Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
File: o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft (raw, json)
Hash identifier: YbVtrqnC+KnbXY5j3H6MKLweO3G1Mm5RqTKgsK4Jc/k=
Subject key identifier: 78:28:9D:46:1D:95:86:4D:74:90:53:7F:02:64:C0:3F:50:68:45:D9
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Certificate issuer: /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial: 01873793448361D1C8D97C6E2C525A5BE852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
Manifest Number: 0695
Signing time: Fri 31 Mar 2023 12:10:10 +0000
Manifest this update: Fri 31 Mar 2023 12:10:10 +0000
Manifest next update: Sat 01 Apr 2023 12:10:10 +0000
Files and hashes: 1: UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa (hash: PtCBoS2fU2dVe/kQVt6ngep+Cy21rwc2tXuFBDN9uBk=)
2: f82l9pzvTl-6uiPEKmi9GkRTq0I.roa (hash: 1v27Kgl5IHD2i6WaCzLYZX7YYS7kHPQuWxjQyNyn1XQ=)
3: o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl (hash: of+ejiuWQe0VBpnvu/X0+tp0HClA/Av8dyTMOdwMDmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Apr 2023 07:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:93:44:83:61:d1:c8:d9:7c:6e:2c:52:5a:5b:e8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Validity
Not Before: Mar 31 12:10:10 2023 GMT
Not After : Apr 1 12:10:10 2023 GMT
Subject: CN=78289d461d95864d7490537f0264c03f506845d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:ab:fb:58:62:79:a4:d9:a2:c1:7e:78:f5:
76:bc:0a:51:95:09:1d:c3:5b:08:31:be:df:63:5a:
51:f6:1f:65:36:2e:d9:c0:d0:ff:5f:bc:2c:31:4b:
6e:72:f9:03:25:e8:8d:1a:99:88:b0:97:d0:24:14:
1e:94:80:6d:0f:d8:5e:2a:05:ae:f4:88:5d:cc:7d:
99:bd:8a:c2:77:09:78:dc:88:bd:e0:69:8d:5e:1c:
b2:0f:65:a8:f6:62:52:34:5e:e6:ca:2e:64:23:97:
8a:e0:0b:da:5f:39:ce:4c:12:28:1a:d7:62:21:e8:
52:15:1a:46:09:cf:fa:b5:a2:f5:fa:85:19:33:21:
9b:cd:ab:00:94:0d:da:ac:c7:b9:54:63:37:3c:a8:
38:1f:a8:15:67:75:60:8f:4b:24:6d:8e:78:d9:80:
35:cd:77:c4:85:d9:37:04:e3:78:49:06:d6:69:7b:
f3:16:15:f4:e0:04:a9:5d:ae:4e:db:b4:f3:4a:bd:
e8:e2:6e:f7:39:72:67:12:17:51:d4:61:10:72:45:
d5:58:00:e2:92:78:b0:93:99:dc:d1:72:88:4d:e6:
13:9f:d6:fa:c4:b6:8c:77:07:2f:22:ea:0e:4d:45:
47:66:2e:e2:c4:69:06:5d:37:ec:20:22:14:60:94:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:9D:46:1D:95:86:4D:74:90:53:7F:02:64:C0:3F:50:68:45:D9
X509v3 Authority Key Identifier:
keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c3:06:d8:4e:03:a1:72:8d:57:4b:62:55:f4:e4:bf:56:22:
64:b9:b0:81:e9:d5:d8:cb:11:c6:4e:c0:8e:19:f2:d2:f7:f8:
01:d0:b6:db:1b:91:b5:08:cd:3c:f4:92:8a:9e:62:30:6c:32:
3d:dd:47:b7:a1:09:87:e6:42:15:d8:17:9e:25:af:5b:eb:7a:
5a:5f:54:29:8a:46:90:00:1e:02:cd:16:1e:77:f3:9c:3e:f7:
a4:8d:0b:b3:0d:a7:70:bc:78:21:c1:c2:10:82:ff:93:67:70:
fd:5e:4e:81:cc:12:dc:5f:69:14:c6:1f:c9:dd:3e:1f:eb:2f:
6b:e9:2e:79:f4:70:3e:b3:06:8e:ee:1c:14:7d:56:eb:a4:11:
ea:79:aa:c5:8e:57:b2:7d:05:95:3c:9a:b8:81:94:40:96:21:
c8:19:1b:80:4a:9b:cb:c6:0b:e1:ff:7e:61:b4:fe:95:41:90:
8b:8b:d4:3c:8c:4e:5e:e9:76:b1:cc:15:44:e9:69:e4:fd:cd:
2a:da:25:c7:ab:c9:55:9f:fd:30:a1:6d:13:39:a8:8f:62:59:
43:82:2a:b1:e9:1f:29:ed:d3:ae:e0:ff:2e:bb:3c:ec:f9:a8:
fd:09:c4:d1:2f:c7:d3:24:32:78:1d:fd:81:86:d5:c7:2d:ca:
60:7c:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 31 12:49:46 2023 by rpki-client on console-ams.rpki-client.org