Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: FWkDxPffsc5FUOzEtFLarw6enAszwZRsC3KzvYLc/yA=
Subject key identifier: 5C:1A:CA:6C:6A:37:13:9C:A6:FD:AA:56:4D:A8:5A:F7:56:A4:2B:8B
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019352ACF881C836DEEEBC28B73CEC5C7431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0C9C
Signing time: Fri 22 Nov 2024 07:01:27 +0000
Manifest this update: Fri 22 Nov 2024 07:01:27 +0000
Manifest next update: Sat 23 Nov 2024 07:01:27 +0000
Files and hashes: 1: V1tMmdzah-_uOvzPSHjAfOUHHkg.roa (hash: nT6H6NesBpCv1QrpokozTU99Zdsr6bkxXnSGh/q+DJ0=)
2: ZXRdT2cnMGCUlawCIGIBaK1hfME.roa (hash: e0VJTyTS0oIBZxBdQT4lqqoXnPmOJeqIuneV9KcVdkM=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: IyP8JNDOZ3HkBoGDnhFlhob1Zbwg7HnpPCu8SUZwNHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:f8:81:c8:36:de:ee:bc:28:b7:3c:ec:5c:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Nov 22 07:01:27 2024 GMT
Not After : Nov 23 07:01:27 2024 GMT
Subject: CN=5c1aca6c6a37139ca6fdaa564da85af756a42b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:fb:6c:1a:df:f8:9f:3d:72:46:a1:1e:14:
5b:36:99:b0:e5:03:7a:74:19:80:e9:06:2c:cc:cc:
bd:9a:00:9a:f0:5c:2c:47:54:15:1d:26:18:28:95:
98:3a:37:f7:e8:b7:25:ad:e9:16:9c:ba:d8:d1:39:
05:63:24:e6:4f:4f:46:b2:68:85:ec:7d:9d:42:85:
a5:d7:e1:29:62:00:c4:ae:ae:5a:7c:a7:0e:0d:92:
cc:35:24:d3:6d:fb:fd:c1:82:ac:e5:a2:f8:41:4e:
80:04:d4:a1:93:6e:12:d0:52:29:0a:16:d3:37:ae:
e4:9e:64:50:a7:95:bd:ee:de:35:60:f5:9f:80:b2:
43:6d:14:36:b6:f5:49:20:75:c4:13:30:b2:3c:6c:
b2:1e:b9:e2:d8:3d:f5:8a:96:c2:0d:a2:80:8f:6f:
7f:18:a5:e0:99:4b:a8:c3:04:7d:f0:36:7b:16:c1:
4f:8b:39:a1:80:ab:d7:2c:0f:5c:e0:29:31:61:55:
08:7a:5b:e3:75:02:4f:8e:81:06:22:30:49:c8:bb:
4a:0e:fb:c6:b4:df:8b:84:29:27:86:7c:4c:55:27:
a0:89:12:bb:83:4e:50:5d:18:ca:1a:d0:c7:4f:a8:
5d:a4:7e:34:5e:7f:10:1c:96:95:09:0d:50:a3:5c:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:CA:6C:6A:37:13:9C:A6:FD:AA:56:4D:A8:5A:F7:56:A4:2B:8B
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:b3:2e:23:4d:78:bd:ed:b6:0a:76:50:3b:8c:84:b8:ff:
a7:ee:61:62:38:51:04:a6:4f:f9:3b:fa:fc:25:79:fe:5c:10:
07:fb:80:9e:7f:56:f3:68:c1:ad:71:45:14:9e:71:a4:84:d8:
04:25:74:ce:65:45:22:65:86:fe:d4:f8:2f:ad:06:61:5a:30:
25:10:99:49:16:fa:f4:c3:9a:a9:e8:05:e8:62:e6:6b:93:5d:
8f:a0:c6:e4:06:0e:ab:10:62:01:bb:01:be:a4:fe:8d:aa:a6:
34:9a:7f:d1:27:2e:c7:fd:7c:e4:ff:82:c9:85:01:37:6f:40:
b5:0f:12:a4:ad:bc:4b:c4:b7:be:49:c6:c8:69:41:1f:d9:04:
ae:ae:d2:42:e9:66:1a:a7:2b:82:5b:2e:25:f7:86:12:67:5f:
de:19:36:a1:01:02:75:43:43:1b:ac:c6:42:54:e4:81:a3:39:
f8:57:6c:19:22:23:79:cc:3f:c7:6c:88:ea:8f:e2:60:6c:d0:
b6:50:fd:b7:38:e5:c4:d6:af:34:c6:a4:e1:4c:1d:81:c5:e6:
fe:13:69:be:02:46:6a:cb:e6:bd:c6:45:dc:0e:d7:e6:fd:3b:
6b:c9:0c:03:7a:b1:8a:15:8f:78:c5:18:46:c6:53:8a:a0:b1:
c5:1b:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:15 2024 by rpki-client on console-fra.rpki-client.org