Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: eVqO7gmcnwt9nYtqgH28v+34Zx8MXTWBIXj7U+6bGUc=
Subject key identifier: 63:C6:4A:AA:F0:ED:95:15:E5:B4:0B:BD:40:38:A5:8B:AC:6D:87:0E
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 018F87B6A53A0CA2F9BECD413C74C031CE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 0D61
Signing time: Fri 17 May 2024 18:00:44 +0000
Manifest this update: Fri 17 May 2024 18:00:44 +0000
Manifest next update: Sat 18 May 2024 18:00:44 +0000
Files and hashes: 1: oD_g4M274kVWEaO7NMoUuVgRxlg.roa (hash: O44lE9SzBo6+VGW6ni9ArdDou2E+53Jc6E+gGaSrPIE=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: KrTYjsGhfHHk+PAYCQiuRc4nWfPJaatarQ8jo71c2Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:a5:3a:0c:a2:f9:be:cd:41:3c:74:c0:31:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: May 17 18:00:44 2024 GMT
Not After : May 18 18:00:44 2024 GMT
Subject: CN=63c64aaaf0ed9515e5b40bbd4038a58bac6d870e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:1c:00:0e:52:be:6e:98:c6:54:2c:f5:93:
03:4a:a8:50:b1:5c:eb:1b:02:14:91:7f:36:75:5e:
f4:8a:b3:68:1d:e7:16:5d:15:b6:b6:6d:3a:a2:2d:
6c:bb:b7:c4:e8:97:bf:b0:08:49:48:87:8e:a6:b3:
8c:ca:8e:50:1c:05:15:d3:30:81:61:30:6b:2b:f4:
3f:83:ce:ea:68:a2:35:4d:75:c0:40:57:0a:48:e1:
35:5c:2a:25:bb:01:a7:47:f9:a5:27:93:84:3e:db:
bb:cd:39:20:b3:2a:f4:73:dc:1d:23:86:bd:81:29:
d0:9a:05:44:e1:f5:3e:28:d9:6c:4e:aa:e2:8b:7b:
a8:58:84:89:d1:53:a8:8b:be:4e:10:63:32:0d:8f:
a0:ea:41:e4:2e:74:80:e2:c0:5c:03:fc:79:fe:d8:
06:03:01:0c:4f:b5:a2:78:a6:3c:86:1c:94:d6:a0:
53:11:68:1d:05:89:02:25:09:e5:f8:21:bf:05:78:
32:ce:2a:6e:5c:a2:63:0e:5a:a0:7f:f9:7a:63:a3:
6e:44:9d:16:ea:8f:65:2f:81:c7:73:42:27:a3:5b:
51:fd:30:cc:ab:57:cb:6b:3c:0c:3d:ce:b2:ce:d9:
79:ac:ce:b8:04:cb:fb:37:b9:b8:f2:02:6a:e5:22:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:4A:AA:F0:ED:95:15:E5:B4:0B:BD:40:38:A5:8B:AC:6D:87:0E
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:fa:6d:11:aa:2f:a1:4b:44:0e:3c:a2:f4:b0:a4:dd:d6:
c4:ab:39:78:9e:13:32:82:6b:e6:e1:28:2e:45:df:52:34:97:
65:08:30:0a:cb:04:d5:7a:4c:29:01:02:96:ec:b7:bb:27:59:
69:a3:66:14:5d:0a:af:34:9f:ca:90:f8:f1:f4:0a:20:0c:54:
c8:63:a7:8b:c1:97:34:75:9c:1c:18:db:8f:e7:03:98:71:56:
3f:ce:65:24:d4:3c:dd:c1:cc:48:93:04:60:e8:74:1d:bc:f7:
3c:57:b2:e7:89:f0:9a:53:32:41:ce:71:4f:3c:56:7c:3c:6b:
2e:35:59:89:c9:c9:d4:67:bd:22:d5:01:97:e3:82:cb:07:00:
f1:d8:7d:cd:2a:d7:eb:82:3c:51:cb:47:f1:3a:f6:1b:75:01:
90:d4:0c:b3:2a:37:8e:00:02:0a:77:89:54:ca:75:21:26:d4:
5b:82:c2:3f:8d:3e:7a:93:6a:ba:18:b5:ca:38:1b:af:77:9e:
95:29:23:7b:f0:92:8b:bd:93:d3:ab:b3:7d:a0:da:16:f2:b5:
a4:df:4a:2d:0f:e7:d2:f8:42:c0:81:23:03:85:67:d8:0b:11:
16:16:78:87:5b:a5:60:ec:27:e7:01:64:0f:cb:1a:3f:33:e4:
bd:53:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:04 2024 by rpki-client on console-fra.rpki-client.org