Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier: 7VKWlQSxENZnRQdNBZj9AtjkFJMar30qENi13REvfHE=
Subject key identifier: 2F:BE:7B:01:70:A0:B7:60:81:13:68:98:77:CA:2B:DC:FA:D9:F3:B4
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 01935688A5B9D11C0943BAEAA22C13C9D381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:00:16 +0000
Manifest this update: Sat 23 Nov 2024 01:00:16 +0000
Manifest next update: Sun 24 Nov 2024 01:00:16 +0000
Files and hashes: 1: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: pFsVI/ufvCl260EmUyta/YN45fK5ZyzJjhDMjy/tvu8=)
2: yX6Br7BmjM-laiOnU-Of2yVCgQ4.roa (hash: E1j6kCDXaKbaQo2RKRCcaqT2LiXFHHrA5I/v6LV2EWU=)
3: zUIsfSA3l_N0FmxeasoyYdSuuUA.roa (hash: jl7snd80Gy6jgh8RIdAdW1avk0sccbnh5WnYBamAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:a5:b9:d1:1c:09:43:ba:ea:a2:2c:13:c9:d3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Nov 23 01:00:16 2024 GMT
Not After : Nov 24 01:00:16 2024 GMT
Subject: CN=2fbe7b0170a0b7608113689877ca2bdcfad9f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:8b:f6:d7:ca:be:20:1e:56:06:19:0a:1e:
72:22:eb:9a:bc:fe:3f:b8:25:6c:fd:2f:b0:94:9d:
57:06:cd:e6:30:3a:ef:6e:ee:0d:46:d7:15:7e:9b:
2b:72:2c:f3:b1:4d:74:1b:e5:cc:09:e0:cc:57:54:
9e:d5:e0:b6:62:5e:fa:b9:04:1f:68:7c:b8:73:15:
7f:9b:0b:16:b9:f8:b5:be:15:87:63:5d:78:d3:d7:
a8:57:4e:49:7b:19:94:d6:40:f8:10:ec:38:e6:92:
27:1a:b9:fd:c5:db:62:cd:02:01:97:ad:81:31:03:
0e:61:5f:a5:18:ce:46:cf:14:46:2f:30:71:95:f8:
ae:a6:46:5c:c0:e0:b2:a3:52:8d:de:ec:ce:c9:ff:
94:a4:de:bc:63:61:cc:b7:32:bd:fe:50:a5:0b:52:
73:f6:13:87:65:2f:c9:1b:88:d9:36:d5:9d:36:df:
a8:43:ee:ae:92:25:82:1e:68:f9:10:3b:46:dd:3b:
96:7f:49:3f:77:57:88:c8:e5:c7:ce:db:cf:7f:d9:
16:e6:2d:73:f4:d7:9a:47:92:f1:1c:04:5a:9a:32:
f2:75:b5:a5:55:47:45:b0:c2:70:07:23:13:53:88:
5d:7c:be:c3:94:79:34:f2:f5:5c:53:d7:d3:65:db:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:7B:01:70:A0:B7:60:81:13:68:98:77:CA:2B:DC:FA:D9:F3:B4
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:87:73:b6:db:5f:c8:1a:53:da:7b:69:b1:ac:35:ae:12:
fe:a7:8c:c7:05:7a:db:f8:40:c7:c1:09:77:cd:99:98:f1:ba:
23:7b:16:55:19:21:97:bb:74:ae:79:64:9f:7d:f1:58:1e:fe:
5e:57:55:3a:56:50:46:f2:8e:6a:ba:30:04:f8:7e:75:99:66:
51:6a:80:ba:03:68:6e:f2:df:4d:74:02:9f:12:85:e2:f3:73:
65:91:22:be:ff:91:a4:4e:bc:64:59:fe:4f:f2:f2:26:a0:08:
9b:67:eb:14:94:c5:92:2a:66:d4:df:38:b1:f4:77:83:e5:15:
9c:43:c5:ef:1f:ac:78:53:41:9d:6a:c7:36:93:4d:48:6f:27:
50:ed:9c:1b:d5:13:5c:55:2b:38:7f:37:64:53:18:e2:00:81:
3e:4e:4d:0e:fd:e7:2e:7e:57:35:8a:81:28:c7:6d:0a:d8:8f:
da:d8:db:48:d8:aa:b2:52:b9:00:55:1a:9a:a4:08:1f:25:a1:
53:44:d0:1c:7e:75:d6:f3:37:4b:16:0f:89:cc:f1:7c:b8:e2:
fa:00:dc:1e:1f:2b:ae:fb:09:60:44:8f:e4:ff:97:3c:cf:13:
49:4a:f6:2b:c4:5c:ef:2f:a6:82:f7:68:68:85:89:d0:f3:0a:
01:27:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:29 2024 by rpki-client on console-ams.rpki-client.org