Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: 5OFl/ro8BkbMe6sFXYwG7HuWWrhMu41p/1WK5tdUMcs=
Subject key identifier: 61:36:FB:61:9D:4C:23:4F:06:74:39:3B:D0:B5:D7:05:E5:A7:DC:91
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 019369D8C72353055ADE36FBEEADD956C509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 09FC
Signing time: Tue 26 Nov 2024 19:00:34 +0000
Manifest this update: Tue 26 Nov 2024 19:00:34 +0000
Manifest next update: Wed 27 Nov 2024 19:00:34 +0000
Files and hashes: 1: d3L3QY9ZcIq_mA7jkeF_XjAauIc.roa (hash: fdmLdKeifbnGYDbiaQDjT1Ln47yQjkRAV71kRapPm1M=)
2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: u9GvyV9EzGkZ07XO/F+5pbGXherfqkzmXY3Ay4SBkhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:c7:23:53:05:5a:de:36:fb:ee:ad:d9:56:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Nov 26 19:00:34 2024 GMT
Not After : Nov 27 19:00:34 2024 GMT
Subject: CN=6136fb619d4c234f0674393bd0b5d705e5a7dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:d6:28:7a:07:22:79:72:f5:f5:6a:7f:90:
a4:73:4c:c3:61:f5:9d:6b:7c:ab:34:bd:99:94:0d:
c9:d4:0a:2d:c3:51:b1:59:cc:dc:45:40:34:1b:6c:
11:c6:fe:ee:13:e0:c0:fa:dd:04:84:59:f8:65:a9:
9e:19:a5:37:65:c3:26:7f:4d:6a:68:68:72:45:a2:
1c:c5:ac:61:ba:8d:9a:ab:00:af:64:dc:d3:07:fa:
fe:02:dc:36:9d:5e:0a:ab:9d:6f:4a:e2:3f:ad:c6:
95:47:38:db:62:1a:8a:2b:09:89:7c:db:9e:9f:82:
d7:47:46:a3:7b:9a:fc:f1:98:6e:87:1f:1b:94:85:
e9:59:ea:e1:cf:58:ad:4a:dc:d8:b3:81:72:fd:b2:
03:97:a7:97:be:ed:f9:17:f0:b6:57:8e:d2:94:b6:
35:9a:45:48:6e:c5:3f:ba:c9:50:8c:e9:55:90:88:
f6:df:e3:df:6c:22:2b:05:63:3a:6b:6e:06:bc:0b:
bf:40:0d:d3:5b:7c:e7:13:d7:b8:95:4d:cd:41:eb:
35:f8:2b:1b:17:0d:5c:f2:12:41:eb:6c:40:5d:b4:
3a:98:89:79:9f:c7:00:33:e9:65:86:26:31:2c:60:
e0:30:3e:a9:99:70:86:78:3e:7e:90:f7:4d:0a:d8:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:36:FB:61:9D:4C:23:4F:06:74:39:3B:D0:B5:D7:05:E5:A7:DC:91
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:82:cc:90:0b:ec:2f:60:3e:d1:11:1c:54:aa:1f:64:50:16:
58:b2:95:ee:99:ac:f0:34:36:d2:d2:d9:eb:75:ea:6f:6b:17:
c4:ac:c7:c1:5b:6e:de:d3:4a:30:db:be:ef:d2:1d:86:f1:23:
73:cb:3d:a5:3d:eb:01:ec:dd:3d:18:08:e3:e3:31:17:a9:eb:
db:3f:c4:e0:4a:3c:ab:a8:69:ca:3b:0f:af:04:db:63:cb:ce:
cd:12:29:8c:fd:78:5f:75:4b:d9:3b:b3:f3:7c:40:09:63:f6:
56:6d:36:09:5d:2e:89:c4:73:49:cb:8f:fb:95:49:2f:c3:9b:
fc:56:79:2e:21:a1:2a:ca:92:6b:83:f0:5c:bd:00:23:86:0e:
f8:db:fa:8e:24:07:85:c9:8a:da:1f:dc:13:f6:bf:8b:9c:97:
62:d0:18:96:0f:50:43:ae:60:bf:bf:97:b0:e2:6e:e2:21:e2:
d7:e7:ff:6d:10:39:6f:d4:16:9f:47:d9:50:26:eb:fe:f5:09:
4b:ab:df:12:e8:14:77:09:56:3b:99:e7:82:a9:5b:71:05:7b:
28:e6:8e:6b:bd:43:71:4c:a6:75:2a:3f:7c:38:9b:1a:27:be:
6c:9c:4d:1d:1c:a5:39:70:4a:e0:8b:66:1a:7d:5e:ed:9a:58:
fc:d0:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:11 2024 by rpki-client on console-ams.rpki-client.org