Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: aqi+f6rzp9j3CLI/X9fFm4AhMqzcRyo42rka5Kgotqs=
Subject key identifier: 51:AF:50:91:FB:F2:E4:3B:DE:9B:30:99:C9:D6:54:30:89:B1:62:FD
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 018F83D9804EF9EA6D1DCEB118AC72DCDBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 0389
Signing time: Fri 17 May 2024 00:00:20 +0000
Manifest this update: Fri 17 May 2024 00:00:20 +0000
Manifest next update: Sat 18 May 2024 00:00:20 +0000
Files and hashes: 1: JKkSE0foxUNiGA-TlEf2VdsH5hg.roa (hash: WlfiwlQLkeyvgPwDcXhEi+E3socqLbKJ/x1dCRTTn8A=)
2: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: RTKucGObcbcmb18Hx1NPWEl90c0fcFhd8n0teqM7TIM=)
3: jvZ3Dvy-eKjjvIiXdFSETUCrJ1o.roa (hash: qccboirrfGFZgm09LPjoG6PmRjOoIzazGjHxw5+L9M8=)
4: yi41anCc4buv-D5jvcJSEndneNw.roa (hash: p5xSyylM8b/eS2Zgsmr8jY9ELUZ5W+NoXk9eHLSQ6sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:83:d9:80:4e:f9:ea:6d:1d:ce:b1:18:ac:72:dc:db:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: May 17 00:00:20 2024 GMT
Not After : May 18 00:00:20 2024 GMT
Subject: CN=51af5091fbf2e43bde9b3099c9d6543089b162fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:b6:c7:1d:b3:09:96:00:d3:56:8c:bb:fe:
a5:3b:db:85:0b:ab:ab:54:ab:31:72:b1:01:1f:8e:
25:ff:a7:56:bd:2c:31:5c:fa:6f:38:70:4c:c2:ee:
21:59:53:c3:c7:20:b6:c6:fb:c8:bf:e3:a6:ac:2d:
ae:1f:af:ae:8e:53:b2:a0:3a:8f:20:0c:78:e4:f5:
4c:4d:02:06:b5:36:e0:2c:f5:da:62:e7:50:9c:9e:
73:f7:ae:b4:3d:20:a5:dd:68:74:bb:dd:d2:08:2a:
73:f2:ab:0c:97:a3:96:e7:62:3e:95:cd:2c:ac:14:
33:87:e9:7a:c5:12:3b:6e:1a:43:98:38:70:dc:54:
02:5f:a1:87:1d:4c:eb:3e:93:84:2d:00:c3:c8:5c:
e1:b1:8f:ee:60:3f:9f:8c:9f:8a:b3:8a:ed:72:0f:
e7:bb:0b:8d:92:fb:85:a3:3f:0d:2f:16:8e:16:2a:
8d:a4:01:1f:1f:73:04:d8:12:72:0f:cf:42:ff:0b:
5e:e9:f4:3b:60:06:96:cf:25:51:8f:a9:bf:e3:b5:
fb:e0:f0:68:0b:c2:ae:07:ca:25:73:1c:8f:02:fd:
21:de:b6:9b:58:c4:68:9d:e1:2e:bc:2f:db:bf:44:
85:63:11:c1:ce:10:3d:b1:a2:a3:eb:e2:e7:1a:16:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:50:91:FB:F2:E4:3B:DE:9B:30:99:C9:D6:54:30:89:B1:62:FD
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:60:8b:39:00:fd:f0:b3:8f:97:23:75:19:8d:74:87:fe:
a9:25:c9:fa:4f:49:68:15:b0:8c:a0:7c:d3:2d:20:a8:e5:c5:
a1:3f:5f:c8:37:8a:fb:52:c0:93:36:08:b9:8b:3a:2c:d6:ab:
89:71:f2:16:15:8a:14:b8:c7:3f:df:f7:d3:39:23:81:b6:e3:
c2:14:16:71:84:54:6b:1c:82:38:b7:f3:68:37:40:11:96:b4:
82:94:73:75:10:34:3d:98:be:63:9d:7c:42:d7:17:4d:37:34:
28:d0:8b:3f:4b:4c:7c:aa:72:02:1a:1c:a5:f8:12:af:25:ff:
9d:52:5c:7c:d1:01:e4:0b:d5:b8:e0:92:84:d1:b0:b9:c7:6d:
80:28:a6:7b:0e:4f:bd:d1:9e:ad:00:7b:ac:3b:b6:81:ae:6e:
75:d7:53:6a:a8:4e:88:12:de:09:30:4e:79:0d:0f:5d:15:c0:
d8:a7:79:99:28:39:92:ab:b1:64:a3:ee:2b:ba:5e:8d:66:96:
1c:29:79:f1:f9:98:bd:87:e1:43:b4:da:d5:f2:2d:ce:1d:56:
f2:f9:f4:cb:1a:90:39:9c:cc:4a:1a:28:41:da:ba:20:ff:44:
52:cd:2b:c2:9c:7f:76:5f:a4:90:e1:a4:4e:12:4c:ef:5e:f9:
c4:45:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:38:34 2024 by rpki-client on console-fra.rpki-client.org