Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
File: OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft (raw, json)
Hash identifier: NPmyP/nVvj+57w9Z3p3XcZxjNTqJJDuAmboh+eSfA+0=
Subject key identifier: 70:61:10:67:71:01:F0:D2:3B:51:26:89:84:6D:DC:5E:EC:BF:FF:A0
Authority key identifier: 39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
Certificate issuer: /CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Certificate serial: 01901CD899D4D46F42BD7A232EE749132B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 17:01:15 +0000
Manifest this update: Sat 15 Jun 2024 17:01:15 +0000
Manifest next update: Sun 16 Jun 2024 17:01:15 +0000
Files and hashes: 1: OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl (hash: KMeTI+4EcMkSV9QbfS7CxEQeU6WBi2ohqnpGP/QK7b0=)
2: kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa (hash: MwxoHM3vEk3eb7cvcq7ElEp7kNipwz1Q047cRcbqBUI=)
3: lyTCERDgv679X47XBAMqB-8Ezmk.roa (hash: 4S1nWM1QowUDpbMkoufqHf+Vxw6dUug0Jrl3MyzQ4T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:99:d4:d4:6f:42:bd:7a:23:2e:e7:49:13:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Validity
Not Before: Jun 15 17:01:15 2024 GMT
Not After : Jun 16 17:01:15 2024 GMT
Subject: CN=706110677101f0d23b512689846ddc5eecbfffa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:7c:fc:07:95:c3:cf:a0:ac:f1:8e:de:5d:
c5:0e:f2:0d:6c:ad:9e:a3:cf:fd:5e:63:0c:9b:13:
73:42:89:cf:3d:42:30:af:2f:17:e0:77:e2:84:8c:
9b:85:26:ec:f2:51:9f:15:55:af:5c:db:eb:02:56:
90:82:28:7f:59:28:92:e3:16:d5:7c:68:fc:69:46:
eb:a8:4a:b8:4c:33:0f:92:af:79:2b:56:7b:7a:09:
89:94:42:ff:93:45:1f:84:4e:74:3f:9e:21:91:ef:
95:f6:3e:67:8b:9e:3b:74:76:1b:91:d8:81:4f:5a:
db:74:f1:39:5b:09:76:a0:20:8f:b1:1e:dd:b3:46:
c0:ce:c6:e9:6a:2f:26:20:73:c0:0a:a2:c8:67:59:
95:59:8d:0a:26:1c:21:52:0b:da:b1:28:db:9f:1f:
0e:16:00:3c:da:83:e8:5f:66:d6:57:18:e7:8b:d3:
55:38:24:0d:42:df:d2:ac:c3:de:1c:62:57:ca:d1:
65:3f:10:dd:8a:98:29:f6:ca:51:46:7d:cb:fc:5b:
a4:fb:27:96:17:59:42:d4:4f:31:e6:25:31:e7:ac:
09:88:d2:e7:7b:dc:27:d3:f2:e3:f9:ac:64:fe:aa:
0f:b8:a2:94:b3:57:c1:f9:e6:50:8f:3e:3f:13:a2:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:10:67:71:01:F0:D2:3B:51:26:89:84:6D:DC:5E:EC:BF:FF:A0
X509v3 Authority Key Identifier:
keyid:39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c1:05:95:bd:75:ab:b8:75:ee:36:5d:f8:6d:8d:2a:bd:a8:
ab:40:f2:ab:84:4a:27:66:19:77:2a:8d:69:54:9f:b5:12:c7:
be:05:67:85:26:fc:f0:5e:23:b8:f8:76:b9:2d:4b:cd:db:b9:
c0:1c:7a:06:4c:89:c6:8d:dd:bd:bd:ea:17:be:fc:ef:9b:84:
80:3c:31:d1:c5:90:92:02:40:ef:da:d0:de:99:7b:b3:1d:4e:
87:c2:a5:e6:17:6a:5a:ec:51:ae:16:d4:00:b2:cb:fd:34:c9:
7f:79:a2:be:43:37:1a:45:00:b8:bd:1a:9e:81:6e:20:39:2d:
af:e7:b5:0b:e7:88:2b:2b:46:61:18:9e:31:24:96:86:77:39:
a4:e2:0d:37:1f:98:02:4e:54:7d:5c:ac:5d:93:61:2a:f7:c6:
5d:5c:ad:d6:8a:88:d9:83:ea:12:09:e6:23:f2:c6:de:5e:a2:
0e:c7:cc:d9:c7:63:2b:87:27:33:4f:bd:db:34:f9:39:72:86:
72:78:b3:59:c9:d9:19:4d:f9:c2:cb:47:47:7b:63:11:15:fa:
bb:fa:79:0f:6a:20:78:ba:7b:91:a4:98:32:bb:68:53:8a:a4:
d4:bc:8b:ea:48:9c:8a:1c:d8:6a:56:14:fa:07:61:88:b6:e4:
6d:cb:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:43:10 2024 by rpki-client on console-fra.rpki-client.org