Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
File: oPedxcyv8VxqShP9qLcaj7drgow.mft (raw, json)
Hash identifier: cLkI01TRxGkUdrxQtuYg49kRUu6NUd78uK0nOXSDdMo=
Subject key identifier: 9B:A9:B4:2D:63:83:0D:8C:EB:2C:E0:5E:CE:98:30:09:71:34:B6:CE
Authority key identifier: A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
Certificate issuer: /CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Certificate serial: 019040AF863DD5A671FA2E5940D5216EB810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
Manifest number: 0426
Signing time: Sat 22 Jun 2024 16:02:43 +0000
Manifest this update: Sat 22 Jun 2024 16:02:43 +0000
Manifest next update: Sun 23 Jun 2024 16:02:43 +0000
Files and hashes: 1: oPedxcyv8VxqShP9qLcaj7drgow.crl (hash: KyAVBx12I2WmwlPbXS7BtlmiYnUWzh7D3T8xDfzjAos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:af:86:3d:d5:a6:71:fa:2e:59:40:d5:21:6e:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Validity
Not Before: Jun 22 16:02:43 2024 GMT
Not After : Jun 23 16:02:43 2024 GMT
Subject: CN=9ba9b42d63830d8ceb2ce05ece9830097134b6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:1c:d3:22:dc:1c:6c:b4:6e:31:c0:63:b3:
77:5f:d3:2d:59:de:ec:4f:ab:58:a0:e1:a3:e5:a1:
cd:17:28:db:83:22:ab:74:b1:f8:2a:31:5c:46:2b:
48:99:f4:c3:cf:df:6b:bf:89:9f:3e:a5:ce:18:05:
46:39:71:5d:ea:aa:f2:35:e1:5a:b6:c7:01:a0:3c:
b5:b3:0a:e6:2e:a5:67:7f:3c:7b:77:e5:b2:4e:db:
a9:a9:43:96:49:22:39:c3:8f:bf:b8:d2:24:68:1a:
62:65:85:d7:5b:43:23:45:6f:4e:67:14:40:62:06:
64:5f:d9:fd:6d:74:77:a2:a0:9f:4c:2f:58:da:23:
f6:e4:1c:8b:58:d7:77:99:be:40:fe:b9:0a:ff:3a:
7e:b5:3a:cd:b3:25:d1:cb:99:5e:83:ef:bd:3b:b0:
61:40:6e:7b:05:68:d2:4c:9a:e0:52:e1:cc:b5:aa:
6a:4d:44:64:b9:07:26:27:74:50:6c:23:84:d9:8e:
1e:6d:8e:cd:d5:10:f0:4a:78:c6:49:cb:32:10:28:
e2:50:b8:2a:84:8c:37:0b:b8:c7:92:92:e6:fe:fa:
74:20:d3:38:69:e0:67:eb:79:39:33:47:90:2a:0a:
d6:a0:f4:f3:36:ac:3f:75:63:f6:14:f6:78:e7:48:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A9:B4:2D:63:83:0D:8C:EB:2C:E0:5E:CE:98:30:09:71:34:B6:CE
X509v3 Authority Key Identifier:
keyid:A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b4:2a:f4:68:55:72:dc:14:37:bb:f6:e2:82:50:05:20:c1:
2c:a9:72:59:b0:dd:b4:82:28:a9:5b:d2:f1:4a:fc:ad:d9:3c:
ef:f0:a4:ea:a7:8a:79:a9:55:59:74:7c:4f:0b:23:c2:42:a1:
86:a3:ba:75:50:4a:ea:8c:4a:41:14:20:02:81:75:58:e4:e0:
aa:58:ea:ad:54:c8:fc:1a:d4:75:8a:67:0b:48:e4:6f:73:d5:
1d:b7:02:f9:64:f4:08:92:95:84:2e:ae:0f:13:b8:e0:89:a3:
34:63:2c:f1:ce:ed:b0:16:68:ac:65:3a:3a:a0:b4:f1:98:bd:
6d:bb:4d:ae:64:12:b3:a5:d9:86:1a:8d:f4:67:cf:b3:89:12:
fc:85:52:5f:97:d8:52:a6:47:12:ac:5e:54:ba:8e:8e:b8:04:
1c:00:10:6d:70:6d:d3:b2:a3:2e:dd:14:03:34:d4:93:c5:b2:
10:61:21:0d:a0:da:bb:9a:97:59:5a:59:16:2f:7b:0c:c9:c3:
26:5a:c7:2d:49:77:74:55:62:c0:0f:93:2a:5b:3c:af:7b:5e:
b8:bb:48:80:58:b2:bd:1d:6e:bf:b4:81:a7:34:79:f4:84:dc:
2c:97:fb:35:f5:e5:47:ce:56:46:23:e2:a3:bb:31:13:67:05:
ed:a4:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:45 2024 by rpki-client on console-fra.rpki-client.org