Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: NzfxHz9wPkQD7A/8BzbfE6WQpYq21V74h7XO9D04g2o=
Subject key identifier: 77:D9:F3:41:D1:74:77:BE:CA:E8:5A:64:A3:A2:A5:1D:AB:71:32:1B
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 018F86A3AF57D2B8455DF32A1CCC42FFD423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 10F6
Signing time: Fri 17 May 2024 13:00:25 +0000
Manifest this update: Fri 17 May 2024 13:00:25 +0000
Manifest next update: Sat 18 May 2024 13:00:25 +0000
Files and hashes: 1: OgIdxk6GslVlDbMHpIULE7ALTsY.roa (hash: XYfrqmQ+runluozRN5WGsTswfZXTk7AL0YYKC9kqxoo=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: /ZO1UjmSt4lXD1z8ogRF+FqbGEHYBUYmkRhwX1RXYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:af:57:d2:b8:45:5d:f3:2a:1c:cc:42:ff:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: May 17 13:00:25 2024 GMT
Not After : May 18 13:00:25 2024 GMT
Subject: CN=77d9f341d17477becae85a64a3a2a51dab71321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:4f:06:0d:81:f0:74:27:ff:1f:f1:f0:22:
37:b2:a1:1e:8d:a0:0f:cc:8f:67:76:99:64:b8:34:
d2:0b:a5:b7:61:32:1d:60:c8:53:7a:67:40:02:cb:
4d:ff:9c:9b:33:77:21:40:41:b3:62:37:cd:6e:b7:
92:a1:e3:d9:a4:54:d2:3b:40:4d:a9:94:85:89:66:
46:4b:e8:38:5c:8a:67:c1:6a:65:79:34:a2:02:1f:
98:a4:a7:08:c3:2b:35:58:d1:f6:1d:07:b3:6a:5f:
13:ea:27:db:5e:6e:61:e4:9e:5c:b0:b0:0e:c5:a5:
14:33:52:95:bb:b5:1f:a1:7f:17:b1:7f:be:45:d4:
b2:d8:ce:18:91:b6:ca:9e:1d:5f:17:10:0e:51:1b:
0a:bc:fa:96:5d:dd:7b:77:56:2e:e4:52:3a:34:2c:
b1:53:a1:2b:c6:50:11:c0:d5:66:5a:75:27:56:be:
3c:dc:a7:d9:cc:06:20:dc:74:a0:0a:c4:11:80:c5:
92:f8:f8:f3:0f:00:9b:e1:85:b6:7e:be:25:32:68:
88:27:65:b3:c6:d4:02:57:42:47:1d:88:c7:38:94:
a5:46:c1:6c:34:e5:32:9b:75:8b:ba:78:c8:19:1e:
a3:32:7c:6d:66:6d:be:15:3f:ad:fe:31:d8:a6:34:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:F3:41:D1:74:77:BE:CA:E8:5A:64:A3:A2:A5:1D:AB:71:32:1B
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:0b:74:41:60:4b:21:75:21:45:6f:cc:c6:6e:e6:d3:eb:
06:26:66:4e:a3:51:a9:ca:3a:af:69:72:50:30:ef:fd:22:b1:
fe:15:f6:70:16:13:3c:42:df:4f:5c:c6:a2:df:d3:fd:bf:42:
8d:74:46:f9:bf:56:fe:d5:30:c1:97:cd:3a:95:29:69:b4:6a:
aa:aa:ac:27:f4:f8:86:d3:04:7f:7f:ea:30:15:8d:c5:c2:54:
f3:62:95:47:25:a9:ea:14:95:16:62:6c:8f:69:b6:6d:bb:bf:
f9:51:c8:9d:7e:2d:1b:4d:8d:2b:43:d0:a0:31:0a:53:fe:6d:
65:fa:32:32:dc:61:97:f8:25:0c:96:5b:a5:d5:3f:3a:72:20:
c4:04:c5:24:d7:6c:32:34:6e:d4:8e:3e:4f:f9:6e:d2:ba:3c:
37:9f:74:d5:dc:a6:5a:40:b3:53:95:dc:6b:e8:4d:83:db:2f:
71:91:ee:1f:ac:a7:2a:ae:86:7d:ba:f3:32:78:07:33:ca:9a:
5b:02:84:d3:7d:ef:32:78:ab:41:b6:82:c4:87:ea:0b:c1:20:
c0:6f:bc:3e:97:8d:3a:ed:de:34:5f:e1:5a:06:ef:2b:1e:99:
bc:03:02:b0:60:1a:0a:a1:d9:68:ab:28:f5:fe:ff:14:5f:80:
dd:a7:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:50 2024 by rpki-client on console-fra.rpki-client.org