Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: 8fDL6scVDbba3gq4TQOqnjgpS9AJffjEPSiVMrRoJzk=
Subject key identifier: 84:0A:42:35:44:E5:F6:F4:3F:3D:43:72:75:F5:B0:CA:F1:4C:F6:04
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019369DAFD5F91B1046BFB3B49EB85D66234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0BA8
Signing time: Tue 26 Nov 2024 19:02:59 +0000
Manifest this update: Tue 26 Nov 2024 19:02:59 +0000
Manifest next update: Wed 27 Nov 2024 19:02:59 +0000
Files and hashes: 1: Am-JTOTVUfUlVjj7YWkmV1cgCcU.roa (hash: vWSA3yoXKlwxZklnLvOhixkEd/mLHxgs1OO1D5BH/UE=)
2: okHGe2tEUdAq6EWzMEQJSAcgCUw.roa (hash: Lomk9S59psJjTd4fiLSeS+yPGt4K2YDMCol4PCFIm20=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: JNoGGHoVdh9V4GQ5mvLkwQ8goMZeLOt5g1kcNTZkdaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:fd:5f:91:b1:04:6b:fb:3b:49:eb:85:d6:62:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Nov 26 19:02:59 2024 GMT
Not After : Nov 27 19:02:59 2024 GMT
Subject: CN=840a423544e5f6f43f3d437275f5b0caf14cf604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:05:af:d8:c3:aa:d6:3c:9b:3b:49:bd:39:
2c:a2:6f:ce:c8:43:89:76:db:4c:7a:1b:86:d7:b2:
67:d5:44:f7:e2:7c:96:88:d6:d8:f5:08:b6:37:6f:
70:a6:c0:05:71:c7:58:6d:69:94:15:69:be:7f:b7:
5d:a2:9d:1e:c5:d6:b0:86:84:f0:f7:24:39:15:63:
58:ad:34:29:f6:ea:d3:79:65:38:5b:f8:88:61:3f:
79:e6:60:12:aa:8b:67:48:3a:be:08:50:4b:df:68:
4e:20:ab:2b:e9:d7:bb:98:36:00:cc:5f:aa:e2:c7:
a3:8e:5b:53:6f:4b:6b:67:a1:51:e4:ee:1f:d0:c5:
61:05:e4:e1:95:07:9d:66:77:be:ba:ba:7e:81:89:
b5:c5:26:36:d6:7a:ca:99:d7:f5:0d:bd:f5:5b:78:
db:e8:38:0b:65:b6:5c:22:36:81:53:a4:d1:e2:9a:
3c:ce:84:e7:14:fd:9e:da:29:fe:d2:a5:03:86:73:
70:ac:84:db:fa:32:06:57:f2:0f:b1:b7:48:92:2e:
ac:b0:0f:a8:02:8f:39:73:fc:79:fd:c5:83:4b:63:
17:44:41:f7:c9:ba:89:e3:d5:57:2b:34:6c:94:7e:
0f:cb:90:22:13:ca:8a:08:25:31:f5:c9:91:62:56:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:42:35:44:E5:F6:F4:3F:3D:43:72:75:F5:B0:CA:F1:4C:F6:04
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:10:3a:20:f1:c9:f4:77:48:4a:94:4b:7f:57:8a:bd:d5:86:
1f:a6:15:61:94:8d:d1:51:4f:0b:71:da:e3:c8:6f:ae:fd:28:
10:cb:35:3b:3c:b8:a0:a9:70:7b:db:d9:3b:21:a2:4d:fe:c3:
1d:70:d5:58:f2:56:ec:4d:2b:d7:8f:6f:8b:5b:c5:b4:a0:aa:
cd:f8:3f:18:6f:e0:63:1e:e6:dc:00:e8:fd:ff:4e:1f:ff:cf:
11:8a:5d:3b:72:9e:5c:2d:3e:fd:ab:10:97:8f:f2:f7:ab:dc:
c3:ed:e0:1e:87:75:4a:cf:34:0c:85:6d:1f:66:32:ae:6a:2d:
ee:a3:15:87:ff:b5:4c:37:f4:33:b8:ca:88:36:2e:a5:26:eb:
61:ff:b2:e0:a6:bb:8b:af:92:9e:0c:9d:0b:76:67:7c:fa:ba:
22:04:79:28:64:a2:b9:3f:dc:03:14:db:66:73:b6:7a:63:67:
99:80:24:35:a0:42:5d:81:ab:87:3a:7a:2e:ae:80:e1:61:fa:
9f:74:e8:cf:ee:94:6d:51:6a:e0:e6:f7:e9:ac:e1:5f:ec:b5:
9a:a5:7d:b8:ad:fa:3d:8a:8f:d7:f2:da:f3:b0:6b:ba:51:5b:
e1:1b:a0:3e:5e:99:56:18:51:35:a4:3b:2a:18:39:98:96:0e:
f0:31:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:56 2024 by rpki-client on console-ams.rpki-client.org