Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: 8/ZpPn8A8LMRFJfB7K2c26F3ggL4pvpWIqsRhLnKLl8=
Subject key identifier: C5:9A:5C:A7:4E:66:A7:F8:7B:73:4C:56:BF:C7:EB:2C:E0:02:7E:D7
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 018F87ED7A8FA8D30F8889EFE49D518620FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 025C
Signing time: Fri 17 May 2024 19:00:38 +0000
Manifest this update: Fri 17 May 2024 19:00:38 +0000
Manifest next update: Sat 18 May 2024 19:00:38 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: JvXgcRvjRDC2gpUU1Y7Az0J2Dcu0Vzy1+eD0zWgfsGQ=)
2: OpGb0KNHgL7BMTzZEZqxZWI76P4.roa (hash: wMeNpJ8/oFp92ngLFWxv8rAa82e7cDOtDDC1sV4DR+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:7a:8f:a8:d3:0f:88:89:ef:e4:9d:51:86:20:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: May 17 19:00:38 2024 GMT
Not After : May 18 19:00:38 2024 GMT
Subject: CN=c59a5ca74e66a7f87b734c56bfc7eb2ce0027ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:ca:91:06:b2:48:a9:85:49:10:78:4d:f4:
2f:71:a3:51:41:9d:6e:4c:23:f9:54:92:39:4b:ad:
03:e5:33:c1:ad:ee:3c:14:6b:95:d5:9e:a6:d8:1b:
d3:53:bd:31:4d:31:7a:53:d0:88:9b:4c:a6:0c:6d:
26:bb:0c:5e:6e:2a:94:11:79:fd:5b:79:bd:62:d9:
a9:df:48:64:69:cc:28:bc:95:f0:cf:41:4f:d4:45:
59:00:fb:be:6b:bf:cd:ba:d1:7f:13:c1:3b:01:01:
ab:c1:8d:45:67:b1:bc:3b:ef:06:c5:9e:00:c5:67:
4c:9c:5e:5b:3e:0d:b2:d6:f6:50:a4:a3:0a:41:0e:
96:a4:f9:be:74:87:f1:29:bf:2a:88:9e:6e:43:63:
a0:16:0f:bd:cd:dd:98:a9:aa:0d:e5:c0:b7:aa:89:
4d:ce:97:7d:6c:ec:86:c8:67:7d:e1:74:bd:28:f8:
2b:06:bd:13:c6:c9:e3:f7:87:19:c9:be:c6:0d:aa:
31:35:2d:5e:49:e9:f1:6b:5c:ce:af:35:43:f1:21:
cd:15:63:76:8b:04:1b:74:0c:3b:43:50:d3:49:35:
7f:ef:ab:fc:cb:9d:9d:37:de:f9:c6:48:9c:44:5c:
f6:87:b3:12:9d:a1:b3:1d:b5:85:68:eb:63:5e:0b:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:5C:A7:4E:66:A7:F8:7B:73:4C:56:BF:C7:EB:2C:E0:02:7E:D7
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:57:b4:c5:bc:a1:a7:69:5b:33:c5:bd:ac:cd:b3:67:3f:fe:
3b:50:69:07:c5:6f:29:4f:f5:c3:3f:7c:a7:65:4c:f8:ab:fe:
b4:88:fb:05:ce:ee:df:7d:64:6d:35:cf:a5:c2:18:85:e8:6a:
7e:57:13:8f:17:d2:bb:c6:47:ba:7b:ce:ba:9c:8b:a3:69:a4:
97:83:16:c6:7a:84:73:0d:8c:95:f3:9b:c2:61:3c:23:3e:b6:
4a:ba:1a:7c:4e:30:6d:3f:44:8b:57:83:b9:52:8c:85:d5:58:
7b:bc:5f:86:17:04:0d:0c:9c:7f:4f:6e:11:7a:0e:a6:6e:89:
e7:42:aa:e2:88:24:ef:3f:a5:b2:e4:19:79:10:c4:6d:cf:26:
aa:bd:26:96:f4:08:17:11:da:fe:36:08:6c:12:fb:73:16:83:
df:c4:0e:52:af:af:1b:73:0b:75:67:75:99:22:f8:2c:d3:7a:
53:3a:46:0c:e3:99:2b:16:bd:61:b5:1d:54:bc:83:cc:d8:c5:
cc:da:f7:9f:41:05:32:db:c7:e3:7f:65:a7:4e:0a:6b:b2:21:
1d:96:8f:cf:1e:66:d8:39:82:37:a8:03:ab:92:76:b8:e7:a6:
52:99:72:fa:c2:58:ec:1b:ed:54:86:3d:a6:9e:cd:a3:d0:f2:
ed:b0:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:36 2024 by rpki-client on console-fra.rpki-client.org