Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: C9hN5Zhgy5UIkoGuWNvxiiG6JhExLRb9n9043aQwHTI=
Subject key identifier: FF:CA:F8:F3:E3:BC:3E:6A:4C:5C:10:FA:E3:AE:B2:B4:8A:1F:18:FB
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 0193549C935C7DDBB51553E6F6CB2DF8659A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 115E
Signing time: Fri 22 Nov 2024 16:02:47 +0000
Manifest this update: Fri 22 Nov 2024 16:02:47 +0000
Manifest next update: Sat 23 Nov 2024 16:02:47 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: x2rzuegccKTB8EYzfkrPprjPFycStgyXMIqdZTk8ZMU=)
2: EsArNy07NU51EFNnDZZSvkBLgC0.roa (hash: lfPTfRYTq3XVuUEcKxZISTM3cC1AYuaMyjcgyq+hVlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:93:5c:7d:db:b5:15:53:e6:f6:cb:2d:f8:65:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Nov 22 16:02:47 2024 GMT
Not After : Nov 23 16:02:47 2024 GMT
Subject: CN=ffcaf8f3e3bc3e6a4c5c10fae3aeb2b48a1f18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:bd:5f:26:41:b9:4f:45:70:31:73:3e:71:
1d:54:95:fe:a0:12:da:81:d2:d2:9b:f4:b8:43:09:
e6:58:ff:78:67:c3:78:55:65:0b:aa:12:30:68:a6:
8b:59:1a:a3:33:f0:ec:25:81:49:d5:01:b5:93:8a:
15:2f:34:a7:ec:91:47:4f:a0:75:b9:f9:93:66:32:
f8:ee:16:a9:00:ea:2a:c5:3d:c1:de:c0:7a:41:91:
a4:0e:82:1a:8a:f2:87:2d:9c:d2:a6:bc:c4:11:3c:
d2:4f:d9:fc:46:29:3c:e8:7b:9c:97:d6:d3:d4:63:
22:7e:59:b5:7d:71:3e:4b:84:71:3f:03:0b:02:3d:
ac:c3:32:4f:80:97:d5:34:cd:25:0e:94:3a:e1:da:
2f:6b:f1:32:43:23:53:bf:56:56:75:77:75:fb:7e:
60:7a:4e:2e:4a:27:14:54:fd:f3:b0:53:79:fd:52:
79:e7:17:f8:9c:44:4b:b5:3a:c0:24:88:02:d5:10:
bf:ab:0c:b8:75:45:b8:b4:10:f5:29:7c:27:9f:f6:
2a:4e:b3:01:e1:07:3a:8d:47:ef:ea:06:ba:7e:07:
75:f8:fa:5a:e6:b1:72:35:fd:93:9f:b7:a9:c5:73:
6b:cd:3b:6a:0f:0e:c6:98:0e:d0:40:28:bd:27:41:
55:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:F8:F3:E3:BC:3E:6A:4C:5C:10:FA:E3:AE:B2:B4:8A:1F:18:FB
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:25:53:d8:00:27:4f:9e:61:bd:72:60:c5:d2:99:9c:7a:
63:6c:6d:81:46:5e:81:84:f4:25:48:96:05:64:19:f4:61:99:
6d:22:c1:9a:47:c9:9d:7b:09:c5:96:42:af:e7:ae:ab:62:af:
88:78:71:f6:d9:52:27:22:f0:d0:64:2c:14:8d:9c:6c:f6:6e:
fe:54:92:bf:01:b8:a8:a4:f2:ac:fb:e8:36:ab:7d:ca:81:13:
00:86:21:a8:67:8d:e7:6f:c4:ae:74:ec:3d:5d:d7:a4:04:16:
3e:e8:7b:8e:ea:4f:08:ce:5e:ab:ee:da:11:1c:8b:5a:d0:63:
64:25:42:67:9c:62:3b:5c:5b:30:d9:e4:dc:bb:ca:a4:b6:bc:
90:70:e8:67:b9:0f:fd:53:43:c7:f6:6d:2f:e6:14:a0:7c:6d:
d9:96:68:c0:8c:1b:53:5b:2c:b7:b7:90:09:1c:cd:b9:92:a7:
63:0a:84:2d:be:11:e2:21:d8:e1:a5:0e:db:1b:0b:0f:48:da:
00:7d:bc:e6:f6:6d:b5:3e:92:5f:62:85:70:d9:67:16:bf:a7:
0b:d9:e9:e1:9a:9e:dd:02:73:d4:86:65:43:cd:e4:71:26:e1:
85:b2:70:54:d0:93:f0:1a:bc:7c:dd:5f:ae:5d:a7:34:c3:2c:
bd:e3:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:29 2024 by rpki-client on console-fra.rpki-client.org