Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: KjZKSzMnV5JFZcSjKI5ZEayj79nWzsQ6sqUyiyobMNk=
Subject key identifier: 68:1A:6E:F8:50:56:A9:2D:4E:BD:18:82:16:24:AB:E5:74:BA:05:CD
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 018F8748E8DC1304F95C17270D91ABE58AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 16:00:53 +0000
Manifest this update: Fri 17 May 2024 16:00:53 +0000
Manifest next update: Sat 18 May 2024 16:00:53 +0000
Files and hashes: 1: 1-fVxYVA90ENf6TO5BN-RM0zVQDI.roa (hash: g7vc0EjqbHOCFrg4mOslwVR90hPyS10ox5oPFIZsjeM=)
2: uLjydiLVYatJ81jKuB9teUAji-k.roa (hash: +uFO40aC8Sf1aTnEHZ3Tiisy/s+TZS9NPN1xWXxdYLw=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: zLjVg9t6vWy9fyEdCbQLbyUXiuocaHQoiqfDoWM0L9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:e8:dc:13:04:f9:5c:17:27:0d:91:ab:e5:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: May 17 16:00:53 2024 GMT
Not After : May 18 16:00:53 2024 GMT
Subject: CN=681a6ef85056a92d4ebd18821624abe574ba05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:8c:a8:a8:1e:ff:fa:ec:f3:ef:a7:89:b7:
da:84:b7:06:40:eb:c3:a4:f1:12:14:7a:8c:13:12:
b6:7c:1b:88:46:fe:84:81:67:df:45:a8:ff:2f:1b:
31:45:7b:0e:2a:f9:34:4e:30:df:e5:ac:34:c4:2f:
e2:34:27:2e:73:99:6f:e2:19:37:1e:1f:b7:07:b7:
da:a2:1b:e5:fe:13:c5:f4:95:e4:d0:f8:74:f5:9c:
fc:f2:06:95:bd:5c:76:cf:da:16:3a:41:5b:9f:a2:
2d:ac:82:2c:67:26:6b:67:1d:09:c7:70:db:cd:19:
e7:23:b5:36:bd:a4:c5:3d:3f:44:6c:64:a7:1f:72:
f0:97:62:ba:d1:cd:c3:10:9d:fe:05:98:9f:b6:86:
54:8f:b7:bc:57:0f:87:36:78:a5:1a:a0:01:ef:93:
9a:fb:df:a9:38:09:88:06:6c:42:dc:95:ab:e1:26:
2f:3a:95:4f:99:96:fc:db:00:8d:7f:92:02:19:55:
83:0f:c6:78:0d:e7:19:ec:5e:67:9b:3d:2c:4b:ca:
62:fa:d2:ed:78:28:42:3b:a7:2d:f8:fe:c2:c1:91:
c7:f5:25:11:48:c3:35:bc:a2:77:0f:2d:0e:b7:3f:
24:7a:ce:9d:4b:13:51:84:f7:4f:df:49:a6:a6:7c:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:6E:F8:50:56:A9:2D:4E:BD:18:82:16:24:AB:E5:74:BA:05:CD
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:44:e4:4b:1a:f3:f2:c7:af:76:c0:a5:0b:34:b9:ad:a8:a2:
ee:17:ea:b6:0a:ed:a3:9d:05:16:ad:20:0a:d6:b4:43:bd:ba:
76:f2:8a:88:59:84:f2:14:31:42:43:eb:1f:fc:53:60:b1:f4:
58:1d:f5:c4:f3:1b:9c:b7:cd:d3:ce:4a:ee:ff:2e:69:ab:22:
c8:e6:f9:e9:34:86:c7:78:f0:53:2c:8f:77:63:0b:27:7d:62:
a1:e2:b6:ab:c4:dd:f6:21:7c:3f:7d:20:24:cf:d3:5c:c3:32:
be:9a:9f:33:65:6a:8b:20:e5:00:10:c1:79:28:82:5d:cd:fd:
5c:f6:ea:b3:b6:72:9f:58:b4:91:75:c1:ab:fe:44:b6:d3:31:
19:69:6c:0a:73:bd:4c:62:cb:29:97:8e:78:eb:b9:2e:9a:90:
cf:b3:8f:df:59:db:68:ed:25:49:59:3b:80:c6:d8:83:9c:8c:
38:5f:42:1c:f4:11:77:96:df:5b:54:cd:fc:13:07:c0:cf:c8:
31:be:13:fe:dc:68:09:9b:60:01:e4:3e:17:99:8d:d8:e2:33:
6e:48:2b:bd:17:3d:d4:4c:da:03:a9:70:ee:ac:40:06:1e:2c:
09:86:c7:e5:18:1d:d2:62:d1:8d:6f:15:51:59:0e:42:4d:7b:
fd:e7:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:39 2024 by rpki-client on console-ams.rpki-client.org