Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
File: OkGxVaq20SKf00jqoD0PeQPxJno.mft (raw, json)
Hash identifier: sramfDw3oMDlL2A13DZADjfORm/13vUd40H0LxdGZ1Q=
Subject key identifier: 01:84:80:93:E1:BF:3B:52:2C:66:42:79:C5:FA:52:49:04:A3:B9:11
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 019044F8D7AB2150F395718B99B7D6B94FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
Manifest number: 0CE0
Signing time: Sun 23 Jun 2024 12:01:17 +0000
Manifest this update: Sun 23 Jun 2024 12:01:17 +0000
Manifest next update: Mon 24 Jun 2024 12:01:17 +0000
Files and hashes: 1: 61-rGEbSQyHAtyvdUUVFeX8CZDc.roa (hash: W+gJHwCoJVv2zr1lMHxbjUeMGc2KFHB9jjEeCuM4tRQ=)
2: OkGxVaq20SKf00jqoD0PeQPxJno.crl (hash: MzyFs2xmmrCPG7sSqYDPgLC+5FzqzDkL9Bh4gYgeY1M=)
3: aIn5VocAfgcXju73DFiM7lGZ9f8.roa (hash: JoK+0MwNBoQNYWeXDayMK3fPHwUxNjei98s8pjAHkA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:d7:ab:21:50:f3:95:71:8b:99:b7:d6:b9:4f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Jun 23 12:01:17 2024 GMT
Not After : Jun 24 12:01:17 2024 GMT
Subject: CN=01848093e1bf3b522c664279c5fa524904a3b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:07:8f:16:53:7a:91:ac:82:58:67:c3:59:
62:99:e0:51:18:a9:99:a0:d2:95:f1:95:d3:2e:4b:
88:64:c2:bb:9b:6d:96:b8:d0:c6:e3:7e:92:51:ce:
61:93:48:70:c2:82:19:8b:f0:42:77:f8:8e:a4:a2:
11:9a:21:14:de:3e:fe:9c:2f:1c:22:db:15:a5:1d:
47:68:74:cb:77:1e:ad:bb:28:e9:57:cf:a9:21:01:
e8:a0:9a:89:6b:4b:d2:f4:37:49:80:6b:70:a0:11:
fe:08:fd:11:7c:b7:de:8d:ed:3a:9d:ea:70:b1:89:
96:3d:00:46:81:ed:8b:e9:54:cd:4b:99:6f:80:20:
a9:f3:3b:00:95:8d:9a:97:58:98:9d:90:9d:a0:a4:
f8:02:62:fd:16:3a:13:62:38:f2:56:90:b6:0c:24:
30:7d:ed:2f:a7:db:32:dc:08:0b:47:41:49:09:f5:
16:b5:71:a8:2d:33:92:fd:41:b4:b1:04:98:bb:03:
bf:a9:be:32:c6:8b:19:d6:9b:6c:f6:c2:dc:a1:81:
8b:02:8d:30:bf:e6:2e:1e:08:71:f2:f3:38:49:d2:
ed:b5:40:56:45:21:47:7b:9e:29:7d:a2:54:95:a9:
04:d9:43:1a:98:22:6a:7b:8a:73:12:79:e0:37:a3:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:80:93:E1:BF:3B:52:2C:66:42:79:C5:FA:52:49:04:A3:B9:11
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:65:8f:5e:1a:36:90:e1:43:c9:9d:21:58:cd:1f:a8:bc:
4c:54:21:22:45:45:ca:44:31:4b:10:37:ea:6a:b8:57:6b:4a:
52:f6:8e:40:36:0e:18:13:c5:24:53:b1:56:65:15:4d:c0:8f:
e2:6b:8c:7a:e5:d5:f4:74:41:e9:4b:4f:80:69:2b:d0:74:b7:
65:d5:5c:f5:f0:f9:ef:23:da:42:1a:a9:fb:af:79:17:58:bd:
00:28:83:aa:02:e7:08:89:94:0b:94:45:cd:33:7c:16:57:e3:
f7:2a:b4:7e:1d:44:2e:dc:b9:2b:e6:30:a8:1f:dd:c8:3e:ff:
ca:00:af:de:c0:bd:d6:0b:27:dd:13:f2:88:f9:f1:70:c0:19:
22:76:7f:8c:e3:16:97:cc:db:36:bc:d3:87:8f:dc:82:41:ae:
19:0a:8f:06:36:d4:9d:9a:cd:97:60:cc:28:21:d6:73:c9:31:
0f:f7:2a:7a:a8:a7:3b:2c:65:06:b5:60:f9:a2:5e:10:a8:d5:
63:a6:35:22:92:ca:75:98:00:ee:f6:28:83:b9:15:49:fc:ea:
f2:9f:73:e5:b7:8b:97:0c:8a:6b:be:2c:33:f7:ca:e1:61:2e:
53:d0:de:a7:4a:b9:7e:47:b5:0c:21:1f:55:22:ce:71:4f:50:
10:e3:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:53:51 2024 by rpki-client on console-ams.rpki-client.org