Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: Iy1+a2BUgsYCRuOpvotKDkuhfhOcU+V85yvKM2R8NTY=
Subject key identifier: 61:FB:B5:EF:AA:EE:20:B2:57:ED:DE:BF:07:BE:4A:75:AC:3F:53:8D
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 018F8410E75A549280ACAF478C99701FBCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 0D6D
Signing time: Fri 17 May 2024 01:00:51 +0000
Manifest this update: Fri 17 May 2024 01:00:51 +0000
Manifest next update: Sat 18 May 2024 01:00:51 +0000
Files and hashes: 1: bq9CqvnrnmLj-nXKhmfPIEjqEiI.roa (hash: zEveyUVxjKvk59RxfTsEnCz9v++3bm7NlZK7a0s2pmo=)
2: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: q+fmPAeQEDPfX+E1QLLItLkhpElgtpU1CYc7bEJwk/w=)
3: pyvExR1LrhdsYUv3NnlpAByqFPQ.roa (hash: opfMvN7kRBfwnB0sb42486d5MyFnI0L245A3LYf8+tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:10:e7:5a:54:92:80:ac:af:47:8c:99:70:1f:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: May 17 01:00:51 2024 GMT
Not After : May 18 01:00:51 2024 GMT
Subject: CN=61fbb5efaaee20b257eddebf07be4a75ac3f538d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:94:f6:52:b5:3c:42:e2:54:96:20:a2:f7:
bf:d6:bc:e6:99:ef:8e:c1:61:cc:0f:87:78:f8:d2:
ea:4d:aa:ab:77:9d:e5:c7:57:96:74:10:c3:5f:e1:
b7:37:f9:0e:2c:a5:8b:9c:e6:6f:5b:2c:cd:4e:81:
ca:86:d3:b6:f2:72:31:8f:86:cc:c7:4e:ff:6f:26:
98:46:96:a1:f6:8e:95:fd:e8:97:a5:c1:a2:a1:2e:
e6:21:3e:1b:b1:90:11:0a:4b:f4:2a:3e:ea:8f:bf:
98:e7:e5:da:78:e7:0a:09:f7:14:94:5b:5c:f0:ec:
9f:b3:7a:7b:d0:96:99:da:70:6f:15:fb:b5:be:6b:
fd:6c:e7:60:4a:a7:dc:99:9b:49:bc:00:84:f1:94:
9d:e7:2f:cc:dd:e4:a9:9a:7b:bd:a6:a9:a0:af:6d:
6a:8c:ab:31:21:fd:c6:ce:b0:b9:63:f9:f8:a3:12:
32:7e:03:6d:fc:fc:17:c5:c6:3a:eb:25:ca:31:ac:
f3:3e:3f:3e:e3:df:f7:1d:46:fd:b8:71:fb:3b:6c:
2a:69:55:1b:9f:2c:69:bf:ff:c9:af:9c:27:bd:4d:
f3:40:64:73:c1:46:4f:01:2e:38:bd:36:4b:e6:d4:
1a:a6:03:94:e2:dd:a2:83:86:f6:e6:b8:38:0b:15:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:B5:EF:AA:EE:20:B2:57:ED:DE:BF:07:BE:4A:75:AC:3F:53:8D
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:d6:b9:6f:7e:c4:a1:fa:a6:64:ac:dd:d1:0c:63:a5:01:
a7:e1:14:bd:7e:c9:da:59:e0:b0:08:51:b7:6c:17:53:0a:2f:
75:96:ab:c5:2b:02:45:51:2c:8e:c6:45:a0:78:25:b7:2e:bc:
f5:24:03:6d:23:45:94:93:b6:4e:c1:98:a2:b2:43:8c:9e:c3:
00:10:af:b8:dd:84:f6:d9:8a:fb:c7:e1:70:e9:0c:96:9b:23:
04:a7:9b:86:66:b0:c0:48:1b:7b:09:33:62:62:06:72:88:9f:
92:ae:4e:29:34:02:e0:75:e2:6c:1d:05:80:bd:6c:10:5d:c8:
c3:c0:21:f0:31:09:6f:f7:39:ca:46:de:df:7a:68:c4:4b:0a:
4a:c1:dc:01:ae:68:5b:b1:da:2a:d7:b8:32:84:e3:25:1b:d3:
64:30:be:12:39:9c:02:cc:1f:b7:03:a0:24:63:86:5c:4e:37:
d9:bb:b4:d0:c5:70:29:05:d5:b9:b5:20:cc:0d:39:56:7a:1b:
fd:7c:03:ee:c2:b2:fd:d0:c6:30:ec:71:41:29:8e:bf:86:cb:
9b:5f:2c:cf:13:19:5f:2c:8c:57:08:47:88:36:b1:f6:aa:cb:
80:6c:2a:e4:89:fe:c3:6e:69:d5:4c:3d:96:e4:07:82:8f:9d:
e7:fc:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:46:16 2024 by rpki-client on console-fra.rpki-client.org