Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft (raw, json)
Hash identifier: pvj38Ghz7hnwHjhyqNvTOHIX9VW+l/a+/xgZyAbNlL0=
Subject key identifier: 95:2E:39:B1:9A:B3:23:39:E5:64:07:24:8F:92:74:42:BF:AE:05:89
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 0193553F75E17901301B1ECB6AA13DDB02D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
Manifest number: 0BBF
Signing time: Fri 22 Nov 2024 19:00:42 +0000
Manifest this update: Fri 22 Nov 2024 19:00:42 +0000
Manifest next update: Sat 23 Nov 2024 19:00:42 +0000
Files and hashes: 1: CHA6WrB-cqAmqwnunAg4c1ECpBw.roa (hash: MMUdoJJ8QknCFE7ytjLP786S6D94qojoEAbjmIc+JWA=)
2: b4MhVWBfvzx6vp_W0g_lkQ05cG4.roa (hash: 35avdjkibjQY+WCgA/cQ60p5J8E8kKzJ/2TsesXBAPk=)
3: m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl (hash: 8vtcvs8eh+XXx866/DwzdVn5UYjN+Mo8AEMWFjLS0xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:75:e1:79:01:30:1b:1e:cb:6a:a1:3d:db:02:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Nov 22 19:00:42 2024 GMT
Not After : Nov 23 19:00:42 2024 GMT
Subject: CN=952e39b19ab32339e56407248f927442bfae0589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:28:65:9b:8d:60:68:ce:08:de:96:6c:26:
12:fb:58:52:93:50:f8:33:6f:c3:bc:35:7f:31:d9:
48:e1:6e:19:06:54:b8:7c:18:69:24:8b:84:39:18:
d4:af:d1:4d:96:db:fc:3e:f8:7f:46:38:8e:81:2a:
65:8f:20:01:5e:e9:ed:4a:2e:92:41:6a:94:be:91:
c6:0b:e7:32:ff:5e:3c:c7:69:b7:05:59:ab:ef:f9:
35:79:8f:ce:ba:5f:e7:a9:83:8a:84:5c:a1:55:71:
6e:8b:d4:eb:3d:3c:f4:b9:a2:01:5c:77:e8:93:ca:
d7:71:b7:a6:c7:56:3c:37:c8:0d:82:5e:96:d7:8b:
59:3d:01:66:47:67:4f:64:f1:3c:59:85:10:96:26:
0d:9f:11:25:95:88:4f:f4:bb:09:1c:33:00:4a:1d:
28:2c:b9:cf:b0:62:c6:74:28:18:3c:93:ce:48:58:
3a:14:a0:3d:43:03:22:2d:51:72:b1:a0:c0:71:93:
5f:5f:bd:0d:39:43:6e:bd:4f:83:2c:cd:ba:2e:b3:
bc:19:a5:20:5e:cc:76:c3:85:51:4f:cd:b4:75:67:
8a:1d:ee:28:a9:cc:7d:98:a2:67:64:62:77:e1:29:
32:a5:1f:e6:85:b4:d6:54:bf:4c:72:fe:33:25:ce:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:39:B1:9A:B3:23:39:E5:64:07:24:8F:92:74:42:BF:AE:05:89
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:63:1e:6d:5c:f0:28:2e:53:b4:f3:3a:a4:16:c5:a5:a4:db:
5c:fb:56:0f:bd:07:1e:eb:35:c1:40:26:7a:8b:c6:33:66:03:
6f:31:3b:b0:c1:11:b0:d6:2f:63:b1:21:89:ac:27:d5:d7:3d:
2c:df:bd:48:bd:ab:3b:10:d0:3e:ec:32:55:5c:0e:8f:54:ea:
52:26:d4:34:45:a3:3e:af:96:a9:8b:bf:62:15:da:98:bb:0a:
73:a0:2e:e8:ea:79:91:a3:16:a6:38:9e:f4:5e:f7:e5:e4:98:
49:86:0a:a0:8e:38:75:fc:72:ae:71:80:1d:a3:79:2c:09:71:
33:77:20:91:56:db:74:dd:41:54:36:34:aa:18:4d:af:59:7c:
e5:5d:51:ee:cb:de:dd:15:14:ad:c8:78:a5:4b:1c:87:87:84:
82:37:ac:0b:4f:39:52:18:af:78:f5:9c:d6:8e:f2:c4:7b:7b:
67:46:0a:b8:df:12:de:2d:96:3f:0d:33:59:b6:65:75:bc:d2:
77:99:8a:d5:aa:45:dc:0f:d4:10:cd:a8:98:5c:a9:bf:ed:ce:
c1:b5:79:5f:20:d2:fa:43:9f:cb:fa:09:7d:6a:db:e9:5b:0a:
97:e4:27:40:d2:d6:c0:a2:47:f7:36:8e:5e:14:dd:0e:06:36:
6c:3b:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:27 2024 by rpki-client on console-fra.rpki-client.org