Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: z5F+b78Shfxxoj6Sc4j22DFsRZXBBYGJhila2pUBP5Y=
Subject key identifier: 3A:09:A4:11:B2:68:66:BF:7A:46:86:CB:B7:88:FD:2B:AA:97:BB:4C
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 018F882414CCBD60AFDEE324E25DE94541D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 0E49
Signing time: Fri 17 May 2024 20:00:16 +0000
Manifest this update: Fri 17 May 2024 20:00:16 +0000
Manifest next update: Sat 18 May 2024 20:00:16 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: MbEVxqq9fGoQU6N/chyobrD0r6i7YeYGpXFp8+DZHDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:14:cc:bd:60:af:de:e3:24:e2:5d:e9:45:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: May 17 20:00:16 2024 GMT
Not After : May 18 20:00:16 2024 GMT
Subject: CN=3a09a411b26866bf7a4686cbb788fd2baa97bb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:f1:ab:de:1e:d6:fc:e8:b6:1e:bb:01:e9:
01:25:36:1e:29:7f:2b:77:89:58:cf:21:ef:9b:5d:
be:5e:83:40:2c:31:85:39:e4:4f:a7:89:b3:76:b4:
63:44:0f:50:b5:70:0a:f9:50:91:a5:c8:26:96:3b:
79:09:98:ec:ff:32:3a:d1:ec:bb:59:81:41:04:60:
cc:e4:2d:56:35:e7:83:cb:5b:8b:5e:50:28:55:c9:
c1:cf:1a:af:ae:12:ad:cd:d3:5a:31:61:7b:1e:6d:
6b:91:76:d0:8d:83:1b:6e:7d:a1:5d:d6:71:6a:64:
52:2c:dc:a3:c7:90:40:1b:a8:c9:50:86:c8:70:0d:
36:b2:0a:6a:0f:2f:9d:6e:9f:8a:98:fa:5b:b3:4f:
fb:b3:1e:27:60:0d:38:93:8f:5d:03:7b:de:66:6b:
73:65:af:ec:c6:b5:8f:b6:77:6f:81:77:c1:ec:02:
74:02:25:a3:c2:2f:26:ee:a6:45:5f:07:81:14:ce:
b4:3d:c2:c9:3a:c2:fb:27:03:7b:d1:e5:29:e3:cd:
9b:10:8b:e8:c2:32:09:b8:6a:f9:fe:14:3a:89:be:
b7:f0:53:6e:98:1e:76:01:e1:34:3f:33:d4:5a:bc:
3b:3b:fe:33:ab:b5:90:94:bf:c9:16:79:d0:f9:14:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:A4:11:B2:68:66:BF:7A:46:86:CB:B7:88:FD:2B:AA:97:BB:4C
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8c:be:5c:91:58:54:c7:e3:0e:ee:84:79:b0:aa:9e:97:15:
c0:6d:94:25:bc:07:a2:1f:c2:67:25:a5:76:83:f0:51:8d:2d:
fc:2f:d0:60:90:ff:52:6b:b0:2d:90:76:ff:f1:f5:66:a4:7b:
f5:cc:a8:3e:3d:08:ff:b3:5b:22:68:e8:a1:16:16:8e:ba:53:
72:7f:30:46:63:14:12:65:f0:a7:84:90:25:97:90:e0:61:96:
fa:d0:c1:4f:7b:5a:71:19:47:cd:f9:e2:d4:1a:5f:5e:15:cb:
ce:36:9c:81:3e:8f:59:19:ea:a8:1c:2f:7f:92:31:0d:63:6f:
13:98:7b:58:8a:31:60:59:3f:4a:d6:6e:a8:d4:b3:e7:70:10:
2c:25:1a:9c:48:1a:d6:69:d9:33:81:27:4b:7e:42:d6:81:8d:
14:7c:e7:41:97:b3:cc:dc:b6:81:99:c6:14:e7:2d:56:b8:3b:
65:1c:8f:c5:ce:b2:b8:b9:71:f1:bb:b7:6f:74:30:27:63:f3:
24:af:93:bd:2c:e8:f0:ac:d8:e7:27:b6:a0:d5:b0:5b:44:ad:
6d:aa:a5:a9:4c:da:58:03:f2:0e:cd:1c:66:1c:c1:1d:9f:76:
9a:9c:8b:95:ce:e7:d6:d4:e6:89:ae:0e:7d:9d:e2:7c:23:80:
80:21:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:36 2024 by rpki-client on console-ams.rpki-client.org