Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: ZZCKBubCO/yze7z6LrwJOy5ZjGBLByr+UslWlN2eXa0=
Subject key identifier: D7:22:DA:D5:D1:3A:15:28:CD:50:FD:83:03:1F:F8:1D:BC:60:D7:64
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 018F87EDB3A9794588FD3D7B7E4458C17C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 19:00:53 +0000
Manifest this update: Fri 17 May 2024 19:00:53 +0000
Manifest next update: Sat 18 May 2024 19:00:53 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: EmCBpMVyQPqlAbynFDMR//XuR0Hzo0HFmTfRY/ZjUXI=)
2: nceJdp7QkfSZsTeC0l-WCEZHLrk.roa (hash: 0Y94pwb1ATfkTjU+cfR4PpkNq029RsPlkcFfvPXySSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:b3:a9:79:45:88:fd:3d:7b:7e:44:58:c1:7c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: May 17 19:00:53 2024 GMT
Not After : May 18 19:00:53 2024 GMT
Subject: CN=d722dad5d13a1528cd50fd83031ff81dbc60d764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:fc:b4:38:fe:d4:cf:75:2b:c0:19:c5:df:
a1:d6:af:50:72:69:ba:e5:1c:42:30:61:ca:97:d0:
f3:b6:47:9e:d6:de:ae:46:9d:40:79:d1:8a:01:7d:
3b:d7:10:20:73:e2:6a:9f:6f:7f:3d:ca:85:a4:cf:
3a:e0:04:64:6b:df:a9:3a:8a:d3:27:94:c9:02:a0:
f7:d1:fc:46:ae:65:b6:78:28:89:8a:f3:13:89:af:
0d:5d:c2:c7:9e:67:db:5c:b0:9f:bf:6b:88:e5:f3:
26:a5:0b:e6:35:6a:fa:7b:7f:d2:81:6e:dc:88:c2:
52:e5:48:61:62:c8:5d:62:01:c5:e6:f8:d1:24:44:
e3:80:75:76:8a:f6:b1:96:34:a6:f9:83:30:c2:04:
7f:e8:ff:bb:88:a9:03:aa:9b:fe:41:a3:5b:85:fb:
d6:eb:9d:a8:20:98:d8:97:ec:42:90:fa:bc:b4:d6:
e5:4b:ff:a7:4c:4b:84:18:d0:84:61:e4:c9:c1:35:
80:ef:85:7d:a5:ef:dd:6d:7d:79:7c:72:97:cd:20:
7e:4b:45:7b:72:60:e4:be:5d:9a:74:3d:74:da:9c:
12:1a:07:aa:38:fd:4f:fe:f5:af:25:db:c0:a3:da:
13:de:7e:85:c6:92:08:32:8a:cc:50:f6:6d:c8:6e:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:DA:D5:D1:3A:15:28:CD:50:FD:83:03:1F:F8:1D:BC:60:D7:64
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1a:a6:ba:e3:0f:aa:f1:17:bd:2d:b0:1d:4d:2a:d5:54:57:
ea:e5:c9:42:32:5f:e3:3f:2b:42:4f:5b:94:93:ef:d0:19:27:
96:8b:ff:c9:0b:67:d2:90:dd:8c:81:3e:9a:79:51:81:aa:a6:
5f:49:30:40:96:c5:0a:41:b8:17:45:d6:db:c5:94:9f:37:c2:
42:d8:0d:e0:e3:09:1f:a4:3c:02:4f:5b:0d:48:6b:ff:2c:ce:
a8:88:1c:3e:5d:1f:b2:d2:a2:64:c5:33:1f:5c:a1:85:dc:10:
22:44:e3:aa:7b:e2:a6:b0:e8:a9:9d:99:a0:77:bb:a7:eb:d9:
36:43:3d:15:48:a1:e0:d5:5c:54:f2:de:02:40:d4:c9:a9:d2:
07:d5:c4:a1:9b:10:ed:51:92:57:07:79:f5:1f:3d:13:0a:f0:
90:f1:ae:e5:a7:c1:2a:4c:33:25:91:aa:91:ce:19:25:8c:60:
48:99:8e:f6:23:6f:46:bc:dd:b4:3d:11:83:58:0c:a7:5a:bc:
0e:ec:72:25:5d:34:93:07:0c:8a:56:b6:2f:32:fc:a8:f5:cb:
08:40:19:31:e6:8e:17:d9:75:2e:28:bb:1e:2e:10:65:95:d0:
8d:b8:83:6f:4a:69:a4:dd:9c:a9:19:1d:62:c2:71:a2:0c:00:
2d:b1:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:35 2024 by rpki-client on console-ams.rpki-client.org