Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: +DnmzisB6bSlkmDQg4mzXrquaf5MrEbPbgEowjH7l90=
Subject key identifier: 1F:3B:DC:CB:FA:B8:51:B8:82:D4:94:54:28:CA:FF:40:EF:99:02:80
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 018F882486784C942CB975E4CB793469ED01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 0BE9
Signing time: Fri 17 May 2024 20:00:46 +0000
Manifest this update: Fri 17 May 2024 20:00:46 +0000
Manifest next update: Sat 18 May 2024 20:00:46 +0000
Files and hashes: 1: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: WjSlzWWKRdyZ4HKOgNLdRZiasAkwpUppSpIcoI97JIs=)
2: rLgWYwedERQV0qquse9NPvj21ic.roa (hash: o4P6sBI2iJS/agPQobDRCN6/+HiXbNxUl0749ZhdYK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:86:78:4c:94:2c:b9:75:e4:cb:79:34:69:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: May 17 20:00:46 2024 GMT
Not After : May 18 20:00:46 2024 GMT
Subject: CN=1f3bdccbfab851b882d4945428caff40ef990280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:f5:ae:57:29:db:f9:09:1d:13:4a:3c:03:
fa:70:9a:5d:54:9a:01:dd:8c:a6:4a:90:ac:d6:87:
37:76:4e:40:c4:b1:9d:d8:3f:cc:be:e0:ce:de:84:
7a:9a:b9:0a:3d:13:f8:5a:bc:b9:27:31:e3:55:70:
18:af:5d:8e:6f:5c:0c:25:66:00:5b:2e:c4:d7:fb:
e1:13:8b:df:7d:3d:08:38:dc:c7:b8:a4:73:f2:23:
ff:4f:96:9a:88:ec:b3:c5:10:99:36:91:d8:9b:67:
fb:44:0c:e3:f2:ef:a1:87:7f:c2:6b:8f:f7:93:9f:
33:51:99:da:75:f8:6e:c4:44:15:ee:c1:62:2e:c7:
9d:10:c4:55:11:7d:29:d2:3e:b4:f4:96:60:e7:6b:
91:ea:02:03:54:3c:37:5c:e9:fc:9c:bc:e0:23:8f:
7b:60:3c:a1:04:78:c0:39:c8:b2:1b:34:8d:5c:7f:
98:42:8a:f5:91:66:6a:7d:91:07:83:cc:7a:b5:ba:
f0:d6:5e:a6:b8:86:71:7d:30:78:1d:07:46:c9:77:
22:31:f3:51:b7:9f:42:53:56:fb:e0:50:8c:9b:91:
7c:bd:71:ec:0f:d4:30:81:5f:2e:56:36:89:0f:62:
0a:b5:1b:ae:74:d1:e6:eb:ee:09:a9:e7:c7:9a:f1:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:DC:CB:FA:B8:51:B8:82:D4:94:54:28:CA:FF:40:EF:99:02:80
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:c9:81:55:96:2f:cf:a3:e9:5f:c7:33:2a:be:56:b2:0c:
f3:2c:1c:a9:5a:bc:c6:a1:60:17:73:13:4a:9d:35:a0:80:d9:
85:23:4f:28:70:c7:47:70:6e:fd:18:49:a7:ee:a2:59:bf:97:
77:5b:84:80:5a:fc:00:94:af:96:47:c0:15:52:00:ca:8c:02:
85:29:3e:4a:06:bd:fa:da:59:3e:dc:87:3f:89:6f:52:20:d0:
87:11:96:ae:27:d2:c5:46:fc:7e:e9:e7:52:a6:42:10:22:5b:
e5:7a:09:a2:83:0d:ff:6a:ba:86:33:19:6a:68:e1:56:7e:a7:
ab:48:1f:1a:80:d0:53:e7:35:1f:9d:ff:42:d4:81:60:11:60:
a1:03:8a:76:4d:82:24:18:f4:47:16:e7:75:91:0d:d6:87:f8:
f2:0a:72:87:d7:73:1b:21:c0:39:c5:d1:c4:f1:d7:11:3c:be:
27:6e:d0:4b:63:07:f9:fd:d9:07:fb:22:40:a3:b9:b6:b0:19:
b4:dc:f2:63:b0:a8:5a:11:56:7a:f8:3d:08:81:97:85:dc:9d:
fc:b1:1d:f2:55:0b:07:97:37:3e:de:aa:be:cc:c4:74:2a:f9:
77:a7:1f:1a:22:79:6b:76:81:35:c7:00:4f:e5:aa:d7:43:e2:
1f:cc:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:10 2024 by rpki-client on console-fra.rpki-client.org