Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
File: oPedxcyv8VxqShP9qLcaj7drgow.mft (raw, json)
Hash identifier: sVbr+MKIdXcSXHqW0ZvRE52QFGY/eX5KInWloLEKyZM=
Subject key identifier: EF:85:CD:F0:B1:8B:4F:3A:16:49:2C:BC:BF:0D:43:AA:0F:BE:33:17
Authority key identifier: A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
Certificate issuer: /CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Certificate serial: 01935878B02F3922B8611B857C84D5D9D3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
Manifest number: 05C0
Signing time: Sat 23 Nov 2024 10:02:04 +0000
Manifest this update: Sat 23 Nov 2024 10:02:04 +0000
Manifest next update: Sun 24 Nov 2024 10:02:04 +0000
Files and hashes: 1: oPedxcyv8VxqShP9qLcaj7drgow.crl (hash: jayUSbIfgejKt/ZlHyS9FU610SJhU4YocX6aFA+0gdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:b0:2f:39:22:b8:61:1b:85:7c:84:d5:d9:d3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Validity
Not Before: Nov 23 10:02:04 2024 GMT
Not After : Nov 24 10:02:04 2024 GMT
Subject: CN=ef85cdf0b18b4f3a16492cbcbf0d43aa0fbe3317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:5c:2e:5c:f0:3e:b4:02:bd:1c:cf:8c:51:
0e:3e:ea:16:c4:df:c0:a8:23:a9:8f:9e:70:e3:e9:
4b:a9:b2:13:f6:b1:ec:28:2d:51:ad:76:1c:0f:97:
0b:2c:91:f2:c0:29:16:79:a1:22:ed:40:c2:2a:6a:
4d:3a:48:80:76:cd:a3:f9:48:1c:0a:dd:ce:7f:fd:
04:41:aa:5c:31:b7:c2:8b:c9:d0:7c:8a:20:65:2f:
74:08:8b:87:ab:41:ac:50:47:44:08:81:9d:56:5f:
64:89:49:ef:55:86:99:a0:42:b1:49:20:56:92:ea:
a1:12:31:94:49:2f:e8:cf:48:47:78:93:3d:c0:81:
e8:36:c9:dd:6a:f0:dc:75:77:ff:0e:25:15:f0:5d:
95:a8:8a:4d:15:5e:59:48:78:2d:43:a2:97:b5:ba:
60:af:56:50:01:a9:e0:5a:e7:8b:e9:d3:1b:91:7c:
75:ca:36:34:bc:73:b2:43:3a:20:9f:5b:e1:13:12:
75:aa:f0:1d:d4:37:56:0a:95:94:49:33:92:58:fa:
a8:77:c1:56:b6:8e:fb:91:eb:dc:b9:6d:bb:18:e9:
dd:d2:bb:3c:50:d9:a4:2c:81:4b:b3:b0:78:fc:d5:
cc:ed:9f:fa:ee:be:7e:90:1f:40:16:83:8e:e6:4f:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:CD:F0:B1:8B:4F:3A:16:49:2C:BC:BF:0D:43:AA:0F:BE:33:17
X509v3 Authority Key Identifier:
keyid:A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8b:c6:05:13:58:aa:64:b9:a2:ff:f0:d2:1d:06:15:f4:4d:
ca:ee:b5:56:f8:f6:75:04:b9:5c:cd:c3:8f:8c:fd:44:b3:53:
c5:9b:7b:94:88:20:ab:c3:d6:ae:3b:02:e0:39:6f:56:0b:f9:
56:95:da:69:26:b8:30:17:4f:77:81:38:9d:b4:dd:d9:80:c4:
f2:58:9b:5d:36:44:71:14:8a:bd:cb:ce:93:47:f7:70:ab:f1:
2c:79:be:16:f0:8a:a3:52:e3:08:7e:98:8e:f6:8b:10:e1:3e:
13:9a:dd:90:46:18:50:bc:f3:ec:3e:75:4f:48:ff:b4:62:56:
44:c6:e8:e6:9b:7c:02:12:05:c9:d4:22:5d:94:12:3b:b3:c1:
91:a0:ed:5c:e7:f7:f8:38:0b:67:63:d7:bf:05:ab:fe:97:b1:
86:93:38:7a:29:d0:15:36:95:9f:7a:b7:a6:55:46:a6:16:a2:
9e:73:1a:28:88:5a:67:03:e0:e1:75:d7:ee:c8:bc:82:72:94:
bc:ee:95:3e:b4:64:c7:7e:7a:24:86:05:a6:ec:f1:84:46:bf:
03:26:40:cb:40:ad:4a:c1:c8:c9:53:76:6c:4f:33:68:80:c3:
30:4c:74:b4:ad:85:2e:74:5f:ff:c9:9b:cb:44:4b:de:39:ab:
5c:e0:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:29 2024 by rpki-client on console-fra.rpki-client.org