Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: qL8aFzTgWFFvAKpHazJKRU46KpDRS0UesPPXryZyf6I=
Subject key identifier: 3C:C3:B9:5A:E8:D2:2E:AD:D0:90:29:9A:40:47:22:0A:17:03:F9:C6
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 018F9C8910C128C0502325F3810FC667EC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0879
Signing time: Tue 21 May 2024 19:02:59 +0000
Manifest this update: Tue 21 May 2024 19:02:59 +0000
Manifest next update: Wed 22 May 2024 19:02:59 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: BWFFEtCBnTYBCYCwTXSbOZZDtQ2Ue/l1l69PDn5Xt2k=)
2: bJANR4ytovfJLhvG4EiaYAYNPjs.roa (hash: OFg8kG+fQKMYh4rX2fqOW4e/rNmJdVC/iTSXNA40AH8=)
3: dgo-TxTjRLaR6GUujA1pI5Y6j4s.roa (hash: BAP+ozcRBETR+bjceVisJN7OKxr37zVeHbxNSzHwRQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:89:10:c1:28:c0:50:23:25:f3:81:0f:c6:67:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: May 21 19:02:59 2024 GMT
Not After : May 22 19:02:59 2024 GMT
Subject: CN=3cc3b95ae8d22eadd090299a4047220a1703f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:04:5a:dc:e1:d0:dd:eb:e9:1e:bd:8e:81:
f6:2c:c4:57:73:8c:73:84:21:5f:1f:06:67:77:37:
52:59:17:13:29:82:eb:f4:8d:7e:fc:62:61:71:1b:
ea:08:55:6f:fd:51:9d:c2:a8:a9:af:cb:0f:3d:2c:
24:87:c0:66:17:2f:97:f0:dd:7c:fb:1c:ca:7f:b6:
59:1e:f8:2a:c3:7f:1c:53:10:53:58:3e:d8:8c:12:
0c:58:64:aa:ba:dd:a9:42:f4:06:46:c6:5b:95:bf:
b3:e3:94:a5:bc:28:fb:30:4f:8f:9e:3b:a4:76:99:
5f:d2:a1:01:63:11:1a:5a:01:e5:0f:12:af:f7:dc:
f8:78:e9:2c:82:c4:f5:58:be:b0:a1:70:3c:ac:e9:
f1:7d:13:f0:c5:57:f3:ae:d8:a3:9a:47:92:29:15:
fb:8f:4b:02:8e:e9:34:00:bd:1e:a0:70:b3:67:f9:
a5:93:ef:fd:1d:d8:73:10:4c:a6:0e:58:4b:dd:6a:
ab:df:9e:f5:f9:8c:6d:39:41:33:5a:88:70:12:ff:
37:cb:39:97:e7:33:e7:10:e9:40:79:dd:96:06:da:
c0:b9:62:ee:4a:23:45:bc:40:7e:24:d0:fa:41:b8:
cd:c9:33:e3:e3:37:00:05:e4:1b:61:dc:05:f5:98:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:B9:5A:E8:D2:2E:AD:D0:90:29:9A:40:47:22:0A:17:03:F9:C6
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:8e:16:e4:a7:f3:fd:8b:a6:b3:1e:22:11:bd:a7:0a:1a:
0c:a4:3d:f6:cd:f3:5a:df:89:3e:e9:69:32:90:8b:05:89:00:
19:4c:23:06:ae:fe:48:7d:5b:2b:85:c2:0d:df:af:d8:37:f3:
98:58:ad:20:7d:1f:ae:c7:6e:6c:05:c5:63:ad:50:20:c6:f2:
49:40:c7:18:83:89:a4:a5:7a:26:08:2c:c0:03:94:97:be:71:
57:0f:ab:05:c9:f7:15:5d:13:d3:4a:60:c3:85:68:da:26:2a:
a6:78:bb:fa:a2:55:e1:ca:b8:27:7b:a7:2d:70:13:b3:74:5b:
92:34:3b:6d:f4:23:af:c4:83:d8:d3:c1:f4:44:46:b1:92:0c:
de:76:35:00:83:2d:67:b9:f0:6a:eb:39:08:63:2f:2c:63:17:
76:3a:c1:b3:ea:9c:c7:65:4a:88:b8:01:5e:55:eb:bd:86:3e:
b7:42:21:4f:eb:21:d3:2b:e1:13:19:b4:59:22:76:4f:78:fb:
ad:a5:28:83:34:e3:f7:52:ac:86:27:87:e8:10:ae:f1:a1:96:
44:74:b2:76:1a:04:b8:cc:2a:33:d9:9c:f4:d9:48:07:29:c1:
b8:40:0f:ea:f2:35:44:dd:8e:22:75:1d:ab:0e:5e:b0:02:5e:
b8:44:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:07:30 2024 by rpki-client on console-fra.rpki-client.org