Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
File: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft (raw, json)
Hash identifier: vWrgb5VID1iEgyTZ3vq+gV4IeN3oy5V4bC6+NRo8Q8s=
Subject key identifier: CA:51:7C:C3:A8:B7:69:5A:7A:1B:A4:1B:65:FA:41:FA:D9:DA:C3:7F
Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
Certificate issuer: /CN=a09fda047b3a0b1c820435e699388660da32c63f
Certificate serial: 019350F47B3B6837D088CBAA72DCA4EF6D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
Manifest number: 02C8
Signing time: Thu 21 Nov 2024 23:00:19 +0000
Manifest this update: Thu 21 Nov 2024 23:00:19 +0000
Manifest next update: Fri 22 Nov 2024 23:00:19 +0000
Files and hashes: 1: 07Xr_BOlJOk9Jd9oI04ohkKa2-k.roa (hash: A1FwipOeVahs60pF4b/Ffn+5YuvjPZ07+DRvGvQqSqM=)
2: oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl (hash: UJ2I3CDWBIssJImI2ERR5Pn4AzEdLH59mTox8Xgk//4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:7b:3b:68:37:d0:88:cb:aa:72:dc:a4:ef:6d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f
Validity
Not Before: Nov 21 23:00:19 2024 GMT
Not After : Nov 22 23:00:19 2024 GMT
Subject: CN=ca517cc3a8b7695a7a1ba41b65fa41fad9dac37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:36:d4:c3:ea:6a:37:2f:7e:10:bc:34:dd:
1c:af:46:d1:17:46:8e:70:8c:25:00:18:cd:b8:5c:
a7:b8:cd:4d:74:b5:f9:5a:d5:c4:d4:9b:55:7d:57:
3c:f1:9c:84:7f:5c:c0:8f:3d:e6:5e:f3:27:a6:b0:
0b:98:7a:03:b4:17:da:8c:9b:8f:0c:e1:28:d3:76:
12:48:94:1c:75:34:7d:a1:d2:41:a6:50:c7:a6:7c:
41:b4:c1:c3:03:22:92:ca:a6:c7:18:d3:e4:76:18:
a6:74:a7:41:49:5b:d2:12:7d:a6:d0:b1:07:9b:ca:
b1:8a:9a:71:fd:a3:96:fe:14:31:e1:63:f1:76:ba:
be:a1:cd:d1:77:e0:7f:93:4b:16:96:19:45:9c:be:
a2:5f:cc:24:dc:05:63:a8:ea:81:93:aa:b5:92:87:
b1:da:fd:96:60:79:57:5d:4e:23:07:7b:9b:89:76:
36:19:94:10:38:77:ea:87:16:7c:d5:1b:de:72:b8:
48:0f:b8:e2:54:67:12:c3:58:00:84:ad:78:e5:fc:
d1:d7:40:95:cb:c1:14:ae:3c:81:ee:a9:fc:62:76:
0a:a9:8f:1e:83:33:f7:46:db:5a:01:9a:69:ec:94:
a7:49:30:4d:6f:46:0e:a4:ee:92:47:9c:da:09:94:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:51:7C:C3:A8:B7:69:5A:7A:1B:A4:1B:65:FA:41:FA:D9:DA:C3:7F
X509v3 Authority Key Identifier:
keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1a:32:c0:a1:1e:a2:92:81:f2:ed:90:de:3e:84:a5:31:cc:
dc:33:ce:51:6c:cd:e7:11:21:b3:76:e8:c0:97:1b:e0:c4:18:
1b:88:28:38:e2:78:2b:c8:0a:ad:d5:4b:c1:70:f8:bf:f3:76:
b6:d5:4a:eb:69:1d:60:95:03:70:d4:3e:b7:a3:6e:08:b9:79:
c1:d6:af:c0:46:24:83:5b:1a:82:5b:70:f8:26:06:be:10:d8:
f4:a7:6c:8c:54:80:a9:2c:80:80:87:80:d5:d1:29:79:9e:23:
9c:67:24:ad:24:c6:ab:03:8b:12:e8:ed:c5:b2:ea:2a:85:70:
04:ad:85:55:b0:36:d3:51:da:85:75:04:6a:97:92:71:85:72:
30:ad:12:31:25:24:9c:c3:c7:1c:d2:44:3b:d5:8c:dc:e1:af:
24:6a:a6:51:7e:93:0b:77:9e:70:13:f6:7d:da:c8:03:26:c9:
90:c1:1d:2c:a9:09:39:9f:d8:44:f8:9e:c5:3d:61:64:0e:7b:
2e:da:0f:0b:7f:ff:80:e8:14:e5:23:75:34:0f:d6:c5:09:1d:
f3:62:1a:67:22:e6:a3:16:03:8b:be:62:7c:6b:2e:b5:8d:e0:
fb:3e:25:ce:83:cc:59:4b:0e:17:70:89:8e:37:46:c1:cf:5f:
67:bd:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:04:03 2024 by rpki-client on console-ams.rpki-client.org