Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: qnOVoMPRA1DuUka9rwh8pfHJsYn6PNq+ZhopbfEJi5A=
Subject key identifier: 12:1B:DC:D5:67:DD:12:51:09:FD:BA:04:C7:32:A4:13:45:BC:32:CF
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 018F88246968556B89866C43FC59D703262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 20:00:38 +0000
Manifest this update: Fri 17 May 2024 20:00:38 +0000
Manifest next update: Sat 18 May 2024 20:00:38 +0000
Files and hashes: 1: A2xZwRkF2X8PIHuoozy9-AhHCUA.roa (hash: t67D9obj2Ugypjg/4nkVuNhYkvTOPg/8KPctZfzv/qk=)
2: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: aW+9Pb7XB1ILCwYnBFCEsxksNJaa/Dkgsz6ZZgdvAhs=)
3: qP64VpuSIppLb1vh70EOv62wZH4.roa (hash: 7aPcDNpGWyLeskQDiuUSlVlOlmSteKrHfdRU1dsI4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:69:68:55:6b:89:86:6c:43:fc:59:d7:03:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: May 17 20:00:38 2024 GMT
Not After : May 18 20:00:38 2024 GMT
Subject: CN=121bdcd567dd125109fdba04c732a41345bc32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:dd:2a:2d:2d:95:18:b4:23:f9:f7:3d:1d:
3e:16:b8:d4:ab:e9:9e:11:4c:7f:af:20:30:b6:f3:
21:44:dc:91:8c:be:16:70:ed:59:04:bf:ea:83:7c:
10:57:11:76:6b:3a:d4:50:8b:a8:2f:5f:43:ba:ca:
4e:aa:df:d3:c5:94:7d:22:3c:75:c9:42:91:7e:5a:
04:fa:62:a4:cc:7f:5c:48:3d:0e:ab:5d:e6:db:20:
f4:7e:86:97:2c:fd:82:8c:51:9b:4c:95:f9:15:32:
eb:4d:0c:3a:46:ab:41:48:aa:94:5c:6e:7f:d8:72:
ad:34:d6:da:d3:17:77:6e:88:a4:b3:11:31:c3:d1:
82:bc:94:32:72:55:04:c3:da:99:b1:ed:fd:cc:14:
c9:fc:3e:cf:e3:4a:d6:a7:ff:c9:fe:3f:d4:07:d2:
35:cb:e6:89:3d:4f:5d:8d:d6:e0:c7:8a:3e:e2:f0:
ff:d3:ec:c3:0f:ef:81:57:37:09:b2:77:13:8f:7d:
c2:83:d2:53:ae:74:1d:68:55:f3:c0:64:01:49:e9:
02:b5:33:8d:6c:cd:90:cd:58:a5:3e:39:79:a7:53:
59:07:ea:8f:7d:fa:26:92:9b:2d:d9:af:f8:43:0a:
ca:e4:57:f2:4f:b1:70:af:32:ba:8c:ee:b3:84:13:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:DC:D5:67:DD:12:51:09:FD:BA:04:C7:32:A4:13:45:BC:32:CF
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:64:cd:c2:5a:14:04:f3:64:a8:46:9b:78:74:1b:02:8b:98:
19:99:33:56:db:67:48:a1:1e:a8:fc:5c:e1:e6:b1:85:7d:cf:
c9:bd:8f:c1:16:4b:6d:37:c5:46:63:99:b5:ad:9e:a2:e5:4c:
91:21:f6:56:49:d3:ae:f3:8a:db:13:55:03:b1:67:af:30:ea:
c8:43:89:fd:7c:70:09:c2:4c:08:1a:ff:6e:95:f1:d2:66:36:
07:73:b5:9a:f1:ee:17:f1:67:e4:25:dd:47:58:1f:9e:03:0d:
9d:ca:87:a8:df:96:a5:3b:e7:ce:a3:d1:c0:5e:28:38:dd:6f:
7e:ae:e0:ba:dc:d9:4d:43:00:a3:19:18:06:43:7b:38:cb:86:
95:ec:e9:0e:22:0f:cc:e6:64:33:45:a3:9e:70:aa:b8:e0:1b:
b9:d9:31:e1:0e:bb:9d:d8:0c:90:63:e2:e9:ec:96:52:2e:c3:
e2:d5:e0:e2:09:8e:2e:3a:49:d6:04:f5:2c:7b:47:9c:7e:b9:
1c:37:7b:2a:2b:d4:16:e0:92:ef:b7:8b:c8:11:db:2b:db:31:
cb:17:e1:34:30:6e:f5:93:2e:46:24:06:36:9e:f4:77:8a:8b:
5e:5d:3f:cb:be:07:3d:f8:b1:6f:b1:fb:83:68:ad:f0:6b:ad:
fa:b9:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:11:17 2024 by rpki-client on console-ams.rpki-client.org