Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: UQmpBJM0a8Vu4WDEDMRLSjgF9lijozI2m8WSclU+QX8=
Subject key identifier: AA:96:7C:AF:6E:63:27:13:96:88:5A:00:85:6F:90:31:7C:8A:CB:AD
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 01936B222B4A9FE96B822F1F41B874039E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0578
Signing time: Wed 27 Nov 2024 01:00:21 +0000
Manifest this update: Wed 27 Nov 2024 01:00:21 +0000
Manifest next update: Thu 28 Nov 2024 01:00:21 +0000
Files and hashes: 1: 7yZyDYxO3u6lz795h1rlvjWijB4.roa (hash: WtzlqWx+kXQehQ3vOYP1fj+0uQZlyOFzV4pPvfhoz6U=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: 8Dvig/h9s26BRS3PXddyk/U0klrD9IdfxcNBRpvykG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:2b:4a:9f:e9:6b:82:2f:1f:41:b8:74:03:9e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Nov 27 01:00:21 2024 GMT
Not After : Nov 28 01:00:21 2024 GMT
Subject: CN=aa967caf6e63271396885a00856f90317c8acbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:6b:a4:b9:bb:52:80:dc:1e:36:19:e3:4c:
18:d3:38:af:9c:27:04:e6:5b:52:1a:48:b6:d7:e1:
1b:b0:be:9a:aa:12:e2:b2:15:d9:49:d0:02:a4:53:
5c:bc:e6:ea:5d:0e:06:b6:9e:86:67:bf:73:1e:75:
e3:68:11:01:cc:bd:db:23:b1:c9:1c:0e:65:d3:5b:
a9:1a:43:ae:1b:0e:81:6f:df:4a:e1:75:1f:e6:c4:
92:c8:a0:4b:b9:5e:ce:dd:bb:1e:f9:4b:0e:23:5a:
0f:90:c7:a6:50:e0:76:54:bf:43:ec:80:12:07:d6:
d7:79:bb:ab:62:13:a0:45:c6:be:f7:2b:f2:ce:41:
87:27:38:e3:74:b6:1a:6d:91:25:ba:57:97:fe:45:
3d:70:30:8d:49:c7:3b:5f:90:6a:f3:84:24:de:a6:
9c:d3:09:71:2f:93:18:87:3e:57:43:c9:2b:65:75:
d1:6e:d3:87:f4:ab:84:05:15:c7:ad:7f:d0:25:d7:
cd:30:36:64:36:46:6c:15:83:9e:b7:3c:05:0c:34:
15:b7:b0:e8:d4:fb:2e:33:85:28:06:c5:f7:05:c0:
9b:c6:dc:7f:54:96:47:8a:68:3a:46:1e:b3:1a:a0:
6f:e8:ef:25:c2:a9:11:bc:b7:34:13:2d:fc:6d:52:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:7C:AF:6E:63:27:13:96:88:5A:00:85:6F:90:31:7C:8A:CB:AD
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:9d:63:85:b1:47:f4:97:57:f8:1e:f8:62:85:e4:44:f2:
39:e0:a5:ef:8a:fd:6b:68:3c:a0:f4:f9:79:40:a8:24:4a:9e:
ff:72:9b:82:ab:e9:0a:5f:c2:6e:9c:94:d0:b7:5d:04:6c:a4:
85:e7:37:c6:15:09:17:08:6a:c7:8a:dc:33:85:8f:86:d6:89:
da:50:a7:c5:a3:d3:9d:62:48:fc:28:14:ac:12:0d:ce:5b:68:
c6:4a:1c:a5:35:a3:3f:c5:33:84:0d:c4:42:01:a8:a9:ee:98:
55:93:64:99:91:90:2d:f7:ec:3a:7b:27:89:88:c3:35:03:67:
d1:6f:0e:9b:ce:eb:78:4a:9a:a2:14:18:3d:fe:0a:3c:64:d6:
12:49:79:de:c4:ce:7e:14:9f:16:f5:ea:df:bc:58:10:95:f9:
26:3a:43:80:e7:fd:a2:62:93:57:1d:9d:c0:73:c1:86:b1:28:
da:ef:78:06:dd:a5:07:8c:8d:a8:94:f5:6d:ac:0b:51:36:19:
81:0e:3d:82:0b:2e:53:a1:87:03:5f:5a:54:12:65:28:9b:64:
45:d0:dd:c0:69:d2:d8:1d:fd:39:a8:a8:63:50:7c:4d:83:f8:
f7:ae:f4:dd:b0:ea:40:2b:e3:e2:be:ed:aa:8d:05:e7:26:30:
e8:8b:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:08 2024 by rpki-client on console-fra.rpki-client.org