Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json)
Hash identifier: L2Xr9uo0z8fQCn9NEKf49yfbrZ5pUBxRxM9k0/9DGKU=
Subject key identifier: 0E:D2:5C:05:6E:C0:F3:0C:31:B7:CA:8A:E7:CF:DB:63:C8:63:48:BC
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 01906F09308E611795CC47ADB0DD6F2C87F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
Manifest number: 0561
Signing time: Mon 01 Jul 2024 16:03:11 +0000
Manifest this update: Mon 01 Jul 2024 16:03:11 +0000
Manifest next update: Tue 02 Jul 2024 16:03:11 +0000
Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: EYGZ1Jy/yA7y6/RFf6gHJiQe6gl4tXYYCEMCTdxifVI=)
2: vEbk4ZcCPEY97zgF_QtDTLrij5I.roa (hash: uth1JJY3gauWIA/9Z6lzjtePFYmIM05ralciqYzWTSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:09:30:8e:61:17:95:cc:47:ad:b0:dd:6f:2c:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Jul 1 16:03:11 2024 GMT
Not After : Jul 2 16:03:11 2024 GMT
Subject: CN=0ed25c056ec0f30c31b7ca8ae7cfdb63c86348bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:4e:e5:e9:33:2c:b5:06:ee:27:a0:77:f2:
d4:fa:8c:d2:de:cc:4a:84:6f:8e:74:01:32:8d:18:
aa:bc:8c:48:38:76:d3:c0:bf:d5:73:09:41:53:8f:
d9:3a:97:cd:06:fb:5a:22:f0:f2:bb:c7:7c:4f:05:
3f:4d:25:9d:f4:3a:b3:8f:f3:34:8e:69:26:4a:54:
5c:77:58:20:12:0c:b2:27:bd:f2:a7:19:66:3d:94:
d9:4d:2a:79:d3:c8:2f:80:62:4d:09:b1:8f:72:9a:
ee:1f:8b:2a:6e:02:0d:59:31:fb:7e:9c:1a:e7:75:
ed:9f:59:42:ec:a6:18:45:de:27:15:66:6c:6c:34:
a7:bd:3f:d3:01:14:b1:7c:49:36:74:16:91:2e:96:
0a:b0:5d:87:d8:ec:6c:ea:c7:10:8b:42:6c:9c:44:
35:b7:95:95:7d:b1:e0:bb:4f:51:dd:a6:d8:63:7b:
c7:cd:e2:dd:81:36:c1:93:80:d9:38:b8:5c:37:71:
e8:59:55:70:8b:a9:da:30:c6:a4:f4:c1:32:d5:b1:
fb:42:bd:48:00:5b:25:51:5b:db:bb:4d:4a:54:2d:
e5:f4:fa:01:b4:2d:b5:5d:27:28:f2:21:cb:d7:af:
4f:83:de:7b:73:3e:7e:bf:30:f1:4a:6d:f6:ba:9e:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D2:5C:05:6E:C0:F3:0C:31:B7:CA:8A:E7:CF:DB:63:C8:63:48:BC
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f1:40:3b:1b:7f:02:68:0a:7b:a1:d4:a8:aa:19:63:97:1e:
62:c9:71:a1:47:a5:ee:03:4c:ad:69:cf:24:f2:f8:95:4e:be:
2a:ef:49:45:e2:b7:b2:c3:f1:7e:5d:65:b3:0b:e6:b8:60:97:
39:f2:8c:af:9d:2f:e3:ff:aa:50:5e:d3:07:9a:30:c3:93:34:
b9:3d:08:8d:c2:6d:3e:57:42:70:60:b0:03:9f:20:71:d5:9d:
f6:b3:4b:ef:bd:2e:6b:24:5d:ba:86:fb:3a:6f:fc:a6:db:78:
6a:14:66:fb:db:dc:b7:66:b2:c7:3a:9c:28:45:71:23:18:db:
11:9d:40:00:b5:6b:49:de:09:57:76:23:db:a2:62:26:40:10:
00:eb:db:18:27:47:bd:86:06:a5:57:1f:95:04:ee:72:8d:af:
e6:2c:ee:6a:8c:d0:41:78:10:92:54:cf:4c:6b:77:bd:57:c1:
65:8f:80:59:d7:3a:dc:e7:ac:b5:8e:97:b8:d2:4d:40:51:7e:
63:38:20:5e:29:6b:02:26:ea:83:c2:25:c5:4f:9e:9a:98:ab:
f2:6b:f2:cd:e8:dd:73:c2:aa:4f:0d:ef:1a:cd:0e:d0:9a:6a:
70:d0:99:bc:5d:62:fb:2d:b6:5c:06:8a:bd:49:17:7c:f1:03:
10:9a:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:17:56 2024 by rpki-client on console-ams.rpki-client.org