Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: F7GgIbZFGb+sWYE/zK3ETBox157y7s7ik1XTZ23rvDQ=
Subject key identifier: CA:36:E6:64:DA:8E:85:3F:75:0A:6C:94:23:C4:47:3F:10:86:23:AB
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019355760124D7F7DB1DE6F6BC755CD6844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 20:00:17 +0000
Manifest this update: Fri 22 Nov 2024 20:00:17 +0000
Manifest next update: Sat 23 Nov 2024 20:00:17 +0000
Files and hashes: 1: A2xZwRkF2X8PIHuoozy9-AhHCUA.roa (hash: t67D9obj2Ugypjg/4nkVuNhYkvTOPg/8KPctZfzv/qk=)
2: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: T8h8IqQaBxNKajlpfL50/apiJ5uTrx/aLXXr577E06c=)
3: qP64VpuSIppLb1vh70EOv62wZH4.roa (hash: 7aPcDNpGWyLeskQDiuUSlVlOlmSteKrHfdRU1dsI4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:01:24:d7:f7:db:1d:e6:f6:bc:75:5c:d6:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Nov 22 20:00:17 2024 GMT
Not After : Nov 23 20:00:17 2024 GMT
Subject: CN=ca36e664da8e853f750a6c9423c4473f108623ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:75:c7:e7:6f:a0:a2:e1:a6:11:3f:6f:e4:
90:dc:5f:be:b7:07:09:49:83:29:5f:36:27:ea:e5:
f9:e9:a2:e7:c6:3e:15:e2:5e:8e:55:51:b9:26:25:
6e:ba:f0:e0:f9:44:86:41:30:15:f5:84:46:cc:ff:
cb:12:1f:d7:91:42:99:b4:bf:f0:3c:e8:3e:20:e5:
90:25:a6:95:64:e6:87:98:36:47:2b:e3:aa:b6:61:
34:ef:ec:18:7c:3b:a7:a6:12:23:04:b7:8e:ef:a8:
3f:93:24:8a:02:8b:9b:08:bf:68:25:f2:43:d4:d1:
af:c7:d5:6f:27:35:03:af:f8:d1:ce:92:88:ec:68:
92:dd:b2:1a:3a:00:7e:53:47:7b:4f:0a:23:0b:0e:
4f:e7:d7:dc:1f:f9:09:f6:ca:2d:60:ee:b4:40:65:
62:1c:ca:67:26:99:17:96:4e:91:82:4c:24:5d:2a:
d2:5d:d3:07:84:83:b3:05:7f:73:e5:dc:d3:f3:4d:
2c:fb:03:1d:8f:30:09:e2:66:d5:cb:ac:7c:25:12:
10:75:0b:64:0e:6a:3c:50:4e:83:9d:07:63:a4:87:
34:b4:8f:a8:f0:86:4f:8c:09:64:47:86:e2:07:15:
dd:c1:d1:b3:75:00:4d:87:21:27:fa:21:04:8d:78:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:E6:64:DA:8E:85:3F:75:0A:6C:94:23:C4:47:3F:10:86:23:AB
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:9d:0f:8f:a1:da:6e:4c:84:69:46:f2:23:a2:ef:95:18:
64:ce:67:d6:bd:d9:13:db:19:cd:89:d0:56:e4:4f:4c:a7:c8:
75:ff:02:6c:31:4d:0f:79:1e:7d:fa:ce:a6:37:96:62:bd:e2:
16:ea:f1:a4:3d:17:14:87:87:0f:ec:e5:9d:bd:dd:3d:aa:b1:
13:05:af:e5:66:4a:5e:60:4f:81:1e:d4:ff:44:a8:8a:f0:94:
21:5d:12:f2:1d:4e:ce:e8:85:61:1e:a0:9e:f6:2d:a6:0a:33:
cb:9b:f7:98:b8:d6:2e:3a:5c:89:61:78:4e:d8:5e:64:77:3d:
20:39:50:8b:61:2a:de:35:e2:43:9b:1e:44:49:71:ce:f3:28:
22:a5:48:a0:72:fe:f3:37:b3:bc:2e:3c:a6:cf:b2:33:86:52:
fd:6f:78:fe:7a:24:8c:77:60:8f:94:48:22:9d:6a:a9:e5:9e:
78:48:ed:b7:87:3a:f4:56:12:16:67:a8:c2:70:2d:e0:dc:ed:
b0:e9:19:4c:42:01:76:bd:0a:74:43:43:98:f6:00:5c:aa:3b:
be:ed:68:06:74:9b:2c:80:9d:ab:28:12:92:1a:46:ba:f9:51:
87:6d:c4:e3:15:0d:1a:55:9e:d5:f1:9c:3f:d6:3c:89:79:d6:
1e:6e:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:57 2024 by rpki-client on console-fra.rpki-client.org