Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: 3aehPpWge+9LI4i1KyT2vkIXZ8Kul02CDAvBuGHEzbw=
Subject key identifier: 1C:3D:61:51:DB:28:9D:8F:CF:A1:A9:09:53:61:E0:95:07:7A:D3:31
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 018F40B143E16E12600F3BCD82F07C58D914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 1154
Signing time: Fri 03 May 2024 23:01:50 +0000
Manifest this update: Fri 03 May 2024 23:01:50 +0000
Manifest next update: Sat 04 May 2024 23:01:50 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: CAcLss23LdKMpBvVdndmDN99YJGLMFsbpOAu8QjAnvk=)
2: JxRLeDXWIQEVsvn6kXjvEX65gkQ.roa (hash: uRRLz6emT2cimBaPjSAggiBUt2m4Qx4negjpI2BOcnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:b1:43:e1:6e:12:60:0f:3b:cd:82:f0:7c:58:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: May 3 23:01:50 2024 GMT
Not After : May 4 23:01:50 2024 GMT
Subject: CN=1c3d6151db289d8fcfa1a9095361e095077ad331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:ae:15:fb:41:a2:e6:30:e0:52:20:10:a5:
ec:83:7b:25:35:44:03:55:37:04:19:45:ad:9f:d5:
59:42:1f:ad:4a:ce:49:fd:1e:a9:02:56:9b:5b:cd:
f2:dc:f9:3b:60:e0:fe:c8:61:ed:e2:b3:6b:b3:7f:
06:c8:ec:cd:57:8e:40:dc:a7:5f:ad:6d:4a:d3:c7:
ca:6b:11:68:d8:3c:f3:77:d8:49:c2:bc:1d:3b:fe:
b4:99:cf:26:b2:f9:32:3a:f2:ac:41:fc:8d:e0:9a:
ae:42:1c:50:52:86:24:b3:37:d1:4a:65:17:3b:e4:
79:99:5f:50:7f:46:ea:a1:22:ac:e6:c9:06:21:5d:
bc:1b:ee:d6:8c:b0:13:35:82:26:f3:62:ce:74:37:
79:f6:26:e9:49:ab:bf:e5:a3:f0:cd:bd:e5:0f:78:
42:48:81:08:df:b1:af:40:8f:2a:9b:45:17:cd:4f:
10:74:8d:b2:2e:4f:1f:bb:0e:ad:44:3c:39:dd:87:
43:3a:a1:da:3f:d5:76:fb:05:25:b2:d8:4a:30:8d:
ab:30:21:6d:fa:99:43:77:0c:51:11:b6:e2:fe:39:
c9:7f:d2:4a:e8:38:ee:5c:47:26:ba:9b:a4:51:89:
30:34:fd:45:e4:6c:6d:62:be:43:f4:60:15:e7:5f:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:61:51:DB:28:9D:8F:CF:A1:A9:09:53:61:E0:95:07:7A:D3:31
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3d:b3:c8:5e:48:e2:ca:21:ad:40:d8:f9:d6:14:fa:19:26:
3d:d1:2f:39:39:0d:ba:7a:4f:92:de:57:44:3f:2d:b8:f2:28:
21:d7:a4:2a:7c:e1:af:00:0f:d7:c6:c9:14:2e:4d:d5:38:87:
7b:8e:2b:5f:38:d1:d4:b9:8d:3f:cb:66:f8:0e:c3:ee:90:d4:
4f:70:33:f2:be:63:3d:66:00:6b:f7:0f:42:c4:d9:ce:07:25:
d5:a3:54:e6:53:78:59:ca:eb:5e:19:4c:a2:a7:b8:62:8c:49:
ed:e8:ba:37:55:bf:0e:cc:86:d8:4a:32:ca:8b:e1:8a:cb:dc:
75:e1:04:d8:d2:8a:b1:73:07:04:ca:0f:c7:7b:a8:26:f4:ae:
1f:cc:20:97:3f:31:ad:6a:44:28:43:69:fd:e9:87:74:fa:3e:
bc:54:a6:d5:35:9d:10:90:1f:df:75:c8:e7:cf:f4:4b:99:31:
20:f2:ff:23:74:9a:87:ed:5f:bc:9f:cb:36:81:4f:91:11:23:
2d:03:6c:fd:3e:a5:0c:59:cd:e4:e0:83:64:08:1a:9d:34:32:
2b:a8:a5:67:e1:48:b8:0a:3b:d7:89:ca:58:f4:a2:71:f4:64:
98:cc:df:98:0a:04:be:aa:14:97:0a:3d:fc:71:a4:a7:5b:c5:
bb:7a:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:57:30 2024 by rpki-client on console-ams.rpki-client.org