Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: BXT2sS1YacA/NliWfVfdTdhR2XdfwseA/hZuNSaeeME=
Subject key identifier: FB:85:9A:A7:4E:69:01:10:BD:43:78:8F:3C:17:2D:8D:68:89:71:D0
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 0193568AF7032D9B5C11F38D37455A828464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1304
Signing time: Sat 23 Nov 2024 01:02:48 +0000
Manifest this update: Sat 23 Nov 2024 01:02:48 +0000
Manifest next update: Sun 24 Nov 2024 01:02:48 +0000
Files and hashes: 1: 6zPK28B6g3lAL0jk8y8ZvNZADSc.roa (hash: SsJ+mCayzTUP7pZSZbIJWA9S8lhXEkjoWgYYskU148s=)
2: OervXHNAuNl2w3zrZsTcNkmAXHM.roa (hash: CWVEI9ATg5+Uv1OQJhLN+05/2A1JHbfIZBtz9AUR41k=)
3: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: nJPI5vEF9eyHlJaEnZZTCJBWZrVB5GQcVJoBdoo2GsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:f7:03:2d:9b:5c:11:f3:8d:37:45:5a:82:84:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Nov 23 01:02:48 2024 GMT
Not After : Nov 24 01:02:48 2024 GMT
Subject: CN=fb859aa74e690110bd43788f3c172d8d688971d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:72:2a:85:b3:d4:3a:dd:a6:11:4a:a3:03:
81:b3:7c:3e:99:8e:7a:08:16:a2:ed:78:94:a3:97:
9c:1d:04:a5:73:9b:8e:37:e0:18:c9:5b:aa:3a:53:
f2:03:c1:5e:93:48:ce:69:54:0a:b0:26:89:e1:57:
1e:cd:ff:a9:0a:f8:a0:39:27:d7:be:83:47:6a:86:
c8:ce:9b:31:de:5a:b6:40:59:44:3c:27:72:f9:2b:
81:1b:47:c1:4c:bd:ae:a6:cf:bd:d1:59:03:a6:b3:
73:eb:f3:ef:2c:77:4c:84:21:3a:dd:ee:89:f3:fa:
0c:9e:7c:75:40:f9:3f:03:85:b2:d1:30:51:6a:bf:
c7:c2:73:55:b6:8e:08:4f:85:10:21:99:5a:e6:94:
78:55:90:57:02:3f:75:18:f9:ed:6f:01:30:fe:36:
8d:66:ad:a7:d9:6e:90:5c:f9:3c:88:22:e9:b6:95:
a1:a5:cd:1c:dc:a5:5f:c5:25:9f:b8:6f:c6:bc:aa:
41:03:ae:b2:5c:05:40:47:72:bf:1e:5d:ae:73:44:
05:82:81:27:22:6c:ad:4e:80:57:fc:b3:3d:39:b6:
ef:b4:df:ac:df:82:6c:4c:d6:d3:2d:4c:d9:f9:d3:
06:75:a3:17:85:ef:9a:1d:20:6e:61:08:c7:7d:4a:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:9A:A7:4E:69:01:10:BD:43:78:8F:3C:17:2D:8D:68:89:71:D0
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:55:5b:19:aa:da:cc:91:98:f5:db:d3:1c:31:9d:f6:4f:
f6:96:9d:e5:ce:80:28:57:e4:6b:7f:cc:ac:3c:dd:cd:37:51:
c6:91:61:0f:d6:19:13:0b:9f:29:29:00:e3:b7:66:1e:53:46:
89:87:5c:b0:fb:a4:c0:a4:06:35:7f:ae:45:36:e1:fb:bc:6b:
37:fd:63:72:e2:06:ff:91:d3:a0:d0:c8:96:0d:3e:61:73:7b:
33:dc:54:06:c2:c7:2f:59:64:cf:07:8c:98:5a:96:63:d1:d9:
6a:86:5d:cd:e6:af:e2:cd:e5:9d:bd:af:ec:cd:8f:a9:6b:9b:
c2:27:1c:e1:a6:4a:7d:d9:d3:e3:e5:17:0a:37:4e:88:7a:b1:
14:c4:40:80:8c:fa:5b:e8:99:a0:f0:75:ef:f5:8d:df:d5:60:
26:2d:de:6e:48:83:c6:1b:36:22:6c:c1:db:fe:39:7d:51:72:
fb:57:3d:07:f6:85:5b:cf:b7:59:e1:63:0c:d9:22:b7:da:8d:
50:f9:f1:59:77:8d:b1:7e:28:e5:b1:51:be:59:ae:5d:f0:d5:
b6:7e:3d:4c:1f:96:09:44:57:72:c3:e2:eb:6b:17:9b:3d:ac:
b0:5a:85:ba:da:1e:39:71:ce:ed:0b:70:1e:ee:14:f9:35:dc:
3a:22:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:28 2024 by rpki-client on console-ams.rpki-client.org