Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
File: OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft (raw, json)
Hash identifier: tpnh8nWu/iFx08RLRT9LMR8/3nOaA/UkPUZFnvW9BeY=
Subject key identifier: 74:CF:9C:46:5F:04:DA:11:38:C4:78:90:18:E5:B7:80:8C:6A:63:6E
Authority key identifier: 39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E
Certificate issuer: /CN=395bc3a35ab3dc89f694037b6718872e0b482a3e
Certificate serial: 018F874972CB44A6F924F1E7AE373C5E1563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
Manifest number: 012A
Signing time: Fri 17 May 2024 16:01:28 +0000
Manifest this update: Fri 17 May 2024 16:01:28 +0000
Manifest next update: Sat 18 May 2024 16:01:28 +0000
Files and hashes: 1: OVvDo1qz3In2lAN7ZxiHLgtIKj4.crl (hash: YtcRfPUnxqwP+PZCNo3NwV/3yULfJYz7tSiAJJB1r5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:72:cb:44:a6:f9:24:f1:e7:ae:37:3c:5e:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=395bc3a35ab3dc89f694037b6718872e0b482a3e
Validity
Not Before: May 17 16:01:28 2024 GMT
Not After : May 18 16:01:28 2024 GMT
Subject: CN=74cf9c465f04da1138c4789018e5b7808c6a636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:dc:19:0f:4b:18:7d:d7:51:55:1f:a3:3d:
3e:3d:49:a5:f2:87:ca:16:e8:51:5e:ac:22:50:96:
d1:54:22:12:31:b0:e4:d0:a0:c8:70:d6:a5:09:98:
35:da:62:d8:91:df:21:7d:c2:63:fc:e5:96:08:d8:
a8:e9:37:f4:60:44:96:6a:b3:ef:f8:08:31:09:c5:
df:5c:46:56:f2:07:31:3c:f3:9c:2e:c2:e2:98:a5:
3c:5d:dd:77:6f:93:f7:3f:ae:5f:28:52:08:c3:b2:
7b:ea:8e:a5:2d:d4:ef:d4:32:65:82:1e:81:f0:51:
8c:d4:5f:6b:a3:c2:63:d7:c1:6a:fb:bd:b1:de:98:
49:d9:73:c9:85:3a:51:bb:d8:fe:6a:3a:d4:50:b0:
a7:64:3a:2a:15:15:2f:0b:71:90:51:e6:c8:79:12:
69:2c:c6:fd:b4:23:e6:e5:76:6c:fb:c2:e2:14:cb:
96:07:1a:0d:04:ed:d4:e1:08:00:6b:7a:14:91:d1:
c8:c0:80:41:fe:2f:ba:f0:b8:2c:71:35:f7:2e:71:
24:d9:57:13:de:e5:ef:13:da:38:28:bf:7a:1f:9a:
22:bb:4a:16:fa:54:0d:07:ac:bf:f2:57:d8:3b:82:
10:24:cb:3c:8c:56:fd:73:d7:97:68:85:46:ce:69:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:9C:46:5F:04:DA:11:38:C4:78:90:18:E5:B7:80:8C:6A:63:6E
X509v3 Authority Key Identifier:
keyid:39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:b5:65:78:37:e3:f7:5b:91:f3:64:09:ef:c1:62:00:64:
93:72:34:63:42:f8:75:db:05:af:df:5d:4a:43:a6:17:90:01:
3a:ae:31:f6:1f:8a:55:24:72:0a:88:d2:e4:ee:2c:b3:fe:59:
9d:c8:3a:ad:e9:6b:94:52:f6:e9:62:e7:63:bf:b4:1f:63:b2:
a1:62:9f:a8:9f:24:8d:6b:71:c2:0d:5c:c3:89:fe:25:5c:9d:
52:a5:48:d6:73:48:6a:9a:6e:6e:41:88:e2:64:6f:30:63:51:
e2:1a:44:8c:00:19:cd:8b:7f:e7:49:35:e1:90:08:0b:6a:4e:
6d:4e:88:a9:a0:b5:40:d3:40:7a:45:16:d6:a5:7d:5b:e6:62:
2f:d0:3f:85:14:4c:c9:d4:f5:35:e6:11:d4:eb:b1:fb:8b:f9:
d1:70:0d:87:9b:3b:91:48:98:55:06:d8:c6:4f:e2:b4:fe:e9:
ea:34:9a:d6:82:82:66:8f:a9:8c:68:aa:3f:66:de:ba:0b:90:
78:3c:03:04:b4:9c:f2:a9:06:74:97:99:70:0a:63:f1:56:2d:
1c:ce:b4:2c:e5:1e:f7:13:b6:cb:47:3e:09:08:c1:77:44:d2:
5d:15:7f:fb:51:33:ba:68:8d:b1:4a:6c:57:61:44:d2:52:6a:
71:29:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:21 2024 by rpki-client on console-fra.rpki-client.org