Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: 4SwIi9sbLZt7X+fp5Vvbd8kedQPpqLMFhDEfTMpPHfU=
Subject key identifier: 97:A6:8A:B9:84:E3:96:16:4C:3D:0F:E1:E4:7E:02:73:F1:BB:15:8D
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 018F59CBA849CC9BF5D348A7681EC318F5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 116A
Signing time: Wed 08 May 2024 20:01:10 +0000
Manifest this update: Wed 08 May 2024 20:01:10 +0000
Manifest next update: Thu 09 May 2024 20:01:10 +0000
Files and hashes: 1: FnY5vRyZ-3NM6QwSOP_MMQVvbvM.roa (hash: sbZM9wt7CLP51CeVRRcBe5g3k1vD31jUGT6pgRyr1yo=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: AWAnYMN1QsKQSwt79GrYuuQp04w2AHqmDrUY4Ev7Xp8=)
3: y6C1e-UCM3EpoEJzWiddEcId2Qw.roa (hash: i5AgIhKdrTPfF4JsCsAhIv8T5BpONSNbBYVBavhuBG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:cb:a8:49:cc:9b:f5:d3:48:a7:68:1e:c3:18:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: May 8 20:01:10 2024 GMT
Not After : May 9 20:01:10 2024 GMT
Subject: CN=97a68ab984e396164c3d0fe1e47e0273f1bb158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:8e:f0:c8:34:dc:c9:9b:6d:16:49:2f:2e:
15:49:26:53:4c:3c:46:e5:95:9a:c4:1e:d9:c1:52:
bb:5c:19:15:17:d0:67:5f:82:07:b4:9b:3e:18:4f:
37:9c:91:5c:23:c1:5a:ee:e7:82:5f:dc:2b:9b:70:
14:78:09:61:ae:c5:e9:9d:4f:58:5e:7a:f3:86:25:
91:65:0c:78:eb:01:52:09:76:cd:d4:fa:76:ce:43:
59:c4:2f:8f:d8:04:d0:7f:85:01:c4:d9:72:13:03:
de:68:d7:59:92:52:10:02:99:52:ba:3a:7a:44:d7:
66:18:7d:5a:3c:59:cc:64:41:64:5a:43:c9:53:49:
a7:1f:10:62:21:00:d7:2f:76:d2:c4:eb:e0:c1:4a:
25:51:55:84:b9:3d:52:e4:d9:c5:a7:41:2f:66:0d:
84:64:bd:c6:70:dc:05:55:0f:b1:e6:03:2d:59:1f:
17:90:ee:65:66:ba:a8:9e:22:d1:33:31:59:71:ed:
1c:a8:dc:ce:08:95:70:f7:a5:69:26:25:41:6b:69:
ff:c3:68:6b:58:25:f2:40:22:9f:63:f5:32:c3:af:
00:8d:59:1a:1f:d3:7e:4b:b4:7f:93:ec:c7:a5:a7:
a3:15:96:84:33:1c:a6:df:d0:f1:32:9a:33:f5:46:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:8A:B9:84:E3:96:16:4C:3D:0F:E1:E4:7E:02:73:F1:BB:15:8D
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:03:0e:9e:c4:db:f2:74:00:20:6f:36:47:04:bc:0f:d1:35:
29:9a:cc:ba:1f:d5:40:0a:45:3d:c0:fd:b2:2f:df:12:84:79:
c6:91:d8:3e:35:ff:c5:81:89:e9:dc:80:9d:02:79:10:df:62:
d3:74:25:13:b4:fe:2f:d2:4a:0c:70:96:56:f9:d2:f4:88:db:
a0:b4:95:5f:59:99:76:e8:70:b9:7e:c3:a7:4d:53:2a:68:c5:
cc:25:87:96:f6:89:a6:b0:09:3b:d7:74:49:c8:12:22:c3:00:
0d:8f:02:db:ee:e6:f8:38:73:b6:c3:2a:51:50:c2:f8:0b:65:
a8:32:95:de:b3:a1:ad:83:94:39:11:76:6a:75:2f:64:a5:fb:
1e:02:2d:da:0f:02:88:d6:41:16:47:2a:08:7a:8e:2d:ed:97:
ff:71:7b:d9:79:f5:29:cc:3b:ee:e8:cc:bf:2c:73:2d:1e:88:
32:25:a5:1b:cd:73:6b:b1:e5:11:37:72:e6:ff:64:a1:52:a6:
12:88:90:07:f2:98:03:40:25:55:98:77:a8:8a:19:97:25:23:
a9:1e:21:cf:6d:6b:ab:02:64:5c:b5:55:07:50:92:be:ca:4f:
36:54:e4:89:22:c8:5b:4e:af:ae:12:8a:ad:79:8d:5a:35:91:
00:22:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:22:38 2024 by rpki-client on console-fra.rpki-client.org