Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
File: oBhxQsOFxByo--yy9VpP_wB5vPQ.mft (raw, json)
Hash identifier: QULtIx2UcsdJ7aDVaLPhvNDYbKz5w5PHuCKrusSj1xQ=
Subject key identifier: 51:69:48:CF:B4:C3:DB:05:0D:50:B6:4A:0A:FD:4E:C2:82:50:5C:64
Authority key identifier: A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
Certificate issuer: /CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Certificate serial: 01923813D2AF662A88716EDF5385D146DC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
Manifest number: 05B6
Signing time: Sat 28 Sep 2024 10:01:16 +0000
Manifest this update: Sat 28 Sep 2024 10:01:16 +0000
Manifest next update: Sun 29 Sep 2024 10:01:16 +0000
Files and hashes: 1: oBhxQsOFxByo--yy9VpP_wB5vPQ.crl (hash: nkYfjIEZGTgCMBu7Gb/aSKo1XdZi5dyVYowWt7G5epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:13:d2:af:66:2a:88:71:6e:df:53:85:d1:46:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Validity
Not Before: Sep 28 10:01:16 2024 GMT
Not After : Sep 29 10:01:16 2024 GMT
Subject: CN=516948cfb4c3db050d50b64a0afd4ec282505c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:43:9f:ef:aa:5e:0f:b8:62:fe:6f:13:e6:
82:6f:05:42:37:ce:db:4e:57:f6:39:12:88:c4:39:
85:4f:bd:dc:4a:39:d7:90:e4:c3:d8:96:82:72:a4:
dd:e2:b9:9e:24:d7:b9:b4:12:63:29:c1:65:3c:ec:
23:94:8f:90:27:fb:b0:4b:6f:23:ef:76:ca:1e:c9:
df:e4:7e:43:57:f9:82:36:49:75:15:54:fc:9a:45:
f7:16:1c:2a:b5:8c:4d:d6:18:3d:1e:82:9f:7d:7d:
47:1b:47:10:2e:2d:72:d2:e2:e9:ea:ae:7d:bd:75:
93:44:b9:50:32:6e:56:28:d2:e5:12:0c:18:b2:5d:
12:2c:66:c6:16:3e:c3:90:6d:49:9f:84:71:d5:dc:
34:97:bb:ba:0e:2c:77:39:d1:18:76:10:ae:67:f0:
72:99:53:9a:2e:df:4e:94:ed:de:f9:f2:5c:2c:11:
eb:88:5e:16:27:a5:5f:bf:26:0b:20:c6:2d:01:e5:
78:93:ef:0d:7a:57:d4:a3:92:f6:81:5d:1a:81:0b:
ce:9c:24:b0:c1:2b:ea:8d:1f:5d:76:93:6f:15:46:
c9:df:c5:55:d4:4a:86:60:ac:e1:5b:4d:ee:65:64:
52:f0:da:f6:c0:b6:c1:2c:a8:c4:eb:03:ae:ea:f3:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:48:CF:B4:C3:DB:05:0D:50:B6:4A:0A:FD:4E:C2:82:50:5C:64
X509v3 Authority Key Identifier:
keyid:A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:34:8f:63:9f:70:54:78:bd:1f:39:b8:d0:33:08:4f:a5:
c7:e1:91:69:cb:54:c3:85:f9:84:2a:29:74:25:59:17:5d:7d:
ee:00:51:c1:fa:8e:38:14:ba:6c:a4:b2:78:df:a5:bd:d4:aa:
6d:f9:a4:87:dd:ff:ee:3e:31:fc:ea:04:59:21:6d:07:c2:f6:
9c:ae:b9:b8:70:f5:c8:6b:92:1f:1a:20:ea:25:14:05:a7:eb:
34:0a:a5:c8:4b:72:99:e4:75:6f:68:85:cf:30:23:63:32:77:
cc:e4:32:4b:72:52:27:52:3d:1c:37:af:8a:c8:fb:b7:cd:2d:
02:c7:93:e7:9e:dc:57:d4:15:ca:b0:f3:03:d4:fb:87:7c:86:
ee:e8:f6:7e:f4:55:ca:dd:63:5a:d6:70:bf:58:c1:93:f3:81:
bf:df:68:a8:68:20:65:87:7a:17:48:e1:0a:43:5d:74:7f:7f:
5d:9b:43:05:2d:69:fa:82:23:11:1b:21:40:c8:4c:8c:f5:5b:
09:1c:e0:33:76:bc:8f:e4:88:9b:e2:db:c2:4e:be:ef:32:fe:
0a:c3:f5:dd:86:52:fb:83:f1:b3:a0:8b:22:6e:74:6d:7d:1a:
ce:95:6d:cb:00:3c:ee:75:ca:d3:71:f2:61:45:f2:64:a1:19:
d3:55:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:42:39 2024 by rpki-client on console-ams.rpki-client.org