Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: ZipQBR/b+dOlNdlKG+C1CaqxZtTpLpwuxQQEl6SpD5k=
Subject key identifier: C8:6F:F8:D6:3A:A1:F0:7A:60:07:EC:01:F0:07:1F:63:74:7E:53:67
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 01901EC699278C1A93D88946CD0614B2A026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 11C5
Signing time: Sun 16 Jun 2024 02:00:50 +0000
Manifest this update: Sun 16 Jun 2024 02:00:50 +0000
Manifest next update: Mon 17 Jun 2024 02:00:50 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: xzUlFFrHH5lzbutKly3XbI8pr1TC5VyUzaMZvWMX0ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:99:27:8c:1a:93:d8:89:46:cd:06:14:b2:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Jun 16 02:00:50 2024 GMT
Not After : Jun 17 02:00:50 2024 GMT
Subject: CN=c86ff8d63aa1f07a6007ec01f0071f63747e5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:37:ea:43:ce:aa:1f:44:79:53:53:c2:ac:
36:7c:46:d8:8b:96:cf:6a:25:23:3f:9d:2b:8d:b7:
f8:ca:47:79:b4:e5:38:44:34:62:b3:9f:29:ab:b7:
37:a2:b9:de:cf:23:eb:2c:43:09:ea:43:01:be:1b:
7d:6b:12:ef:68:42:c1:e3:60:b3:22:ea:02:f6:da:
15:ee:11:f8:c1:0e:3c:79:7d:c7:20:ee:ed:9a:28:
c3:1c:b8:0a:ed:5d:d4:25:62:43:87:ec:4c:75:e8:
19:27:af:40:d9:75:9e:ef:ac:69:d7:c8:3b:f7:e7:
d2:10:f2:02:25:75:2a:e8:2b:cc:0d:76:69:71:63:
51:43:9b:a8:83:7c:f8:48:fc:06:2d:af:8b:1f:be:
0a:f1:e6:23:58:1c:a7:70:6a:9d:07:9d:14:5e:89:
b0:d2:15:bb:e3:6e:fb:67:34:df:6a:57:d3:2a:89:
bb:2c:33:82:9f:ff:f5:a0:0e:99:58:3e:45:eb:df:
a4:56:e8:73:a8:63:5e:63:48:46:71:09:58:4c:72:
d7:57:1d:be:64:45:7b:06:fe:77:bd:f1:d7:88:6b:
04:1f:5d:3c:27:61:27:85:98:bd:88:b0:32:bc:05:
49:11:9f:e2:16:86:d5:e8:ae:a3:07:16:2f:4c:62:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:F8:D6:3A:A1:F0:7A:60:07:EC:01:F0:07:1F:63:74:7E:53:67
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:86:84:5c:6b:58:63:5d:36:be:4c:6b:8d:9e:a6:10:e9:7b:
ad:7d:30:d1:7d:95:88:09:2c:c1:d2:38:85:4e:71:d3:4f:28:
19:c4:08:d9:0e:16:64:0e:a2:2c:04:b2:67:ba:2e:70:d8:b1:
cb:82:9d:e7:a6:76:8a:f8:86:fa:36:ae:3a:11:5f:fa:3e:8b:
15:6a:5c:c8:38:47:a7:5f:65:5f:c0:f7:78:f6:d2:de:86:df:
b2:61:dc:e5:82:21:21:bd:fa:bb:ef:b7:f2:c8:01:30:63:ba:
df:08:89:56:9c:09:f6:67:1a:a2:64:38:08:92:44:4b:cf:aa:
8c:6c:5c:6f:f8:96:19:d3:da:b9:11:66:97:63:41:88:c3:b2:
bd:e3:ef:74:30:3c:e1:66:6c:c4:f6:c2:d1:0d:6c:e9:2d:c2:
d5:c1:e7:7a:74:c5:e0:76:18:cc:ad:8c:9b:ab:45:d6:b3:a8:
02:ad:d4:4d:cf:34:e8:fd:12:b3:29:91:60:34:95:0d:00:84:
12:12:1e:95:5a:f9:24:b0:66:60:45:9a:2d:78:10:2a:4d:d5:
a4:86:b2:65:23:d4:c1:43:e4:89:a4:c3:57:35:22:f4:92:5a:
e5:f4:cd:3e:f7:a9:d4:e8:54:80:9c:69:7e:07:db:18:82:5b:
a9:e6:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:55:08 2024 by rpki-client on console-fra.rpki-client.org