Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: 8rJ+EkKBbCnzmkC38JrthYSwJFLF2fMms9hEUXjPuSo=
Subject key identifier: D7:93:DF:B9:8B:5E:72:C4:E5:05:77:6D:D5:A3:96:D4:6F:45:4A:B5
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 01904566CD6EA281564CB3C79343C3D8B4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 11D9
Signing time: Sun 23 Jun 2024 14:01:23 +0000
Manifest this update: Sun 23 Jun 2024 14:01:23 +0000
Manifest next update: Mon 24 Jun 2024 14:01:23 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: ckrS77wvevMvuEGsITo+9zI9RRP8a4THIbOmof/VE88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:cd:6e:a2:81:56:4c:b3:c7:93:43:c3:d8:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Jun 23 14:01:23 2024 GMT
Not After : Jun 24 14:01:23 2024 GMT
Subject: CN=d793dfb98b5e72c4e505776dd5a396d46f454ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:eb:fa:19:cf:cf:bc:a2:7c:b0:d3:ef:39:
fc:ae:e8:ce:56:ff:41:eb:7c:cc:51:b2:b1:ac:df:
d0:c5:e8:60:6a:65:f7:0c:ad:ec:8f:85:96:c0:d6:
01:f1:10:18:09:87:9b:b0:b5:79:33:4a:ad:8c:14:
cb:93:d5:6f:77:d9:42:4b:bc:30:cd:fa:f2:8f:5f:
af:c6:20:43:a8:ea:75:8f:5b:bc:f8:0f:52:a1:b2:
5e:9d:b7:82:4f:cc:ba:a2:fa:4f:e6:9b:fc:f1:5c:
5a:90:86:13:1e:6c:d5:42:92:77:81:a0:bb:ad:f7:
52:aa:6a:2f:69:bb:a6:50:73:19:82:b7:fa:a7:85:
1d:e7:5d:80:36:a9:f4:a1:f3:d9:1a:6f:dd:74:1a:
a9:3b:a5:1a:5d:e8:df:59:77:f7:d6:f9:f5:47:0c:
76:7e:d0:f8:80:f9:95:f2:b2:d8:ba:06:24:04:10:
fe:58:70:e6:2e:df:d0:bd:26:81:fa:eb:31:7b:45:
2b:f7:ed:75:2c:e9:f5:af:56:c8:43:b1:a9:1e:f9:
2b:fd:83:dc:e8:c4:97:23:a3:65:d2:f4:c8:7d:a9:
38:3a:5e:b1:5b:c6:5d:9d:f5:f7:0c:6d:d7:b5:ce:
e7:d1:f9:fa:31:e4:d3:bb:67:2b:bc:f8:b6:f6:a4:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:DF:B9:8B:5E:72:C4:E5:05:77:6D:D5:A3:96:D4:6F:45:4A:B5
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:b9:e2:cc:34:ec:1c:59:97:80:93:2b:69:47:bc:97:ce:
98:ec:7c:6c:c4:89:5a:3a:40:e3:e1:e8:dc:9b:4e:92:e8:62:
8a:74:52:91:38:b0:60:16:d8:a7:51:b0:38:7a:6b:a5:ac:c8:
d8:8e:28:60:00:3e:1b:6d:07:22:9b:d8:66:9e:eb:6b:f1:81:
41:96:f4:0f:ab:b4:c7:5b:23:98:ab:2c:7e:3a:c8:13:bd:25:
a9:43:31:b4:83:e8:bc:0b:00:29:80:ee:72:02:96:32:1c:79:
39:62:f1:d0:d8:32:90:c9:1c:f8:d4:06:c9:07:e0:ad:c5:c0:
ff:c4:06:86:54:6f:d5:f1:05:81:89:4e:91:05:f5:09:46:91:
f2:08:f7:44:71:7f:5f:2a:c1:a8:82:e7:30:6d:62:0f:43:81:
5c:83:61:3f:a8:d2:47:45:38:c5:77:8a:ce:db:ab:d9:db:85:
39:29:c1:10:fb:af:36:74:4a:c2:c7:6f:32:fd:dd:94:a7:49:
47:4a:2a:2d:5a:51:22:f4:81:cb:7f:b7:b4:83:ed:18:7d:c8:
b6:52:6e:24:b8:c1:8a:2c:c7:df:a4:ad:45:9b:f8:be:14:e2:
59:8f:5d:0c:0d:44:93:94:7a:d0:5c:66:a0:7f:37:02:2a:9d:
a6:69:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:17 2024 by rpki-client on console-fra.rpki-client.org