea:e7:9b:
e0:22:9a:c3:60:a5:7d:cd:5e:bc:59:36:d6:5a:7a:8b:ce:48:
c1:40:e9:01:a8:b6:ba:b7:eb:a7:af:4a:77:33:bd:32:45:6e:
f2:26:ab:ef:5e:87:64:ba:41:a4:02:f1:30:a4:69:a0:ab:fa:
98:dc:df:bd:ba:5d:70:2c:1f:4e:25:ac:b5:84:25:ba:ce:59:
a1:d1:c2:e1:7e:01:12:f9:27:17:8f:59:ea:b4:2c:c1:e9:53:
be:f2:a3:b7:a7:1d:b0:e2:27:12:e9:67:b3:74:da:02:54:8e:
d8:7a:56:f8:11:5d:17:82:3b:05:d1:a2:3b:0e:ad:6a:c7:4e:
09:d3:a0:79:f1:30:ac:28:ed:dc:be:1d:3a:07:45:d0:4e:74:
1d:f8:27:05:05:e6:c3:c2:53:01:4a:5a:75:de:38:b9:af:66:
d3:83:f0:69:c5:d5:5d:0a:c4:ee:58:99:33:2b:7f:d8:63:5d:
46:cb:06:21:bc:13:4f:c6:69:0f:6a:30:6c:e7:a4:0b:7b:2f:
84:cf:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:30:21 2024 by rpki-client on console-ams.rpki-client.org