Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
File: oUx52o8IwpnEYya3m55CTkmmh1s.mft (raw, json)
Hash identifier: DOs91+zDporpxIoIvsw71GXCU+vtpRBdyC8YJQR8jOQ=
Subject key identifier: BB:E4:7D:EE:0C:6E:9C:75:78:88:DF:75:63:62:8D:00:24:27:A0:02
Authority key identifier: A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
Certificate issuer: /CN=a14c79da8f08c299c46326b79b9e424e49a6875b
Certificate serial: 01901DEC875E7C2A4D268B7E078521870668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
Manifest number: 1156
Signing time: Sat 15 Jun 2024 22:02:38 +0000
Manifest this update: Sat 15 Jun 2024 22:02:38 +0000
Manifest next update: Sun 16 Jun 2024 22:02:38 +0000
Files and hashes: 1: oUx52o8IwpnEYya3m55CTkmmh1s.crl (hash: 7Vf7jVC/90vRAWX0PAbuXp0yB0zTTmkbqdBR8+uEPJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:87:5e:7c:2a:4d:26:8b:7e:07:85:21:87:06:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14c79da8f08c299c46326b79b9e424e49a6875b
Validity
Not Before: Jun 15 22:02:38 2024 GMT
Not After : Jun 16 22:02:38 2024 GMT
Subject: CN=bbe47dee0c6e9c757888df7563628d002427a002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:b8:ee:f2:15:ec:c7:40:45:8b:ee:46:31:
3d:09:9a:a4:9c:64:a1:d0:d9:88:5e:7a:14:81:62:
83:bd:24:ab:c7:8b:58:1e:52:f3:b9:3a:88:de:10:
70:c3:a4:c2:21:18:c4:a1:45:c9:2f:4b:37:5b:42:
fe:2c:fe:a4:da:cf:94:74:50:59:8c:24:07:21:ec:
f5:fc:eb:5b:65:b3:d1:21:aa:96:91:93:2f:7c:7c:
df:f3:64:33:a5:a8:84:c6:95:a8:4e:bc:f5:7e:f2:
f5:f6:98:63:c2:40:ee:5b:a9:e4:29:e4:75:7a:eb:
5f:29:0e:e9:51:48:17:9f:a3:0d:90:10:94:08:07:
7a:64:31:4d:c9:52:98:c7:9f:4a:29:49:5a:55:24:
2e:21:ef:e2:d9:0c:9b:0a:63:09:c3:66:1b:bf:cc:
61:32:4a:8f:43:1b:23:d4:3e:0a:d7:ca:cb:22:41:
20:38:40:ba:2e:8b:c4:ca:b5:37:b1:a4:ac:86:22:
22:d1:57:1e:65:41:d2:6b:ce:c7:b9:cf:ca:aa:15:
2e:45:be:fb:fc:98:77:ec:18:a1:c1:28:67:57:51:
e8:9e:0f:b5:7a:88:95:da:6f:4f:37:d0:28:51:02:
50:5c:ab:c9:ba:1e:ac:af:1a:c8:25:61:f4:77:aa:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:7D:EE:0C:6E:9C:75:78:88:DF:75:63:62:8D:00:24:27:A0:02
X509v3 Authority Key Identifier:
keyid:A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:7a:0b:98:21:39:db:f3:26:9b:37:e0:d7:0d:7b:bb:1e:
f9:e5:5c:a2:ad:33:e5:17:20:e0:59:0c:1b:a9:01:0f:a4:4d:
e9:f4:31:50:a3:83:75:4b:d9:5a:e7:28:17:8e:79:04:89:0f:
07:56:15:02:c4:9d:c5:cf:53:44:a0:45:6a:a3:cc:22:0d:ad:
66:86:3a:0f:8c:a3:65:01:45:5c:40:9a:06:c7:c4:e1:4b:37:
0f:b0:67:5f:f6:b2:20:ad:89:a4:9b:76:27:7c:19:78:6a:ac:
df:f0:6b:01:ca:48:78:b1:79:80:b8:23:e3:73:e8:8a:5d:58:
6e:bc:60:e4:a4:8a:3a:39:9e:99:32:03:c5:37:80:ba:4c:21:
ca:90:4d:d5:93:78:57:01:e8:e8:10:9f:f5:82:25:c9:58:c1:
fa:bb:ca:d9:7b:c7:89:c1:0d:16:db:c2:06:53:56:b0:a9:45:
70:53:91:09:c0:59:a3:97:6e:8d:d8:cd:ec:ee:e4:73:51:da:
5e:2e:55:bc:f8:4c:1f:14:8b:44:3e:87:b6:8c:4b:67:46:d7:
61:be:4d:78:6f:aa:08:6f:70:b9:8d:ce:e3:dd:c3:b0:2b:3a:
d5:c8:f1:cc:e7:06:4f:ee:75:24:e1:c5:d2:8c:5c:67:61:76:
8f:f6:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:08 2024 by rpki-client on console-ams.rpki-client.org