Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
File: OQlq7uS6fDS4EkCtSRrEba90wx0.mft (raw, json)
Hash identifier: VsvuxipumH+sLJ0cEW75MTkE1cn6BjFOXwSTkD6yscM=
Subject key identifier: A0:5D:CF:BA:C0:86:C6:6A:41:FD:D8:71:CD:EA:DC:6F:A1:35:0B:AB
Authority key identifier: 39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
Certificate issuer: /CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Certificate serial: 01901E902B04F9DE7D8EC47508416A9647AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
Manifest number: 11C4
Signing time: Sun 16 Jun 2024 01:01:23 +0000
Manifest this update: Sun 16 Jun 2024 01:01:23 +0000
Manifest next update: Mon 17 Jun 2024 01:01:23 +0000
Files and hashes: 1: OQlq7uS6fDS4EkCtSRrEba90wx0.crl (hash: eJvdZEWGk3N1mPSYLGLLXLpmYTmSOttYvDBeGnmjd0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:2b:04:f9:de:7d:8e:c4:75:08:41:6a:96:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Validity
Not Before: Jun 16 01:01:23 2024 GMT
Not After : Jun 17 01:01:23 2024 GMT
Subject: CN=a05dcfbac086c66a41fdd871cdeadc6fa1350bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:3f:c7:23:3f:ed:e2:33:40:47:47:38:43:
a2:21:0d:91:78:89:9d:d2:42:cc:bc:25:72:49:45:
29:b4:b6:0c:51:bc:a6:6a:f7:b5:29:78:d3:81:14:
ef:05:d8:1e:5f:1d:d7:15:5d:91:8e:94:49:6f:b0:
44:2f:d3:0b:62:b6:69:f0:3e:b2:c5:4a:00:80:fd:
22:d9:cd:8f:38:74:39:1f:2d:aa:51:a5:f7:e2:06:
29:12:55:c0:98:3d:99:8e:26:4d:19:f7:37:e2:03:
2a:0e:46:7c:f1:bf:51:42:72:13:76:0f:05:ea:10:
85:83:c7:f0:2c:f4:0b:88:ca:ca:5e:e6:59:99:e7:
96:37:ed:17:16:10:12:c3:67:b7:c8:64:9a:0b:c2:
9d:12:9c:93:41:6e:b4:9d:dc:fd:72:1d:4b:c0:fb:
8e:b4:07:90:3f:12:23:1e:44:56:73:ff:a1:5c:eb:
41:70:06:d6:f9:12:7f:6e:61:bc:e4:d5:56:6e:38:
e8:9f:3d:11:a2:be:2e:9b:b2:f0:4f:f0:36:46:f7:
08:c0:93:44:d1:8d:10:f8:99:ba:ea:76:f1:da:83:
00:16:de:14:c1:0f:81:24:b9:ea:1a:bf:7c:86:95:
49:38:1e:53:b7:64:59:85:85:f8:15:32:aa:64:4e:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:CF:BA:C0:86:C6:6A:41:FD:D8:71:CD:EA:DC:6F:A1:35:0B:AB
X509v3 Authority Key Identifier:
keyid:39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ec:8a:7b:e2:80:9f:a0:35:4c:ca:77:b8:d8:e6:6f:85:62:
9c:01:f8:30:3d:99:9e:0e:cf:dd:7c:b3:8a:53:bb:2a:d3:11:
10:56:94:1e:01:7c:a0:e5:1b:67:0d:69:1a:07:97:1c:b2:b4:
ea:88:7a:f9:c8:81:65:2b:42:9b:86:38:94:0b:24:be:56:0d:
95:53:93:dc:ab:1a:6f:b2:04:20:39:c9:53:e6:8d:28:da:32:
69:e4:d7:f3:9b:c7:23:59:e2:23:72:33:1b:05:65:6d:11:d7:
81:c6:f9:60:59:03:b3:de:d4:68:a7:fa:73:10:e7:57:61:0b:
56:03:b2:c1:86:48:2a:a7:49:b9:e0:91:c2:d7:cd:d1:79:59:
6c:0b:50:cc:53:29:80:66:1a:64:30:65:5b:b0:0b:5f:08:57:
41:fa:94:5c:3e:5a:f5:b7:12:8f:b1:04:3c:3d:e3:b5:b9:82:
5d:4c:bc:d1:6e:d8:8d:1f:3b:e6:3d:29:6d:15:fa:df:a9:df:
ed:d3:e0:cf:a5:da:fe:ce:ca:3f:bb:30:ff:82:71:06:cb:6d:
97:7b:f9:1a:50:37:70:9f:e9:ae:8f:f8:42:77:39:89:ab:f0:
a3:dd:63:0d:b1:69:0b:3e:4d:7b:fa:da:3d:64:85:14:d4:a4:
d5:63:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:46 2024 by rpki-client on console-fra.rpki-client.org