Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: bmurv+TPuI+jeo3bWwGeG5z3/c9E0Nkhn9fX7e8wFFg=
Subject key identifier: 0F:95:2F:14:3B:4C:70:55:96:48:E5:7B:7F:01:E0:BE:CA:06:34:A2
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 018F874A7EE0960EEF7828DBCE1A3C11A50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 0DBB
Signing time: Fri 17 May 2024 16:02:37 +0000
Manifest this update: Fri 17 May 2024 16:02:37 +0000
Manifest next update: Sat 18 May 2024 16:02:37 +0000
Files and hashes: 1: 3UAwUasb8GUCAdSlEJM0oxgfIrA.roa (hash: prx1pfbTiHL+EdzEk/fdrIiejhT5sgJytsEgTzQQSvU=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: Kl8EVwO9M02AEnEGb1VNIVN5dmnpXgRwSnoQsjmdoEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:7e:e0:96:0e:ef:78:28:db:ce:1a:3c:11:a5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: May 17 16:02:37 2024 GMT
Not After : May 18 16:02:37 2024 GMT
Subject: CN=0f952f143b4c70559648e57b7f01e0beca0634a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:f5:d2:d2:e8:0a:13:77:da:31:aa:67:b6:
c6:c1:84:24:10:f3:c7:32:34:8c:35:a5:bd:1f:84:
09:98:d7:e4:6d:57:2a:d8:c3:73:d2:2d:92:94:dc:
f8:fd:c6:6c:ae:91:08:ee:2f:96:05:f1:a6:74:01:
d2:6f:5a:5a:5e:eb:2c:76:d0:ad:f6:be:ef:5c:8d:
dd:a8:30:19:b5:56:48:dc:ea:66:03:98:72:f4:18:
54:5c:e6:e9:d7:72:f2:46:70:ec:30:9f:b7:7e:ae:
b4:50:1e:51:20:e5:8d:0d:1b:03:da:34:d5:b0:37:
cd:8e:50:dc:a2:be:68:4e:64:08:09:f6:6a:58:73:
a4:09:c2:b6:d7:1c:d6:9c:3a:96:7d:5d:06:39:fe:
5f:d7:b5:a4:79:8a:e4:0a:a4:d3:f1:cb:44:c3:1f:
12:3a:44:47:af:5d:ba:f5:58:5a:13:fe:df:7c:5b:
62:55:03:a1:aa:32:73:7f:c3:29:36:f2:f2:f9:87:
94:3d:51:df:1a:05:28:af:0e:28:26:84:23:19:f7:
24:97:7c:26:61:e1:72:2c:11:ce:ea:05:a2:c7:a4:
1f:1a:ad:c1:fb:29:8d:04:a5:95:b9:fb:ca:a8:70:
a6:89:2f:5c:84:2c:0d:04:0c:2c:0e:58:12:0a:8e:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:2F:14:3B:4C:70:55:96:48:E5:7B:7F:01:E0:BE:CA:06:34:A2
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:37:a4:15:aa:10:01:c3:52:a8:da:e3:7b:19:25:0c:50:
9c:4e:0d:cc:21:5a:7c:37:60:c1:b6:35:a1:7a:b0:ce:eb:d6:
c2:76:0c:cd:19:31:eb:ff:fb:84:f0:06:13:54:18:87:c8:3a:
be:cc:a2:59:5a:2f:c8:25:c2:9e:dc:ae:d0:2c:88:7b:95:ee:
3b:e2:72:2e:1b:a4:6a:9d:a7:a1:f2:4b:36:31:50:82:93:ff:
2c:df:36:9b:71:ee:90:67:63:04:0b:59:79:99:34:0a:89:d3:
a8:c3:b2:2b:9c:db:56:8e:e3:89:63:a9:9a:5b:e2:39:ba:db:
0a:11:e9:b0:a5:9e:59:59:7f:79:62:c9:f2:13:3f:ab:f8:bf:
b3:66:3d:a4:2a:b0:26:70:07:10:5d:99:e3:1b:a0:93:45:80:
c5:1b:34:bf:ea:32:4f:66:29:ed:61:79:c3:57:95:7c:f3:62:
c0:f5:95:fa:a1:23:4b:06:8c:b8:b9:bc:c8:54:b9:28:f6:a3:
6d:30:24:b3:27:74:75:c1:c6:ea:6c:36:57:71:06:57:6a:98:
fb:e3:45:3e:07:37:6b:ba:94:a5:c6:7a:e2:e1:28:7a:07:0c:
db:ca:d9:1d:07:20:d8:b9:0c:5b:a7:7f:cd:44:fe:43:f1:9f:
82:22:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:39 2024 by rpki-client on console-ams.rpki-client.org