Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: fsLDPc/P958QWfWCu+1arzqAjVFRcCnpxeb4XIAXwPg=
Subject key identifier: BF:58:39:8D:31:E1:8E:4B:0C:E1:CC:EC:9D:D4:E2:85:83:7A:09:BC
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019355E460884F780590913F40D41CF4C818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 12EF
Signing time: Fri 22 Nov 2024 22:00:50 +0000
Manifest this update: Fri 22 Nov 2024 22:00:50 +0000
Manifest next update: Sat 23 Nov 2024 22:00:50 +0000
Files and hashes: 1: OgIdxk6GslVlDbMHpIULE7ALTsY.roa (hash: XYfrqmQ+runluozRN5WGsTswfZXTk7AL0YYKC9kqxoo=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: m850dAXv1GF9D/aJgT1fJdIhQ93x1lFlt05APdmfIfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:60:88:4f:78:05:90:91:3f:40:d4:1c:f4:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Nov 22 22:00:50 2024 GMT
Not After : Nov 23 22:00:50 2024 GMT
Subject: CN=bf58398d31e18e4b0ce1ccec9dd4e285837a09bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:b2:f7:4d:7b:31:6b:ec:3b:89:5b:9c:17:
5f:56:a8:ca:46:5a:58:1f:9f:47:9d:99:59:a4:e9:
03:08:1f:ba:d7:02:10:a1:0d:a0:14:39:d2:d8:e4:
f8:a2:3c:b6:0b:1c:4a:7f:19:ed:7b:7d:f3:60:46:
52:d9:94:27:a3:0e:73:24:61:91:28:5c:d6:ed:61:
0a:42:a2:6f:7b:5a:27:77:90:c9:79:c4:6f:5d:b4:
11:84:d0:5a:87:2c:50:a2:d6:d5:47:c0:44:c9:2f:
de:0b:0b:7c:64:56:24:23:c0:50:ab:56:e0:80:60:
43:fe:c7:8b:a5:a5:da:18:cc:b5:f1:5f:02:be:79:
53:5f:f3:f2:e8:19:4e:0b:1a:d7:19:06:3b:19:97:
87:07:ea:5f:0b:58:25:3b:1b:00:57:4a:66:19:f6:
83:b6:af:65:d4:1f:81:04:28:c3:f4:37:1e:d6:ba:
fc:19:80:25:1f:e3:cf:5c:c1:44:7b:58:d1:e0:db:
d9:f1:23:ca:03:53:60:d0:c6:9a:90:c3:58:0f:f3:
a3:75:2c:76:f3:e5:2c:fc:24:4c:f9:06:e0:32:c1:
e8:5d:05:08:e0:81:30:4e:0d:d2:04:67:e7:68:4d:
d4:fe:83:b8:01:50:3a:a2:20:e0:25:da:cb:6e:98:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:39:8D:31:E1:8E:4B:0C:E1:CC:EC:9D:D4:E2:85:83:7A:09:BC
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ce:45:56:1e:f8:53:90:54:09:34:cf:22:3a:09:e2:02:21:
6a:ff:97:54:be:12:eb:80:8f:01:fa:b6:fe:a5:86:fd:53:b2:
12:74:c1:bf:5e:74:4f:e0:55:b6:6d:9e:8f:88:83:83:ba:1c:
44:67:5b:43:15:90:1e:4c:ca:41:b0:37:d5:4e:0e:d1:67:fc:
37:a2:45:5b:cf:fa:c5:88:28:3b:d4:5e:55:35:cc:0a:7d:b6:
d6:57:58:69:ec:12:30:b2:0f:9f:90:b0:f6:1e:a6:a5:f8:c6:
74:5f:b4:d4:dd:14:13:7d:c5:50:01:86:b3:a4:7b:9c:81:40:
cc:32:69:80:bd:b9:42:1e:6e:f8:6e:48:ce:57:94:ca:9c:af:
da:0e:ac:a5:89:93:b3:03:3c:61:3c:20:90:8e:e6:4f:a3:9f:
46:5b:de:6d:92:9d:b7:02:38:4a:77:8c:4d:14:fb:fc:00:e7:
32:0f:ea:ad:c8:a0:a0:9d:1c:5a:9c:93:fb:1a:c7:f9:ed:22:
44:04:2b:61:32:fd:9e:a0:bd:c2:23:2e:13:f8:0a:30:98:2b:
73:1c:b4:06:91:c2:8d:ef:51:f8:ca:f7:ac:ca:e1:18:ff:b8:
29:17:b5:c9:c0:be:eb:0a:48:5a:6c:c6:c1:2b:61:6b:93:ff:
b9:7c:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:38 2024 by rpki-client on console-fra.rpki-client.org