Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: UkJF3603UaU/BeWeB6loC8jQxz+PCyJCwivQW8dVVVY=
Subject key identifier: 1C:1E:99:B1:84:3A:C5:84:51:5D:9B:5A:79:F1:C3:D2:E7:32:65:7C
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 0193561AB771BBE618CAB23431B4E587D169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0BAB
Signing time: Fri 22 Nov 2024 23:00:11 +0000
Manifest this update: Fri 22 Nov 2024 23:00:11 +0000
Manifest next update: Sat 23 Nov 2024 23:00:11 +0000
Files and hashes: 1: DaIJ6DgdS5rBljrXgen7eTCtzFg.roa (hash: 8lnN5o5OyMw5U7h7qbolwef1+XOPEffaUGe6EgXCL3E=)
2: MA3KrXifJVAQ1cLD3ypSwFDkigk.roa (hash: TCiFDTcyvT7D3S2pKypZDyUzScR7uSKNgsN21M4XNZM=)
3: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: j/Lxmu2IXECv67V3yWGWncG+KnD0zS5noGSr1l3RofQ=)
4: xPaDgmZJtvkYJnbVTvDN6y5kCN8.roa (hash: jpj57cjz5JQ7AKLvgVozxqs+F1ljz049xGFx+3sqsJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:b7:71:bb:e6:18:ca:b2:34:31:b4:e5:87:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Nov 22 23:00:11 2024 GMT
Not After : Nov 23 23:00:11 2024 GMT
Subject: CN=1c1e99b1843ac584515d9b5a79f1c3d2e732657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:3f:7b:dd:69:c0:1f:71:a0:6b:5f:8e:5b:
7e:ce:f4:a1:ca:74:cb:e4:09:f5:90:ea:f9:0b:58:
6f:48:a7:01:b2:b5:92:66:bd:46:49:c8:4d:03:30:
eb:fe:3e:b8:a0:b5:ea:fd:32:48:be:17:62:7b:d3:
21:69:bb:d2:85:75:c7:f2:26:1b:29:d1:bb:a7:fa:
f6:a3:32:fa:f0:a0:a2:12:44:b3:8c:00:0a:ea:6a:
1b:d7:2e:95:08:a5:a5:ed:fa:53:ad:17:3a:ee:d8:
87:73:6a:c4:28:2f:98:b3:fb:49:be:5f:00:62:23:
c1:65:c0:33:7c:ce:b5:5a:af:58:f2:17:c8:67:57:
70:5a:f5:54:28:b0:48:52:6b:b3:3a:25:fc:5a:ac:
e3:fe:f3:4c:10:02:73:27:b5:b2:39:21:d2:0a:a5:
e6:13:b4:34:c9:25:38:19:a3:d9:f4:b7:96:e5:ed:
26:5e:b0:d0:61:1e:a9:9a:7d:5b:67:c5:e8:32:9a:
92:9c:84:7b:eb:c0:9a:ff:22:83:a3:23:b2:44:16:
de:e1:19:c0:15:3d:e3:9a:4c:b9:78:ca:9b:71:99:
eb:10:2d:e5:6e:25:d9:29:65:9c:d3:fc:e2:82:67:
6f:23:13:6f:eb:7d:82:11:2b:fa:15:ed:94:38:a4:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:99:B1:84:3A:C5:84:51:5D:9B:5A:79:F1:C3:D2:E7:32:65:7C
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d9:00:ba:49:a7:a0:1f:b6:14:b0:30:65:fc:54:fb:99:ac:
32:2e:77:ef:c2:d7:46:72:79:0b:26:df:ff:61:48:29:16:30:
90:37:14:e5:01:28:c9:7e:61:53:61:8a:9a:92:14:be:7d:59:
f3:3b:63:f1:78:00:f7:ca:ae:91:58:7e:31:54:b5:25:d4:69:
6e:63:61:01:17:3a:66:3f:ea:02:7a:d3:57:01:0d:a2:28:dd:
4b:9f:e3:7d:bf:1f:c2:f0:93:e6:a9:74:dd:e1:26:54:2a:96:
a5:0a:bb:27:0d:36:d2:e4:74:1f:1e:79:f9:20:92:b8:15:af:
1d:9d:ce:80:c0:c3:4f:ee:6b:e1:18:94:08:91:ed:35:84:8d:
d2:7a:7e:da:bd:55:49:24:b3:fe:85:13:c2:57:fd:2e:20:f1:
2b:b4:cc:eb:09:12:5c:31:25:17:b8:0a:17:3a:d5:9f:2a:f9:
51:ae:d0:d9:b1:7b:b6:33:86:20:22:62:92:6f:0c:7b:9b:c9:
0d:f6:3c:2c:d6:90:9e:d0:31:9d:57:3e:1d:31:72:bd:17:58:
36:98:60:e9:28:0d:a0:b0:ef:c0:94:47:fd:4b:0d:5e:b2:ff:
f6:01:a0:71:b8:94:20:d0:8a:1d:f7:fa:06:77:76:48:f4:05:
ab:e0:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:31 2024 by rpki-client on console-fra.rpki-client.org