Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
File: 8OlKP3YsIdcztI_yssV0VgXCvjM.mft (raw, json)
Hash identifier: lWRT2hW59MmfOpFFXlTeFiTEQNkN0qchTqYU065h7yM=
Subject key identifier: 64:28:08:34:66:23:27:1C:88:D8:B0:18:5E:E6:CC:76:D1:E2:BD:3C
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Certificate issuer: /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial: 018F1F01CCF9361B169F3BC3DF24D44F2874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
Manifest number: 0BE0
Signing time: Sat 27 Apr 2024 10:02:42 +0000
Manifest this update: Sat 27 Apr 2024 10:02:42 +0000
Manifest next update: Sun 28 Apr 2024 10:02:42 +0000
Files and hashes: 1: 8OlKP3YsIdcztI_yssV0VgXCvjM.crl (hash: uxmyPm1d+PmzYQZmdQ/f8CWjc4e6/jtAjuC8RQnfhzo=)
2: M1XhUBaAzCoq1VvyCGwXyFbJ2As.roa (hash: YJH8XogGAiPVhNfpwNLuVtfRK7287F8OKKxG6tBIoNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:01:cc:f9:36:1b:16:9f:3b:c3:df:24:d4:4f:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Validity
Not Before: Apr 27 10:02:42 2024 GMT
Not After : Apr 28 10:02:42 2024 GMT
Subject: CN=642808346623271c88d8b0185ee6cc76d1e2bd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e7:e1:80:3a:5d:44:76:bb:39:ea:73:c4:7a:
bf:3b:fa:66:31:ec:32:26:8c:38:b3:8d:4d:c9:1c:
0b:a5:00:50:69:1c:0f:7b:8e:dc:4c:4e:b9:d6:87:
28:a9:b4:43:2f:c3:6c:7f:7c:1f:52:d3:53:50:2a:
21:33:8a:70:d5:9f:a9:08:37:42:93:a5:7f:7b:8f:
3d:97:3c:03:a6:65:e4:f5:c7:b1:a9:35:be:e8:7e:
e0:b0:9b:2f:ff:f8:85:7b:25:91:bd:c0:80:5b:b7:
29:e3:c5:2c:d3:a3:ef:9c:86:ce:8e:69:f5:5d:8b:
7e:e7:ef:8c:44:1c:a0:23:71:6d:87:f3:56:25:59:
d8:9b:4e:8f:4e:ac:26:9a:44:2c:fe:24:cb:0a:80:
be:10:14:24:0b:02:22:a3:05:f6:24:58:17:ac:63:
40:67:bf:ac:b3:8d:3a:41:9d:e4:ab:7e:4b:46:2e:
30:60:fa:47:94:d9:7d:4c:15:8c:f3:4b:6b:3b:da:
01:cc:29:5a:ff:13:bb:3a:a7:59:62:17:32:6a:07:
70:5e:c8:e7:bf:d7:ce:4f:c0:a5:e6:51:32:b3:ef:
1c:8c:17:88:e5:32:df:7e:80:e7:56:21:9d:36:ce:
2f:30:d0:78:ae:f8:21:74:b4:94:d6:c3:89:b9:2b:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:08:34:66:23:27:1C:88:D8:B0:18:5E:E6:CC:76:D1:E2:BD:3C
X509v3 Authority Key Identifier:
keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f9:ce:67:e6:c8:1f:8d:0a:4f:9a:ac:05:9e:87:b4:f5:ef:
94:87:fd:5b:7b:c6:ad:23:3a:de:1f:ed:d0:4a:2d:b8:d6:f2:
71:ac:e1:5f:02:00:58:13:f8:d5:b7:b6:cd:68:05:4c:f5:cf:
ef:bf:f0:ac:31:56:a1:23:9d:6a:a8:08:2e:42:c4:95:3d:af:
eb:c4:44:ed:f8:10:73:66:c3:c7:68:56:7b:fe:cb:30:b0:94:
ea:00:6d:74:4b:7b:5a:0d:f3:ab:91:49:76:52:9e:04:dd:af:
88:ef:f6:ae:fb:4b:34:e8:38:7f:38:b2:40:29:ee:0e:93:ab:
07:3a:f8:75:e7:a9:06:b4:8f:d4:bc:69:a0:94:3e:3c:01:76:
59:dd:78:ef:94:0f:ca:be:81:93:95:87:57:e6:4c:5f:25:94:
25:c4:7d:e8:94:90:8a:48:eb:10:79:e4:1e:cc:95:71:d2:0a:
c6:99:c9:e1:04:61:1e:06:1a:16:a6:eb:17:1f:96:b5:f6:0a:
51:eb:9e:a5:1e:82:66:0e:49:c8:22:c8:38:90:2a:28:09:62:
aa:33:ba:92:05:24:d5:e2:62:fa:15:29:d7:8d:d0:a2:bf:00:
8d:2e:46:f4:de:79:0b:bb:39:4c:ac:ae:33:3f:89:69:75:d2:
c9:5c:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:47:38 2024 by rpki-client on console-ams.rpki-client.org