Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: F60GtSNj0Qumi1w9bIOhlhSHlxNh2Rkavk/gSy1/uX8=
Subject key identifier: 5E:68:56:57:52:D3:1A:17:FD:CB:DB:08:6F:76:03:ED:FF:F6:2B:E9
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 018F3C9CE7CF155EDC3F67D35CF906CF4CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 03DF
Signing time: Fri 03 May 2024 04:01:06 +0000
Manifest this update: Fri 03 May 2024 04:01:06 +0000
Manifest next update: Sat 04 May 2024 04:01:06 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: 2Qe00kXiL7YLryjQbyq3JPXYrdrm2PDleTMOW07euSY=)
2: I50yJMmujcvyUcNjdw5Zu2sBYcQ.roa (hash: djbq/Nyrc27MmDQ5s4HWqjan48sjl1k4hdk9Nzc9RaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:9c:e7:cf:15:5e:dc:3f:67:d3:5c:f9:06:cf:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: May 3 04:01:06 2024 GMT
Not After : May 4 04:01:06 2024 GMT
Subject: CN=5e68565752d31a17fdcbdb086f7603edfff62be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:36:71:e6:b8:67:0e:4e:f3:4e:bf:e8:90:
a9:a1:50:5c:bc:73:8b:c9:2d:50:66:34:aa:d4:d4:
0e:4c:a8:8d:df:e1:bf:d6:c4:8d:d3:e5:1f:25:bf:
49:74:54:02:da:ff:49:91:9e:8a:84:64:a9:02:33:
3e:ed:41:f1:6d:99:1d:79:9c:73:69:1d:de:fe:cd:
10:f2:3e:da:aa:0b:48:70:19:9c:c6:b6:47:16:ca:
f5:92:92:f0:a4:60:07:22:f4:df:fe:cd:5d:41:6d:
0e:2c:fd:9f:f0:a6:53:94:54:7b:d5:c7:a7:42:ed:
20:07:20:43:b7:cd:84:d3:6c:2c:87:b5:b2:61:54:
a1:e2:e4:5b:44:44:65:55:f2:bb:eb:89:90:20:54:
fe:25:63:af:f2:eb:ff:26:62:a8:73:5a:39:42:47:
db:60:07:e3:de:2f:88:f7:3c:51:ee:68:13:8f:d1:
50:0c:48:c3:e2:5f:44:64:23:8d:95:cc:56:34:86:
6c:5c:97:5e:06:b6:bb:c7:41:3e:b7:f1:7f:d0:11:
4b:65:92:34:82:b0:c7:a0:e6:f4:2c:cd:0f:9a:6d:
d5:69:d1:bf:d7:e1:1f:fa:4c:b5:91:0f:96:54:46:
c9:f4:84:08:83:75:57:23:37:f1:80:a0:12:29:4e:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:56:57:52:D3:1A:17:FD:CB:DB:08:6F:76:03:ED:FF:F6:2B:E9
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:82:24:5e:f4:28:58:b8:62:25:6d:16:62:2f:fd:cf:ab:
33:c8:fa:2d:27:95:08:ef:22:04:e3:06:82:16:7c:c2:4d:fa:
ca:c5:22:e2:73:81:f1:d1:73:13:e5:3d:9a:b3:5a:f4:be:a8:
09:3c:2f:f7:ab:e0:09:d1:a9:44:a4:df:29:6b:b9:8d:ed:81:
cf:f4:54:5a:2c:47:20:06:77:72:29:9e:0a:3a:35:75:e5:9a:
0d:62:ae:fb:4b:97:1c:d7:44:b7:db:bf:40:c2:d5:cf:9a:a6:
ef:78:70:f9:f0:57:03:50:b0:66:91:84:20:5b:b0:96:f0:27:
ba:f9:9d:48:90:48:16:dc:29:93:d5:15:50:26:78:61:14:35:
6a:c6:54:47:a4:85:f7:aa:cf:a7:f7:ac:df:e3:83:6a:1b:9f:
39:63:0a:b8:aa:2a:3f:59:17:20:66:42:2e:8c:fc:d0:8e:56:
14:2a:48:df:a0:7d:74:38:fa:0b:02:04:8f:50:79:24:d2:a7:
81:62:92:75:d1:8f:43:70:a0:47:c5:9b:27:46:a9:b1:01:ba:
ce:fd:8a:20:54:d7:d3:90:e8:ff:77:65:7b:9f:74:39:83:53:
83:88:c8:20:7a:b1:aa:a8:3e:d6:d2:04:48:d7:c0:c9:20:16:
d7:6f:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:44:35 2024 by rpki-client on console-ams.rpki-client.org