Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json)
Hash identifier: lYFAyASFx7/lZOkyw+gsGlJwUDvAM+0yTbwCsFK2+YM=
Subject key identifier: 1F:FD:FF:16:BB:CB:47:BE:C7:71:56:2C:28:A5:A1:21:A4:5E:24:2B
Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582
Certificate serial: 0190452F467F3BD97682C9587D4D1D27C3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
Manifest number: 086F
Signing time: Sun 23 Jun 2024 13:00:44 +0000
Manifest this update: Sun 23 Jun 2024 13:00:44 +0000
Manifest next update: Mon 24 Jun 2024 13:00:44 +0000
Files and hashes: 1: 3qlGGoCNkdp5ZwLZojGDebwbHcM.roa (hash: OFygbakWFiKAqj/cWffTnf5SCVZwfuE08URSjWM+92E=)
2: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: XaCGutpQZ3z6P3ETeNulrmcvmuFiSbwPHlvY4a0gh3Q=)
3: QVpFuu8b3M3SM3tYURtLx_63KgE.roa (hash: bd1+jvX9pSmYRn5RDTWfPknY/z2r97mBhvSxIh2QIaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:46:7f:3b:d9:76:82:c9:58:7d:4d:1d:27:c3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389755423f832a528c93136110f0fe4b10453582
Validity
Not Before: Jun 23 13:00:44 2024 GMT
Not After : Jun 24 13:00:44 2024 GMT
Subject: CN=1ffdff16bbcb47bec771562c28a5a121a45e242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:1b:ce:a1:23:78:3b:3b:f9:63:1e:a6:63:
41:be:c8:90:b2:d8:f3:1a:f0:30:8f:0e:82:0a:fd:
f7:18:a1:67:e2:2e:86:0d:25:f9:89:71:05:48:c7:
99:e2:8d:5e:30:e0:58:1c:ea:b8:a7:5c:21:83:7a:
4f:ff:ad:b3:17:6d:df:e7:9a:7b:00:c2:c4:ec:70:
80:1b:bd:4f:7f:9f:09:44:5d:0e:03:07:bb:b6:e9:
45:fe:05:eb:b4:e7:98:d2:4f:ad:0a:93:b7:d9:82:
eb:17:aa:31:3e:ea:b0:20:27:de:8b:87:d4:b3:bb:
ce:4e:9e:f0:a7:ef:fc:9f:f1:74:25:42:99:04:48:
7c:75:e2:e6:a9:66:2a:99:f3:c0:f7:47:91:cd:80:
df:96:34:f8:92:dd:f6:91:a7:6a:a8:fd:fb:40:3d:
37:b6:30:0e:f3:24:c0:be:29:ab:10:01:2e:ce:a6:
39:32:e6:96:20:f5:db:1d:00:fa:1d:5c:cf:e6:4e:
c9:69:be:a8:6b:2f:cc:34:cd:3d:47:05:ed:59:2c:
ec:1c:fd:60:3b:d6:73:79:e7:e0:00:80:b2:01:9b:
d2:15:4d:93:5f:64:5f:26:ba:e7:15:e0:4e:9a:84:
62:07:39:6f:b7:23:ee:2d:78:4a:81:30:65:a8:22:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:FF:16:BB:CB:47:BE:C7:71:56:2C:28:A5:A1:21:A4:5E:24:2B
X509v3 Authority Key Identifier:
keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:9f:7e:fe:2b:a6:1b:a8:ba:b2:02:51:15:46:a5:d4:93:
8a:d7:3b:85:a2:14:73:69:31:7f:b5:64:c1:83:e9:30:aa:f7:
cc:7c:23:86:67:fd:16:3e:fa:b8:95:c7:44:dc:b9:38:67:41:
d9:38:1e:96:62:cb:a8:01:d8:0e:5b:32:17:9d:6d:b4:ff:a8:
53:73:99:50:83:9f:55:f7:1e:f5:df:b2:58:b9:5f:c2:11:1c:
68:b7:65:b7:ef:86:b5:36:28:09:19:e1:e8:0e:63:22:84:95:
b8:4f:0e:6e:0f:30:d2:70:8b:3d:25:2f:4b:de:9b:e3:fa:4b:
9b:17:a1:05:90:fc:51:3a:14:6c:91:f7:97:63:73:ee:18:12:
f3:55:59:a8:d5:60:e7:b8:3b:1a:64:7c:11:30:2c:97:5e:9c:
9d:d1:40:16:63:09:33:e4:17:66:bc:fe:61:78:21:0a:7e:e4:
1c:92:09:63:7d:63:f1:6d:45:7a:61:4c:c4:d6:75:87:a2:88:
1d:22:73:94:e4:9f:0e:88:74:72:cc:80:19:78:0b:ec:1e:db:
86:b0:09:85:1f:ff:d3:16:30:6c:5b:c8:fd:71:5e:50:77:fb:
df:31:a2:b4:53:a4:cf:b7:a4:91:a5:a4:31:c7:90:f0:c8:8d:
16:19:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:58:18 2024 by rpki-client on console-fra.rpki-client.org