Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: 5uOsLLx9uLNkF+BdKtDfeEcbKItmtp24nKT9u9hW3rg=
Subject key identifier: 95:FB:36:A3:5F:78:F0:55:87:A9:3A:3A:D3:7B:03:32:F5:0B:0B:1A
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 01901E58EEE1BD830D5F48E30CCFBC19E058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 11B8
Signing time: Sun 16 Jun 2024 00:01:02 +0000
Manifest this update: Sun 16 Jun 2024 00:01:02 +0000
Manifest next update: Mon 17 Jun 2024 00:01:02 +0000
Files and hashes: 1: 06AoKiANfk2OcNcKhAbJ8-wS_lc.roa (hash: O5fLtuz0EMEoKtlzHOx0QxH/wnLA1vpFojlVK1Ne5bs=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: AuT4z4dogkYzHhOofNtSKo5uQKhIa0frUJW465QI3lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:ee:e1:bd:83:0d:5f:48:e3:0c:cf:bc:19:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Jun 16 00:01:02 2024 GMT
Not After : Jun 17 00:01:02 2024 GMT
Subject: CN=95fb36a35f78f05587a93a3ad37b0332f50b0b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:7a:02:38:92:84:a5:19:31:5e:37:45:7a:
97:05:a9:88:44:14:c2:a5:03:1f:32:15:e3:9b:60:
63:9c:f2:00:37:51:ca:6b:46:97:e7:e8:2a:6e:15:
0b:22:7e:82:f9:ec:75:60:7a:fd:e9:a8:a8:6e:cc:
86:74:c3:9f:80:24:3f:30:36:66:50:13:45:d4:c5:
30:31:f0:9c:2b:f4:26:5b:2e:18:61:fa:31:08:84:
77:e6:d9:73:b1:0f:6e:c6:c4:7d:92:24:e1:7d:22:
60:60:9e:e9:9d:bb:09:32:2f:3a:b6:0e:7a:bd:d6:
31:a1:f8:6e:88:bb:39:cd:b6:d1:3d:83:95:68:a1:
7b:c6:19:a6:82:1b:5b:12:d8:ca:c2:ee:c8:f0:33:
62:08:9c:44:1f:a5:39:47:6a:65:41:66:b4:2b:45:
91:81:f1:2d:76:3c:65:1f:fa:6d:00:d5:3e:62:00:
18:bd:fd:ed:46:31:87:7b:7c:00:4d:9e:dd:ab:42:
c2:c2:ae:36:ee:92:40:49:00:bf:2e:df:c9:0e:cc:
09:3e:e3:6c:98:12:bf:87:a0:d2:03:5a:f0:7c:eb:
40:d3:84:3c:06:f1:da:9c:96:ee:08:11:d5:6a:1c:
2e:e6:ef:4d:c8:60:22:b6:59:a0:2c:d5:c6:e1:76:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FB:36:A3:5F:78:F0:55:87:A9:3A:3A:D3:7B:03:32:F5:0B:0B:1A
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:52:dd:9c:a3:95:be:d8:34:01:f7:4a:df:2a:cf:1b:a6:
77:6f:44:b1:4d:32:09:a5:d3:60:97:e8:e0:ca:ed:bb:12:ad:
e0:0e:17:e8:1d:6c:7c:72:6e:e7:ab:8b:d3:b8:4f:db:b2:de:
48:5b:76:e5:97:a9:37:aa:27:10:4d:57:4e:b3:70:13:a7:4c:
ba:f4:39:8f:df:97:55:b3:0a:9b:d6:6a:99:2d:bd:d6:c4:15:
42:56:74:1a:46:70:bb:34:3d:0f:a8:76:4d:a9:40:2e:2a:f9:
9c:eb:76:27:f8:5e:81:00:d8:5f:5b:c2:44:27:ab:66:d2:49:
67:07:fc:b3:a1:1c:46:96:96:ff:4b:9a:b8:fb:e4:bb:31:6f:
e7:01:e3:ef:da:13:35:ba:a4:38:e9:c6:70:b0:b5:af:f5:4e:
08:8e:7f:e4:13:d6:a9:e3:5d:da:e9:f4:69:5e:fb:1d:80:7b:
78:b8:16:de:5d:9c:8b:8f:63:45:64:f2:e6:7f:5b:a9:7c:7b:
8c:32:93:16:37:53:0b:10:db:b9:94:2d:09:d7:f3:53:76:c7:
47:80:61:c6:c1:27:45:86:44:6a:bd:f1:24:3e:cf:be:16:56:
48:57:1b:40:b4:33:64:a4:45:34:31:9f:95:be:60:a8:4c:74:
6e:bf:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:33 2024 by rpki-client on console-ams.rpki-client.org