Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: /zCLtLFPKHwV2OCjsQwlGXixT98FM19ElSKXjOhAWF8=
Subject key identifier: 3D:4E:43:E9:E9:A4:A7:63:20:BB:76:50:BE:10:87:AD:F7:52:85:38
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 018F855BBD28A1B11606F74A759FF924CF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1178
Signing time: Fri 17 May 2024 07:02:12 +0000
Manifest this update: Fri 17 May 2024 07:02:12 +0000
Manifest next update: Sat 18 May 2024 07:02:12 +0000
Files and hashes: 1: M6m4mzr7mt-7zZhpWwgzFwkcciw.roa (hash: zA20CPBynHIs6aIQLdBsx0EMxs35D3OBLAuUTFtNgXI=)
2: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: UQEVrFyrO9dSJ2vOUT15iLdZrxaEwmrf2DBWkWO4FVI=)
3: prXeJS5mi-ks0_dAqGR4Fqv5fPA.roa (hash: QQzjOBOCqXBhMJkUkPsxNvJuqoRGlZKrQrKKc2UDaY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:5b:bd:28:a1:b1:16:06:f7:4a:75:9f:f9:24:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: May 17 07:02:12 2024 GMT
Not After : May 18 07:02:12 2024 GMT
Subject: CN=3d4e43e9e9a4a76320bb7650be1087adf7528538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:23:95:75:14:42:8f:14:73:a1:b0:4f:e5:
f1:ef:34:99:03:2d:74:fe:35:98:2b:07:e3:89:7e:
5b:05:7f:f4:ca:b0:6e:ca:72:df:3f:59:5e:f5:bd:
29:ed:ef:cd:f0:f5:a5:b1:f7:fd:e7:90:ee:f5:e0:
58:eb:c3:97:6a:f6:e0:10:4b:af:7a:2b:8d:76:21:
ce:a1:b0:d1:19:9a:11:69:2d:88:53:d8:76:69:2e:
12:ab:e9:6d:d0:ae:ec:91:f9:0b:25:89:56:b0:59:
28:2e:d2:6e:17:65:f1:35:b4:35:88:87:a8:37:bd:
1e:e6:31:7f:1e:9a:42:e4:de:72:94:7a:89:ab:fd:
1e:1c:c3:44:0c:da:87:30:9a:18:5a:64:93:1d:63:
aa:ff:c0:22:98:f6:8e:b7:af:07:2a:29:f5:6f:2d:
61:b8:a6:56:5c:7d:bb:a0:81:af:89:a4:60:6e:36:
61:5d:4e:43:57:eb:c7:8a:62:ef:51:b0:86:b6:c4:
af:a3:9b:2d:82:c8:84:75:3b:e6:db:ad:56:77:f0:
ce:f6:86:43:9f:63:a5:e8:a0:8b:41:d6:0b:df:b1:
09:10:8f:cb:f1:0b:d9:64:14:61:ee:60:ba:41:91:
c5:bc:ac:52:3e:15:39:d8:26:92:45:78:23:81:22:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:43:E9:E9:A4:A7:63:20:BB:76:50:BE:10:87:AD:F7:52:85:38
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:f5:9f:f8:4c:0c:01:e1:2b:42:7a:16:58:e8:4c:5e:d4:
60:92:44:4f:14:cd:14:3c:61:fe:2c:c2:23:2f:44:4a:dd:9f:
c1:62:d8:ea:1f:86:8a:99:b0:ac:ee:3b:27:de:23:3c:18:8a:
d4:13:e9:76:4d:25:c9:a3:07:02:1d:6f:25:43:3f:90:f1:60:
ac:3b:b0:49:09:65:3e:a0:e3:65:76:9c:6d:18:da:d6:da:77:
2b:af:5b:99:33:96:e5:71:87:b9:0d:0a:5b:0f:d9:b7:c7:a6:
e8:68:bc:df:a1:e2:94:12:96:e1:46:59:d4:8e:c7:d8:5c:56:
6e:6b:1b:3a:59:59:f4:62:d8:12:1a:55:e2:02:62:ff:54:5f:
48:1e:e8:d6:5a:28:ae:58:5e:c2:64:09:94:53:1f:6c:14:f3:
1c:37:cd:8a:83:e9:da:17:67:97:fd:59:74:b8:bb:dd:15:7f:
16:be:82:fc:b4:d5:68:fe:ef:42:be:70:f3:c3:3c:62:f1:42:
ef:46:1c:53:e3:53:ee:05:14:3b:1d:3b:f7:3e:5c:8c:31:80:
29:46:9c:44:d8:cd:b3:8b:23:9f:9e:45:80:07:6a:d4:69:a1:
09:02:28:91:7a:dd:b5:5c:2d:a6:00:f4:e7:49:7b:f5:36:a1:
4d:db:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:10:42 2024 by rpki-client on console-fra.rpki-client.org