Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 7HIB4HiCCTKt0bseFS8G/rHZ2neytPembR+SddQd9ig=
Subject key identifier: 21:A2:5C:59:24:68:C9:41:A0:BE:13:98:66:E8:95:61:3E:43:84:DE
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 0191FAB4F7399D9E52FCB9C71A3F0BA10077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: E9
Signing time: Mon 16 Sep 2024 12:00:49 +0000
Manifest this update: Mon 16 Sep 2024 12:00:49 +0000
Manifest next update: Tue 17 Sep 2024 12:00:49 +0000
Files and hashes: 1: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: qzXzB+S8kNYl4zfrZknNLF8Rk4h4gsJwFlnuwuHSYrM=)
2: zPgrfXzNu5g3ga4u9iJp6lBHehI.roa (hash: I893Qc6rnj5gmLwCvoILXvSPP2Gpj/JUINtpeEn9KXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:b4:f7:39:9d:9e:52:fc:b9:c7:1a:3f:0b:a1:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Sep 16 12:00:49 2024 GMT
Not After : Sep 17 12:00:49 2024 GMT
Subject: CN=21a25c592468c941a0be139866e895613e4384de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:05:95:e5:90:00:1e:18:b5:57:49:46:d2:
06:dd:37:9a:14:98:49:90:64:dc:38:e5:31:61:f5:
41:9b:4d:a9:f2:26:e8:71:65:00:27:d1:13:e4:cc:
3a:e8:64:f8:eb:96:ab:4c:45:fd:8d:d8:40:05:d8:
4b:a3:f6:aa:92:8d:28:47:c0:4a:91:dd:b0:b9:76:
39:c2:71:d2:4a:f9:4f:69:69:d9:2d:96:ab:65:33:
63:62:b7:1d:b6:6f:82:e0:57:f1:ab:c8:48:9e:5d:
f9:63:67:6b:0a:89:ea:c9:9f:3d:b9:70:32:c7:e6:
df:21:c5:55:f5:30:e4:3d:e7:c0:29:49:87:22:18:
d9:4a:62:8c:2b:7b:8f:ab:52:cb:49:f5:f0:73:88:
a9:63:70:44:fa:91:ad:c1:2b:85:61:6e:32:e2:a8:
c5:06:f5:d8:b8:b9:dd:56:94:47:7c:09:b5:6c:42:
9b:4b:c2:85:b6:7a:a6:b7:f8:fe:5b:6d:82:27:99:
77:07:c7:39:2b:91:3c:1a:d5:f5:62:cf:bc:38:3e:
cc:a7:ad:fe:a6:23:55:2a:cc:c0:7e:a3:bb:8e:72:
99:74:ca:24:10:75:3c:e3:89:09:e1:c6:06:14:2d:
0c:c1:39:b8:9d:ae:aa:f8:80:d2:32:1c:bb:9d:f2:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:5C:59:24:68:C9:41:A0:BE:13:98:66:E8:95:61:3E:43:84:DE
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:22:eb:f0:b3:b3:43:56:af:43:ea:40:4e:37:59:41:8d:
46:50:25:6a:c8:ed:61:8a:55:b8:49:db:13:0d:56:b4:a1:ad:
a0:6a:e1:35:48:fb:d9:e8:39:2b:db:6e:dc:6d:4e:dd:3f:e0:
ac:41:ce:f4:3a:c5:82:4a:df:96:43:04:da:b4:f9:64:b0:26:
fe:8b:ff:fb:aa:a0:12:d2:5f:2b:bc:ca:72:3f:15:4d:12:87:
68:30:11:69:2f:35:17:14:1b:3e:d4:ad:d8:be:45:37:56:a3:
a6:2c:53:5b:e9:be:83:d7:51:c0:a4:a8:ba:43:ea:f5:0c:45:
4e:ef:ed:b5:4f:d8:2f:6b:b6:bd:9e:1b:0a:01:b6:51:00:01:
9e:31:5a:fa:02:4e:68:69:05:e2:04:6c:fe:c2:9a:fc:8c:b2:
38:a4:87:d9:f2:5b:5c:88:b2:3a:3e:cd:75:9a:b9:52:9a:45:
ee:ce:51:a0:11:43:10:64:61:49:79:52:4c:e0:9d:18:38:93:
1f:32:44:96:6b:27:f4:13:91:dc:c5:8b:bc:fa:73:ea:e7:95:
37:9d:fe:c1:37:66:0a:0c:c6:28:56:e3:15:dc:d9:ef:6d:a5:
70:18:86:25:67:26:81:92:6d:f0:d1:3a:70:c8:3f:60:bd:1b:
ab:b6:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:30:42 2024 by rpki-client on console-fra.rpki-client.org