Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: h0Dm1GINwYhiBmdqqAnxP/OjfmIOgbbBHRrdn97SQ44=
Subject key identifier: 68:0B:92:C5:F5:85:FB:12:70:40:E5:C0:3E:C7:5B:31:09:7E:43:C9
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 018F874B2C949FF483A83BBF3DC57C9F3F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0907
Signing time: Fri 17 May 2024 16:03:21 +0000
Manifest this update: Fri 17 May 2024 16:03:21 +0000
Manifest next update: Sat 18 May 2024 16:03:21 +0000
Files and hashes: 1: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: XDB0r8nViZOo73RosOlMPtEzQC/nlv7RyOXqPLOwpRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4b:2c:94:9f:f4:83:a8:3b:bf:3d:c5:7c:9f:3f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: May 17 16:03:21 2024 GMT
Not After : May 18 16:03:21 2024 GMT
Subject: CN=680b92c5f585fb127040e5c03ec75b31097e43c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:be:e6:40:1a:4b:c5:a7:ab:f9:bb:07:55:
a4:52:47:f7:b2:a0:ff:43:eb:fd:be:61:e2:39:5c:
fc:f3:d6:f3:13:b1:4f:bc:3f:93:ca:13:5d:b1:cf:
1b:2d:4a:fe:c0:75:05:6a:99:8f:20:90:6e:e5:59:
94:7f:22:f3:0e:6c:4f:9e:18:e2:13:15:23:ce:c8:
8c:04:b1:d9:2f:2c:ff:49:54:12:77:d0:58:3e:a9:
b5:f3:d2:4e:61:d9:0d:10:75:9c:06:bd:c0:ac:29:
aa:fa:da:1a:88:ae:a5:1d:14:97:b8:4a:2e:75:0d:
fd:d7:0d:f8:57:c0:10:67:09:07:6f:c7:0a:6b:8d:
35:dd:b4:82:d4:48:62:fb:a6:c7:f9:91:fd:75:12:
e8:89:58:dc:c0:43:76:8f:1e:13:89:ff:b1:4c:a2:
df:74:dd:0e:98:1b:d2:5b:45:30:79:15:46:aa:34:
0e:83:00:92:50:2c:b8:a9:1f:cc:25:b8:33:b3:03:
44:cd:6a:c0:1c:68:a7:33:b8:25:3b:7f:ff:6c:b4:
32:1f:fc:46:fc:81:e4:74:7d:8b:5e:80:95:ea:51:
61:2c:b2:e8:fe:d1:cb:e3:42:3c:9b:0b:ea:b6:ed:
8e:33:bf:21:73:3c:ae:9d:c9:8b:d0:5b:44:ef:38:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0B:92:C5:F5:85:FB:12:70:40:E5:C0:3E:C7:5B:31:09:7E:43:C9
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:9e:c7:da:bc:6d:59:65:aa:20:84:26:4c:48:42:e0:c8:
6b:2a:4a:39:8e:06:09:d6:98:32:88:eb:ce:24:db:a0:bf:35:
b1:98:3b:2b:98:53:58:31:2f:3a:d8:fb:a9:fa:da:5f:0f:7f:
1a:d8:ab:a2:8c:d0:8b:5f:3e:73:91:fe:44:48:21:fd:9e:4a:
cd:64:40:c3:44:77:49:ac:e7:1b:a8:86:cb:19:f5:bc:90:ac:
a0:d5:3c:ce:71:71:84:dc:8b:c3:55:51:1c:a5:12:6e:9d:65:
02:65:34:93:d5:52:09:d9:a8:7f:a7:5c:c8:99:e1:35:48:6b:
be:d4:40:21:7c:f7:37:77:98:24:19:65:7f:b7:d8:dc:9d:7b:
5a:f8:6a:72:40:4f:ab:c6:68:0e:9e:b1:f5:4f:f2:44:61:93:
dc:71:e9:63:ff:cc:e9:46:0d:3a:32:fe:26:bf:9c:7d:2b:82:
1f:20:5c:8d:50:30:4d:41:7e:a2:18:c5:6a:97:4a:8c:92:66:
3c:83:bb:a7:62:8a:37:87:fb:08:4c:be:e1:97:ae:cb:23:45:
72:46:3a:ba:7f:e1:96:a5:3c:4a:e5:1e:89:58:54:76:ce:07:
ce:09:ab:77:de:41:70:f0:16:f6:cd:9d:29:39:24:7f:28:b8:
39:ad:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:40 2024 by rpki-client on console-fra.rpki-client.org