Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: +s9/E2jXweXR9Ca+k6wGtL0i5U2go72FdMiJFcmc67M=
Subject key identifier: A7:A4:9D:9C:80:84:56:30:5C:B4:85:8C:8B:0B:5C:E6:C1:07:C0:8B
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 018F3CD4615529867C7B6C5E73468F9B4E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 0E0F
Signing time: Fri 03 May 2024 05:01:42 +0000
Manifest this update: Fri 03 May 2024 05:01:42 +0000
Manifest next update: Sat 04 May 2024 05:01:42 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: tRO8aGQ5Qxm85KB8EIB66AFeCh50aFFBD9LkZvOQi4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:d4:61:55:29:86:7c:7b:6c:5e:73:46:8f:9b:4e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: May 3 05:01:42 2024 GMT
Not After : May 4 05:01:42 2024 GMT
Subject: CN=a7a49d9c808456305cb4858c8b0b5ce6c107c08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:2c:7f:5c:d8:90:4e:68:19:ce:c7:e4:79:
16:68:f0:9b:3d:9e:4d:15:6e:44:c7:cb:fa:5a:09:
6b:88:b8:31:c1:af:44:86:0d:9e:d2:7d:cb:21:79:
e0:6b:7d:55:cf:13:38:ba:fb:ea:ef:ba:53:55:8c:
c0:bd:86:f4:68:45:fb:b4:72:05:6e:38:25:e3:24:
73:2e:9f:8d:f2:ba:67:bb:3f:5c:fe:85:e9:5c:43:
86:6b:38:67:25:a1:8f:c8:c2:7f:36:8d:10:87:38:
71:48:0c:c3:5c:39:2f:b5:dc:30:71:49:d3:9e:37:
c5:79:62:3f:cf:6a:29:e3:42:99:80:13:f2:cf:ce:
df:7f:23:53:0b:7b:6c:7e:7b:36:84:2d:2f:eb:ac:
76:0f:6d:80:45:9f:ae:54:98:4a:9d:6a:ed:cf:1b:
26:c1:d2:5d:72:c5:f3:e5:93:b7:43:d5:58:40:2c:
b1:50:92:7c:7e:ab:92:3b:99:59:6f:51:95:f8:31:
8a:77:64:85:65:50:66:1e:b2:47:cc:7f:86:70:88:
e2:e4:c4:51:28:70:ae:a2:04:1c:d8:78:26:78:b8:
e8:84:65:c9:84:6c:af:20:6e:65:97:07:62:35:b4:
e0:4c:02:54:cb:c2:40:8a:e1:7e:23:98:25:88:91:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:9D:9C:80:84:56:30:5C:B4:85:8C:8B:0B:5C:E6:C1:07:C0:8B
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b9:8c:82:c5:68:3f:7e:7e:0c:15:0c:53:87:37:ab:5b:03:
d9:1b:e3:95:5e:ff:e6:8d:9d:d5:73:52:b3:06:70:1a:60:8d:
ef:a3:b0:fb:36:54:54:08:c0:fb:ce:60:7f:b6:b3:57:c3:c7:
2b:7d:b7:7f:54:7f:37:d2:b8:1e:27:e6:a5:c3:82:1a:60:f0:
36:7d:83:0a:42:72:8f:eb:38:45:41:20:a7:cf:ee:47:1e:76:
54:45:e4:bc:21:b5:cd:e0:57:63:97:aa:5e:c9:b4:6c:76:dc:
8b:e2:93:42:99:a0:63:a7:ea:27:96:e2:c6:e4:d5:d5:53:d5:
1a:d9:ce:16:6f:32:2a:c8:7f:b0:6d:46:2b:ca:47:6e:4e:e9:
1b:a3:a9:bd:e8:72:11:44:cf:0f:b1:dd:fb:7c:fa:6c:c3:42:
d9:ce:3b:d4:2b:02:1a:05:c7:32:61:23:89:23:9f:a4:11:f1:
5e:e3:87:02:f5:f4:b4:6b:4f:11:3b:32:fb:ad:20:05:d5:f1:
07:85:fe:6b:20:9d:86:cd:db:53:47:79:49:95:75:b8:fa:68:
79:3e:ac:da:a6:8e:bb:6b:99:4c:06:89:04:ea:12:ee:a3:f0:
ce:19:82:f4:4e:de:5e:37:d8:f1:59:30:a7:f2:d9:28:08:b7:
d4:02:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:39:50 2024 by rpki-client on console-fra.rpki-client.org