Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: vcETF8lcSHGdB9NBR6GISaBMdm+4BmvS5BRK+ifpxLw=
Subject key identifier: E8:AE:92:D2:42:85:D8:24:DF:7D:51:80:B2:17:B6:5D:5A:30:78:C9
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 01901EC6B5F37D2D0424E99DBF40C1BE8D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 11C7
Signing time: Sun 16 Jun 2024 02:00:57 +0000
Manifest this update: Sun 16 Jun 2024 02:00:57 +0000
Manifest next update: Mon 17 Jun 2024 02:00:57 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: Ws3L6u5RuuowRkGJu2ahNP3C/aVzCE/AkSh3XAvErEo=)
2: JxRLeDXWIQEVsvn6kXjvEX65gkQ.roa (hash: uRRLz6emT2cimBaPjSAggiBUt2m4Qx4negjpI2BOcnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:b5:f3:7d:2d:04:24:e9:9d:bf:40:c1:be:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jun 16 02:00:57 2024 GMT
Not After : Jun 17 02:00:57 2024 GMT
Subject: CN=e8ae92d24285d824df7d5180b217b65d5a3078c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:6b:90:58:a9:f8:ad:6f:04:41:1e:73:50:
d8:d6:c8:86:ee:92:6a:fe:cf:01:9a:3a:21:a7:8a:
cf:d0:6b:57:4d:aa:dd:a6:50:05:88:b9:83:f0:3a:
90:93:89:f8:55:52:94:bc:97:5b:82:54:aa:5f:15:
a0:1c:fd:f2:1d:a0:2f:ec:f1:53:fa:5b:b5:a6:6f:
e2:22:15:4c:fa:08:1a:14:9c:90:dc:d6:a1:b7:92:
fb:b5:d1:7d:7b:85:96:9b:4a:9d:2c:75:95:a5:d2:
58:35:e4:92:17:b3:35:cd:fc:22:0e:99:3b:dc:a0:
dc:14:12:75:17:f4:99:7e:cd:60:f0:56:eb:59:61:
e0:db:c6:b0:74:cf:56:4c:a2:9b:bd:fe:f3:41:17:
a8:e6:e4:6a:69:6a:f5:20:c0:65:62:59:9c:99:62:
09:50:aa:25:c4:6f:62:42:6a:bd:d9:a9:5a:34:fa:
ed:1a:a0:94:f1:b6:d3:e4:cf:5c:25:02:ed:0a:f6:
87:ff:d6:7c:36:07:dd:d6:35:8e:11:1c:de:e0:89:
a2:d8:4a:51:21:aa:ed:e7:4a:a7:be:e0:53:bf:66:
19:d6:93:2a:02:40:b6:73:6f:37:98:eb:eb:6f:ec:
71:c3:15:36:30:60:97:69:f3:2d:83:30:56:9f:b2:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:92:D2:42:85:D8:24:DF:7D:51:80:B2:17:B6:5D:5A:30:78:C9
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:0d:ca:40:97:7b:fb:84:71:4b:d2:f6:68:ce:a5:44:fa:
e8:79:df:d3:30:1c:36:eb:8a:9d:9f:43:29:9e:96:ee:b1:16:
cd:c4:6f:91:0b:0a:cf:d2:3e:05:5e:1e:76:28:19:b5:af:e4:
2e:ec:9d:9e:70:fd:5e:b9:27:9d:73:44:f1:49:70:36:12:ec:
8d:52:16:0d:4f:7c:5c:43:d9:32:7f:f8:1b:7a:62:de:f9:50:
0e:33:12:38:24:27:78:d1:24:ef:20:98:2b:d4:b6:38:ce:ef:
92:2c:46:9f:4e:df:a0:0c:c9:18:59:eb:5c:68:08:c3:da:e8:
b7:e4:11:d0:38:a1:fb:0b:47:48:a5:41:5c:1f:72:68:51:3e:
63:f4:92:6a:bd:c2:80:bf:ef:86:02:41:40:80:89:97:1a:14:
7a:c6:47:68:8f:3a:53:da:55:d4:f2:f0:db:6a:08:85:b4:37:
95:9e:98:11:13:31:45:9f:59:28:f7:20:74:7c:de:37:32:fe:
e6:c4:b5:39:bb:cb:69:b1:92:c9:75:2d:4c:a9:fc:7e:ed:91:
50:6f:fd:83:a7:1d:95:9b:c1:fb:08:61:0b:5e:95:21:41:fc:
b3:7a:7f:a1:a7:5b:6a:f0:19:a8:86:19:46:14:2d:34:ce:ce:
70:dd:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:32 2024 by rpki-client on console-ams.rpki-client.org