Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: o+TXg9mfqHVsK9cnxlCzmU+0CmUYbpFhVzmxKiJ2P3A=
Subject key identifier: 1C:71:EA:B7:4B:33:A0:73:BF:06:F6:F7:1B:13:CF:47:73:13:47:26
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 0193579BDFC7AD8F48CDEC8EE81906177D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 06:00:53 +0000
Manifest this update: Sat 23 Nov 2024 06:00:53 +0000
Manifest next update: Sun 24 Nov 2024 06:00:53 +0000
Files and hashes: 1: SZTXUoyd1SjaEwUQFCtPsAiW11c.roa (hash: bgZ+d545U7Jj8A7BOeoIsTmI30I6z5oSN3fAy0/a9AU=)
2: dKg7SW3Ovw50kL-CCmThbu1NREI.roa (hash: 9/eAsu7WEp3UZuljfchCI2iyg09WTWzMx9tgD6AzgOA=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: ng9nPZTlhH61PanOuyVNDKr6Bbpkm4G+0xgH2Rvz0QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:df:c7:ad:8f:48:cd:ec:8e:e8:19:06:17:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Nov 23 06:00:53 2024 GMT
Not After : Nov 24 06:00:53 2024 GMT
Subject: CN=1c71eab74b33a073bf06f6f71b13cf4773134726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:3b:dd:31:dc:c1:bd:07:dc:69:c3:04:b9:
07:52:52:e9:59:46:9e:5d:6f:7b:a2:e7:c3:3d:6c:
38:06:d3:bb:35:11:7c:f5:35:cd:89:08:43:ee:13:
f4:eb:29:ba:5b:a6:84:87:d9:40:9d:f7:63:4e:31:
8b:ca:4d:e8:33:2c:41:5e:bb:4a:cb:4f:df:7d:e6:
6b:f1:e5:63:0d:95:04:4c:34:bb:ca:a8:04:e3:f3:
89:f8:2d:d8:d7:84:94:c0:f6:32:67:5f:1b:89:f9:
42:63:1b:42:c6:df:4b:60:69:cf:cb:52:67:0e:8c:
0d:d7:f3:f0:7a:a0:1f:bb:42:d8:df:20:70:7a:6c:
ea:db:e6:1e:95:ca:44:1a:82:2e:83:5d:8e:f3:3e:
b0:e3:49:52:52:22:b8:0d:88:8d:5e:ec:c9:4f:81:
ea:de:9f:6c:61:ee:7b:16:48:c5:f2:c6:65:5b:1e:
ac:a3:ca:5f:32:85:ba:c5:2a:91:5d:73:eb:86:41:
30:bd:07:af:6b:79:b5:4c:84:44:44:da:3b:27:4a:
ef:43:5b:c1:92:22:a2:24:77:19:26:96:f0:a7:90:
1f:a3:f6:dc:6d:7c:71:62:cf:be:94:ce:d0:bb:4a:
ed:7f:89:c2:75:c3:63:2d:f2:55:84:e9:bb:0d:16:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:EA:B7:4B:33:A0:73:BF:06:F6:F7:1B:13:CF:47:73:13:47:26
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d4:69:39:53:4b:05:b8:87:70:86:c8:de:8e:d1:4f:3d:79:
49:83:4d:62:f4:a7:70:76:81:25:97:e8:8a:6e:a1:47:b2:c5:
08:b1:44:29:da:27:c9:a9:5b:77:ce:61:aa:c8:07:2e:ef:ab:
10:8c:1e:fa:89:6b:57:c1:a3:b6:dd:f4:9d:51:4e:02:c2:40:
11:d1:9f:b0:1e:06:00:e8:2d:e1:50:ac:ea:30:89:0f:08:4c:
38:75:8c:5d:b8:67:fc:da:44:86:0b:41:1b:c9:5e:d0:a7:37:
30:bb:12:93:41:ed:9e:be:ab:ee:a8:d1:e7:5a:76:4a:7a:88:
c9:56:9f:5b:7a:fc:14:f7:6b:82:c4:90:0d:87:aa:c8:39:b7:
bf:d4:60:04:fa:ee:f4:88:2c:0d:d9:32:a6:85:a7:ba:94:a5:
0c:7a:c3:98:47:aa:66:bf:f6:8b:8e:04:5d:e4:dc:11:16:c1:
2d:69:b9:f2:f1:45:80:c2:c4:52:1c:fa:05:c6:d2:3b:44:ce:
53:0e:e2:97:83:d3:be:7d:e2:e7:93:d2:a5:cc:f1:fe:56:cd:
13:14:7e:a6:7c:bd:2f:16:0c:c6:7c:39:99:eb:8e:66:e2:28:
29:18:51:e0:f5:16:3d:91:d1:a0:47:4a:5c:8b:6f:d7:98:c0:
27:0f:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:30 2024 by rpki-client on console-fra.rpki-client.org