Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: SFci0HbBumkCWpvUQXs9Bo66El08ekE/RDutXVfwOmk=
Subject key identifier: 3A:8F:21:50:FA:54:B3:7F:81:48:43:A7:21:C2:63:B4:35:CD:43:EA
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 018F7C8DF3B664D790A3509E3F70933BA802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1096
Signing time: Wed 15 May 2024 14:00:28 +0000
Manifest this update: Wed 15 May 2024 14:00:28 +0000
Manifest next update: Thu 16 May 2024 14:00:28 +0000
Files and hashes: 1: HxB2_2dsQyKkerkE4sft7VhD-TM.roa (hash: KVBLKn6RG5mRmMYKaLrZPLRmstSOIchmxxgoZxnbBmU=)
2: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: ksVQb+yCKPpbBhyTkJb+x9XuCtO4Ss1CgmKN+PY7M5Y=)
3: pZDyA-M1Q9Rv6mx6OesCzECkR8g.roa (hash: IJKGV72HYbBHgAfAfKCK7Swb/nQoWH+Byxnb/OU1gzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:8d:f3:b6:64:d7:90:a3:50:9e:3f:70:93:3b:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: May 15 14:00:28 2024 GMT
Not After : May 16 14:00:28 2024 GMT
Subject: CN=3a8f2150fa54b37f814843a721c263b435cd43ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:e5:31:69:c1:20:81:22:c4:bd:70:04:bb:
2f:1b:72:4d:96:ee:4d:94:1d:1d:ec:3c:62:5b:3e:
0f:42:f9:94:cf:07:1a:d0:1b:7f:da:7c:d2:8c:59:
bd:37:f5:88:cb:6a:d7:0e:6d:ed:c1:88:ce:ec:60:
65:b2:e2:26:40:08:16:06:7a:7b:23:e8:47:58:f8:
76:66:6c:45:a2:47:79:ec:0f:1e:2c:0e:e0:a7:47:
d3:91:83:41:e6:d6:05:d0:ab:aa:1b:6e:15:15:2a:
d6:54:68:5f:19:b7:3e:68:13:ed:6d:b2:10:90:56:
3c:34:bd:c1:c2:86:63:59:33:17:2f:f5:ec:71:71:
e3:ad:a3:77:7b:53:fc:e7:2e:48:12:47:5e:98:ba:
15:cd:64:37:6a:95:2f:e5:41:55:b4:f8:52:fc:25:
73:18:b3:37:b9:6f:3a:dd:12:81:7e:b2:d7:6b:69:
29:0e:cf:31:22:7d:55:60:3b:07:4d:04:33:77:10:
be:25:56:a4:e8:62:c4:68:51:88:13:48:e6:68:48:
2f:4a:6f:5d:ac:f7:52:3a:bb:fb:6d:d2:17:87:c6:
fe:73:ac:b1:44:3a:53:7c:bb:6d:8a:95:ea:4e:c2:
38:e3:9a:7f:99:55:ba:cb:3b:d7:c0:59:ca:27:b6:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:21:50:FA:54:B3:7F:81:48:43:A7:21:C2:63:B4:35:CD:43:EA
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:c0:e7:34:16:ae:cb:57:74:62:4c:7e:aa:6f:41:d1:81:
8a:71:9b:e5:83:24:44:96:9d:63:5d:fb:0d:5c:68:c8:82:39:
d5:79:a3:ad:9d:5b:3d:97:2e:7a:1c:13:ad:91:3c:69:6e:2f:
df:e9:d3:81:6a:6c:26:31:cd:33:f4:79:54:62:17:b8:62:fc:
9d:2f:f9:6d:bf:92:0d:cf:f1:6f:89:91:fa:4b:5e:55:7f:c6:
23:d0:4d:81:35:a8:4d:2d:a9:5d:8a:29:44:7e:3a:07:ab:c1:
12:41:60:ea:ab:7c:e0:a6:ca:6e:06:58:9d:aa:b1:2f:c0:f7:
1c:79:40:78:86:b1:82:1f:c5:3b:57:37:8b:d9:66:76:40:3c:
cb:b0:79:13:8d:09:a7:10:79:4b:ba:ed:1f:b9:c5:8a:59:a2:
5f:fc:44:f5:86:e8:09:c6:28:22:2c:cb:ba:e1:da:60:c5:c2:
9b:8a:a1:5a:f8:ff:be:41:66:d0:d5:f6:42:8b:a2:d3:de:1f:
f5:11:d7:e8:5c:0b:48:e1:5e:6a:e7:d7:29:06:e3:12:c7:6b:
e0:1e:65:c7:77:72:34:88:f4:6e:4a:eb:4e:b0:cc:be:20:3e:
ef:3c:98:54:a4:15:54:8d:cd:91:13:72:e8:3f:c6:0a:e3:20:
90:e5:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:14:30 2024 by rpki-client on console-ams.rpki-client.org