Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: LN7PogfTouFuFH1JFwHBBVAaPSIg1wholycK9+FmxzE=
Subject key identifier: AF:3F:E9:F6:6F:CC:31:5D:2E:AA:5A:16:73:92:88:BA:00:86:84:57
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019356F708C21612B71C33EE36EED8935731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 109B
Signing time: Sat 23 Nov 2024 03:00:50 +0000
Manifest this update: Sat 23 Nov 2024 03:00:50 +0000
Manifest next update: Sun 24 Nov 2024 03:00:50 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 1i06FvZIPA1G08X5MDnqaVOFL1K2cx1Rv2uLiuNKW64=)
2: Eig7IbS4anflFnmEw_7hn8A5lhI.roa (hash: CAh+UnVhIqlMq42OpwiuJ4EKIFW5ESjtqYegTJ4J5w0=)
3: GMFdjAhka1ddS1YFS0CyC3k_kGc.roa (hash: 2CQgLXEzR4mx/f9eWPww53lqfc5JHkTo2P9NlXBIVzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:08:c2:16:12:b7:1c:33:ee:36:ee:d8:93:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Nov 23 03:00:50 2024 GMT
Not After : Nov 24 03:00:50 2024 GMT
Subject: CN=af3fe9f66fcc315d2eaa5a16739288ba00868457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:78:19:d4:4d:c7:f8:4c:2d:bd:50:9f:01:
dd:34:f2:65:b0:41:09:8c:d5:fb:f5:66:31:f4:88:
d2:f0:d3:09:fb:57:d5:b8:14:21:41:9e:74:e7:3e:
aa:3f:45:be:ec:97:c0:97:6a:2e:8d:36:69:ba:eb:
eb:7f:4f:e1:5c:28:8b:eb:f7:1e:1d:fe:f8:9e:12:
7b:7b:c1:8f:17:30:ee:36:a9:72:98:af:60:18:53:
20:fd:09:a3:c8:ef:2e:87:1e:86:07:13:ad:9c:36:
d6:c2:75:a3:54:1b:b3:5a:4c:87:42:fb:ac:80:2d:
29:a1:2d:10:87:e0:04:69:ed:33:41:2a:42:c1:ed:
d7:9d:0f:e2:d5:cc:3e:37:36:42:62:fb:6b:5b:41:
68:20:e4:d2:5c:55:7c:8f:32:2e:7c:70:c7:e3:f8:
16:52:2d:c7:f4:40:1b:c7:6b:88:ee:5e:f9:db:42:
43:17:84:71:2c:dd:16:3f:cf:fe:54:a9:63:69:d1:
2d:9a:9d:ae:30:b7:08:1e:b8:45:01:13:ca:53:24:
d0:f8:70:79:c9:ff:50:1b:48:f1:aa:75:41:49:08:
a8:61:b9:3e:a1:50:7c:1b:67:88:3c:79:bc:bf:38:
79:82:a0:6b:ad:65:40:7e:cd:1f:45:04:6d:94:75:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:E9:F6:6F:CC:31:5D:2E:AA:5A:16:73:92:88:BA:00:86:84:57
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7e:1a:85:06:97:45:57:59:b4:ee:6b:85:4d:ea:6b:34:5c:
6a:7a:8e:b2:15:28:b6:b4:97:b5:73:10:45:b0:d3:03:d2:83:
6b:bf:08:27:8a:5c:b7:82:21:46:16:86:f3:cb:48:8d:b2:92:
dd:3b:19:74:3f:73:52:bc:75:a4:87:ac:e6:b6:b9:1f:62:de:
0c:55:a3:6b:66:2c:35:9b:62:bf:db:9e:81:5f:06:8c:9c:77:
70:6c:3c:bd:a8:96:b9:03:24:44:d0:94:f2:1f:a0:3d:d1:10:
6e:8e:36:29:a3:b1:d5:d0:67:ea:3b:6b:8d:5c:52:61:8f:61:
d3:fc:77:68:d5:51:d0:1c:78:91:0a:ad:33:cb:d0:f5:b0:04:
e5:a6:1d:57:56:66:a4:d9:a1:b2:2f:70:b3:fc:bf:bb:f4:f4:
ce:74:6a:1f:2c:7f:37:28:bf:ee:2c:de:ff:b4:6e:a9:9f:77:
88:5b:eb:e6:e5:4a:60:97:8d:40:0b:5c:a0:7e:a6:55:3e:d0:
0f:01:1e:8c:56:cd:e9:28:81:85:69:22:e5:f6:82:cf:e5:3e:
26:bd:53:4d:48:7e:80:ac:2d:de:d7:3a:87:c3:96:06:88:e1:
27:58:cc:43:cf:88:83:31:91:14:d0:aa:f1:0f:45:ad:6a:c3:
13:eb:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:52 2024 by rpki-client on console-fra.rpki-client.org