Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File: bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier: sq+pgwzVN8tsQiiKDYoC1iibMrp9ekWtv5VwODaKKp0=
Subject key identifier: DF:C1:A6:D1:8C:1D:D4:5F:0D:4D:A9:2F:D9:B2:D5:AE:DB:17:6B:EB
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 019355E42C415728B8425DEEB519E584688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number: 1377
Signing time: Fri 22 Nov 2024 22:00:37 +0000
Manifest this update: Fri 22 Nov 2024 22:00:37 +0000
Manifest next update: Sat 23 Nov 2024 22:00:37 +0000
Files and hashes: 1: Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa (hash: uUGinOJk5a4gZNP4BalL3DbX63YynvYAo7y3yzY5eF0=)
2: OBpKn6ejUBcNkXvi7MTpql-jTgs.roa (hash: vND0duUDXoLD01DrxFRvL8753q+YDe0HRDxL6Lj2JxQ=)
3: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: oNOijOSh13DLzEm7wF3/5fLnH+LtY+TuS1laFLXmYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:2c:41:57:28:b8:42:5d:ee:b5:19:e5:84:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Nov 22 22:00:37 2024 GMT
Not After : Nov 23 22:00:37 2024 GMT
Subject: CN=dfc1a6d18c1dd45f0d4da92fd9b2d5aedb176beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:a2:fc:cd:48:40:af:f7:ff:20:b7:eb:b2:
d0:e4:bf:30:3d:c1:8e:d0:c0:37:78:6b:23:2d:7b:
fb:dc:5a:4b:9d:6d:49:94:f3:20:0d:0d:61:5d:e8:
e7:ca:6b:51:82:19:ea:0a:7d:45:ab:51:8e:c2:bd:
f9:f6:73:7c:6b:5d:d7:64:1c:32:60:2c:00:bf:71:
01:98:68:5c:29:25:44:b4:cf:6e:69:5b:40:21:93:
4d:4e:03:18:6c:a5:19:fa:a8:74:1b:ee:44:ad:ca:
12:d3:84:67:f3:63:59:01:c3:b9:d0:c6:cd:6e:bb:
15:66:51:25:f9:e1:b6:4d:2a:ec:54:bf:88:b8:31:
cc:68:b8:b0:e4:9a:27:41:30:64:0b:bc:b1:a6:6c:
10:3f:0d:83:35:83:42:0d:d9:55:f8:32:06:36:c5:
a5:b7:58:40:13:0f:5c:3f:ed:aa:8e:1e:81:b6:12:
ae:47:7c:7d:5c:7a:a1:e3:81:4f:7c:8a:36:af:21:
63:0a:1d:c3:e0:17:47:59:9d:8f:74:a5:ea:3b:6a:
69:12:ca:3e:fc:63:93:0b:3a:6e:ea:11:4d:48:5f:
7c:0a:6c:6d:f0:39:42:d8:4a:16:6c:74:33:3e:9d:
e5:f7:ab:6f:fd:91:b9:f7:a5:74:24:bd:3c:cf:90:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:A6:D1:8C:1D:D4:5F:0D:4D:A9:2F:D9:B2:D5:AE:DB:17:6B:EB
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:34:39:f4:a8:66:6d:7c:58:2d:c6:9a:02:6a:a2:2f:b7:
1c:4e:a2:cc:83:b5:d9:84:ac:f1:6e:9b:69:97:29:91:cd:bc:
e9:6e:20:ed:5d:3d:fc:71:f1:55:5c:ff:f0:d4:5b:9e:44:6a:
58:63:cc:40:28:23:5f:e6:76:ad:99:75:e9:6f:88:ec:b5:7b:
b7:37:79:f8:f5:e5:50:6d:73:62:10:1a:bc:7f:96:f6:0a:cd:
e2:e1:59:3b:88:42:ba:d6:fd:45:0e:23:66:73:4e:6e:9d:e6:
38:f6:e8:5e:a0:61:ae:16:21:ba:4b:37:c0:56:8b:6d:e7:01:
4b:ab:3c:43:81:ea:33:79:38:0f:5e:6b:26:62:f3:0e:3b:c2:
f6:a9:c9:b7:82:ce:2e:cf:c3:1a:da:e2:9b:45:84:cd:13:e5:
f1:46:27:aa:e2:dd:ab:a0:b2:30:09:3f:6c:0a:3e:69:9c:36:
ae:aa:c2:93:2d:0e:22:b0:57:53:d5:43:b3:b3:12:1e:a8:d7:
7b:f2:34:4b:38:71:b0:36:99:17:cd:79:34:17:86:a9:35:d0:
3e:a1:da:6c:21:93:76:63:e9:e6:0d:a6:68:43:d3:7f:38:7d:
11:7f:fd:66:0f:05:92:5c:86:94:6c:9e:ac:db:55:eb:ad:6c:
12:88:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:24 2024 by rpki-client on console-fra.rpki-client.org