Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: hHL9NkoIuBqDbj0kNO1h8WpIOh3U4gnCUj3lZ+Gz0+Y=
Subject key identifier: 1D:0C:EB:73:EA:81:71:45:96:F6:22:AC:4F:51:1C:76:88:F9:C3:06
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 018FD82DD796978205B212D7EA7D96754049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0A88
Signing time: Sun 02 Jun 2024 09:00:33 +0000
Manifest this update: Sun 02 Jun 2024 09:00:33 +0000
Manifest next update: Mon 03 Jun 2024 09:00:33 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: oyo2z6bhRymVv/GPo4+gs7e1EWjWUjwaHnq4Sc3MiT4=)
2: F5E0_JeT5mFa4ip6RXLxbkO73KE.roa (hash: Uhn6RdxWpAQsFOOesm23TbAexpsuOC4GC1WOw/xfjwE=)
3: wkxXq3P8dQqFNbN4qKHoqzui_YA.roa (hash: eauT8dVnb45Uy5OdYP6OMOy/tYoWYlq2lFkLIPa05W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:2d:d7:96:97:82:05:b2:12:d7:ea:7d:96:75:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jun 2 09:00:33 2024 GMT
Not After : Jun 3 09:00:33 2024 GMT
Subject: CN=1d0ceb73ea81714596f622ac4f511c7688f9c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:3c:6a:4c:3a:ca:d4:9e:03:a2:36:9c:80:
61:35:b0:87:48:ea:81:9c:86:b8:34:46:6f:98:e7:
f0:3f:a8:d3:aa:b9:53:84:26:ce:2d:5c:31:d7:04:
9f:cf:1e:8c:3e:31:23:c0:b9:5a:34:9f:0e:f7:4b:
86:7f:a3:94:5d:f0:64:dd:a0:43:6f:c5:8b:73:5d:
12:18:9d:86:f3:96:d5:ae:c3:8a:a7:b4:a7:18:82:
6a:be:5c:a6:06:03:74:f6:a6:40:4e:4e:f9:75:cc:
ad:9a:fe:91:e1:9e:2c:64:24:75:e7:02:6b:e6:2d:
82:01:4c:82:95:d7:01:9f:1f:24:69:cc:82:5d:90:
f8:b1:fe:b4:54:44:75:b9:59:4d:a7:6b:7a:d5:32:
38:21:f8:1a:c4:a3:a0:8a:2c:89:f8:a6:b8:95:6e:
d7:19:5c:2d:5f:3e:10:ad:c5:ec:81:ff:d9:5e:f5:
7f:b5:64:43:60:41:70:1c:79:7c:85:70:f0:37:11:
0e:7f:f2:94:a3:71:6e:72:ae:18:78:05:86:da:61:
dd:33:53:f1:51:8a:d3:29:f1:ec:b2:ac:2e:f5:0d:
3a:64:c2:d5:8f:95:e4:2f:71:28:b9:80:84:92:12:
c9:2e:3b:89:7a:ed:87:6f:0d:da:d9:3b:cd:dc:50:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:EB:73:EA:81:71:45:96:F6:22:AC:4F:51:1C:76:88:F9:C3:06
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a3:6c:28:bd:5b:46:a0:17:c9:ee:84:c7:c8:76:e3:90:f8:
88:e2:1b:ac:e7:f2:98:45:38:ec:11:77:86:c3:31:f6:60:25:
08:46:d2:ee:d2:51:a7:bc:09:23:a0:0e:e6:57:0e:29:fe:0d:
bb:91:5f:cc:3b:1a:5a:71:db:51:78:ca:7f:8a:0e:d3:66:8a:
5f:12:a0:e0:23:67:0f:55:b7:53:73:da:70:9a:2e:e5:7f:21:
ae:18:96:da:26:20:62:2d:d2:57:23:5b:c9:76:a2:b4:db:73:
f5:e6:fe:24:bf:cf:4b:41:4f:24:ae:ee:29:b3:aa:57:2a:6d:
3f:48:7c:df:e1:b9:44:96:11:5a:8a:cd:c9:92:00:7c:f7:a1:
35:fb:3b:92:4e:38:ba:ef:90:9e:41:2f:97:e3:d3:b4:3f:5e:
d4:4e:39:a6:8a:57:f2:16:8c:ad:22:53:ea:a1:e3:2c:37:2f:
d3:a2:d0:b3:f9:c3:d2:74:33:d8:1f:ce:da:76:c5:d3:43:70:
98:15:f5:95:6f:b1:fc:0b:97:24:34:9a:92:e4:d2:bd:88:a8:
07:59:c3:9b:9c:7d:1b:a1:08:ff:64:e0:e8:f9:f5:ac:d1:fa:
79:49:2c:34:a3:b6:a3:ea:0a:e1:b3:b6:b7:c1:2b:6a:30:fc:
4e:b9:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:55:17 2024 by rpki-client on console-fra.rpki-client.org