Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: hDueKNylUic81v7p6gCx3THl5qkvgUh1M4rnBHBWUzM=
Subject key identifier: 2F:69:B9:87:F4:C5:83:1E:C5:5A:F6:3D:38:67:4F:3F:84:AC:05:FE
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 018F874A9AD7A2ED8CE2B0B7A891CDBB712A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 117B
Signing time: Fri 17 May 2024 16:02:44 +0000
Manifest this update: Fri 17 May 2024 16:02:44 +0000
Manifest next update: Sat 18 May 2024 16:02:44 +0000
Files and hashes: 1: euVnHtig2jI749Evr1YnLQxzKIY.roa (hash: SLKXY8thJIzUfMAbvE2yeNilozRFM1+iix5oNFRKiV4=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: dxg4P2hPKlVi1hnEXnHY0hnMLwp6Z2i7/hOV732WG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:9a:d7:a2:ed:8c:e2:b0:b7:a8:91:cd:bb:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: May 17 16:02:44 2024 GMT
Not After : May 18 16:02:44 2024 GMT
Subject: CN=2f69b987f4c5831ec55af63d38674f3f84ac05fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:b5:ef:fc:f4:5e:3c:7e:e1:fa:2b:f2:d0:
a8:2f:45:f6:44:6c:57:48:fa:94:cf:20:e0:1a:00:
e5:cb:87:50:5d:81:72:77:0f:bf:6e:82:f7:78:33:
11:1e:1b:5d:f6:fd:cd:85:c0:4e:32:b9:1f:3f:93:
de:48:c4:26:32:69:3f:9c:6a:49:4b:a7:f8:73:54:
df:31:c0:21:c4:b5:8a:d4:ce:96:bc:ba:0e:46:11:
af:86:9e:39:3e:fb:2e:90:a7:ff:45:3f:ae:66:11:
e2:d0:a1:47:49:b1:0d:69:cd:36:fc:a5:3f:f7:ce:
bb:25:a5:75:0a:22:7c:0e:90:51:a9:2b:34:0a:d2:
8f:23:4e:2d:86:49:28:72:21:6e:9d:2e:bb:6a:1d:
2b:21:9b:a9:7c:24:62:7b:a9:09:24:c4:bb:b3:8b:
22:fe:03:a3:3f:d3:69:86:d7:e2:bb:68:7d:a1:98:
26:ad:98:e9:f6:4f:9d:b5:85:ca:8e:18:6a:54:8e:
05:34:c9:db:11:db:0a:53:7b:6e:c4:7e:15:7f:81:
42:23:b0:47:6c:de:74:e3:39:8f:9d:01:2d:e1:4d:
48:52:0e:a5:bf:e8:09:87:0a:27:12:f7:02:8c:6f:
e2:a2:1c:8b:5b:e4:42:81:e5:37:69:8b:33:01:9e:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:69:B9:87:F4:C5:83:1E:C5:5A:F6:3D:38:67:4F:3F:84:AC:05:FE
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:7f:68:44:31:1f:60:45:e1:40:2b:39:84:f9:32:38:86:
f6:da:d8:60:12:0e:96:1d:7f:5e:d7:09:8e:b3:24:88:23:47:
da:e6:de:48:5c:4f:51:f9:e9:2b:cc:56:1c:00:3b:fa:43:49:
d3:56:92:7b:07:99:c0:37:69:1c:43:c6:87:ad:32:db:b4:d9:
b1:1d:ba:1e:ee:69:d8:a4:a9:12:57:88:86:29:b8:2e:96:cf:
9e:57:f8:2c:02:ce:70:cd:3f:dd:cf:9f:74:fd:1e:b3:19:43:
01:de:f8:51:9c:5c:e9:7b:9b:02:a7:29:e4:de:0b:4b:09:d9:
38:a4:98:40:ca:33:36:54:c1:8d:fe:6e:4b:02:13:c8:ea:e6:
77:df:98:70:fb:3d:dd:9b:39:53:1b:5f:b9:9b:f5:8b:91:4f:
08:25:9a:75:f1:87:7a:6c:0b:e0:df:f4:f6:36:43:00:d6:34:
a1:90:81:c0:cd:8e:f5:d4:16:0b:c6:7b:60:0d:c8:2d:55:94:
b1:68:7b:a9:aa:bb:27:05:68:76:ad:d4:94:09:d3:10:c8:3d:
3e:7a:6e:bc:ac:43:78:b8:70:26:50:56:11:83:07:64:1a:53:
b0:eb:3a:5e:0f:98:e6:5e:90:14:e3:5c:a7:e8:7a:ca:93:71:
8e:84:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:28 2024 by rpki-client on console-ams.rpki-client.org