Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: WGOuREps7FadevY5dg5zYzErDxZM6I9JEYv4IG/tOG4=
Subject key identifier: DA:C5:FC:B1:8F:18:1E:11:94:60:15:B2:2D:7B:92:E4:BF:00:A4:BD
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0191FAB4F97E9BB5E721AAA69E49D762C99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: EA
Signing time: Mon 16 Sep 2024 12:00:49 +0000
Manifest this update: Mon 16 Sep 2024 12:00:49 +0000
Manifest next update: Tue 17 Sep 2024 12:00:49 +0000
Files and hashes: 1: FGZYPetkdDKfO4D24I9eO529NOQ.roa (hash: xwqesQkcI8KVrnKVHliFdxTZ4Z1GoM39CR+MvpnOiNU=)
2: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: hVjxdp4Bndas3DLviVT2WCMZtRC5MmLqR5SLvh57lRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:b4:f9:7e:9b:b5:e7:21:aa:a6:9e:49:d7:62:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Sep 16 12:00:49 2024 GMT
Not After : Sep 17 12:00:49 2024 GMT
Subject: CN=dac5fcb18f181e11946015b22d7b92e4bf00a4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:40:53:1a:bb:1b:3e:23:2f:05:3d:dd:f5:
58:4a:a9:ba:e9:62:55:98:f1:15:8e:13:54:55:cd:
af:26:ee:2d:02:ce:dd:3b:ad:20:10:53:ad:aa:dd:
de:98:94:f7:31:5f:7f:ca:50:8f:07:7d:55:91:36:
c4:cd:95:12:8a:37:ed:9a:46:e3:4d:59:76:e1:71:
4d:6f:e7:7c:98:19:3d:ee:67:3a:c6:92:b6:d9:8e:
e4:92:1d:5b:04:a3:d0:66:bc:f8:ac:e1:fd:f4:09:
75:51:4b:47:21:7b:6f:74:cd:7c:47:86:19:35:95:
df:b9:a1:20:dc:4a:e1:72:c0:74:42:4f:cb:3e:b9:
62:78:54:8a:18:c0:ba:c2:6a:24:ef:93:70:e4:a9:
df:2c:ac:02:f1:42:08:b5:bf:58:46:0b:37:93:43:
65:3c:c7:00:05:fa:b3:e1:0e:d6:f9:e5:40:99:c0:
2f:d7:aa:81:bd:5c:ac:b1:93:06:d7:36:ea:99:7f:
ef:eb:dc:0a:47:5a:ee:bd:fa:ae:40:d5:ac:80:ae:
ad:43:d2:be:85:67:28:c4:78:15:b7:09:2a:0b:47:
83:55:8f:25:92:1a:d0:3b:80:4a:d8:7b:31:70:a4:
de:66:be:4c:a7:40:8d:d7:20:28:1e:88:33:e9:57:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:FC:B1:8F:18:1E:11:94:60:15:B2:2D:7B:92:E4:BF:00:A4:BD
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:3c:2d:a3:54:53:30:57:42:e1:37:f0:71:f7:3e:c9:b3:
b4:be:6d:d1:ed:13:1f:e0:27:e0:ae:08:80:02:9e:4b:2a:13:
83:b9:13:66:cd:73:fb:2e:9e:f6:38:22:66:91:ca:0d:2d:68:
45:a0:3e:5d:1d:85:b7:14:ec:3a:85:65:d4:a1:8a:aa:61:9e:
29:a2:d2:95:62:31:7b:44:ef:e6:5e:8b:b5:67:cb:bc:8c:67:
a6:dc:93:fc:9c:ff:10:7c:30:37:d2:a2:fb:63:1e:b7:9c:42:
59:1e:94:f7:1e:1c:ed:79:d0:8e:74:eb:92:f8:78:7b:7c:7f:
13:c9:b1:db:d9:65:58:c0:48:42:85:2c:2f:6a:54:ae:e9:a5:
91:5b:13:ff:96:bb:16:07:49:09:b4:65:64:12:63:74:a3:9a:
5d:58:bb:23:91:8c:6c:06:ee:18:42:d5:16:73:3c:15:c0:81:
4a:73:b9:c0:e4:90:d9:0b:47:85:58:ad:d3:40:31:45:0d:4f:
dc:c6:ee:63:15:8d:db:d8:8a:a7:3c:24:94:65:ec:d8:bc:2b:
41:8d:63:ab:40:76:c3:26:7d:d5:61:44:ad:4d:96:ed:fa:b4:
48:69:f4:5b:51:09:6a:03:c9:ce:78:40:58:55:5e:6f:43:38:
68:d4:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:15:09 2024 by rpki-client on console-fra.rpki-client.org