Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: 7yb4kB1vgnXfrZ5WNgXvU2CcwrqdeB68/r7TW/uh3AQ=
Subject key identifier: 32:B5:B5:46:38:56:ED:E5:7F:E6:6C:04:7C:50:00:F3:BE:BB:C1:F8
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 01935688D91A14EBB779BE15ECFB5FE19856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 10B1
Signing time: Sat 23 Nov 2024 01:00:29 +0000
Manifest this update: Sat 23 Nov 2024 01:00:29 +0000
Manifest next update: Sun 24 Nov 2024 01:00:29 +0000
Files and hashes: 1: c6ihynG2JM27Zj49R2FT98ZDrHo.roa (hash: gm1ThE7KDTiJO1ol1krzcYIGIS30sPm6Co3cdgoveKY=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: 8VC2sODh4NipmiwC8RvnbsgyJ1AQTqlkYeze4RjIoGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:d9:1a:14:eb:b7:79:be:15:ec:fb:5f:e1:98:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Nov 23 01:00:29 2024 GMT
Not After : Nov 24 01:00:29 2024 GMT
Subject: CN=32b5b5463856ede57fe66c047c5000f3bebbc1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:7e:e8:50:44:00:47:53:ff:cc:80:ef:93:
b5:fe:f8:32:b7:f9:94:a3:ab:ef:ff:f2:fc:37:dc:
4a:09:af:b8:61:48:c4:ea:bb:9a:c4:d7:a9:c6:b5:
1d:3a:fb:c2:f5:a3:4c:ce:14:30:9c:4c:86:21:10:
fc:f1:85:ad:b8:45:3f:0a:86:6b:e4:c3:d0:8a:50:
1f:c9:ea:16:2c:86:aa:f6:3d:38:94:92:fa:24:b3:
71:6c:e4:54:ee:d0:6d:1c:4f:4c:30:c5:76:8a:57:
dd:5b:9d:c5:d3:67:0f:c4:1f:9e:50:84:62:0c:6d:
3c:08:08:db:b5:12:3c:72:a8:e1:7f:67:0c:df:bd:
1f:0a:e2:a7:f1:6d:f4:8a:37:fc:98:01:11:d9:a6:
ad:21:50:e8:db:cf:a4:55:07:38:ba:77:25:d7:f1:
f5:d0:4a:d7:08:8b:42:4f:27:7d:6a:0c:c6:33:44:
98:10:b9:54:3a:ab:db:ee:42:42:36:e0:ad:1e:26:
11:2c:8e:45:04:de:5d:52:81:19:83:25:a4:35:09:
d4:b0:da:fa:fb:d0:c4:3c:4d:fa:db:17:1f:d5:f4:
94:f4:92:3e:11:81:1c:b3:67:3e:66:99:8b:8f:da:
ad:1c:00:cc:49:f1:9f:0d:07:6c:bd:c7:52:3b:d4:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:B5:46:38:56:ED:E5:7F:E6:6C:04:7C:50:00:F3:BE:BB:C1:F8
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:d7:d0:5a:ac:e8:4a:5f:01:17:53:02:0d:b4:04:f1:a4:
71:a8:14:6d:34:63:6c:ee:da:c6:77:29:8a:33:31:35:4c:7a:
6a:71:08:27:f6:a5:b4:2e:bf:c4:b3:89:43:29:d7:7a:53:ac:
ce:87:b9:64:59:32:f1:ac:bf:49:4d:ef:29:1b:9d:a7:e0:fb:
31:84:1e:e6:aa:93:ba:8e:5c:29:b0:f5:aa:6e:5e:12:2b:b3:
35:c0:42:4a:3d:3f:a2:91:50:cb:a4:9e:8a:dd:7d:a8:64:35:
65:85:bb:1d:07:a7:cd:8f:c2:74:81:a0:74:28:46:0d:c1:32:
04:f0:30:7f:04:42:e8:ac:b3:38:61:ef:ab:e1:e4:2d:67:9a:
6c:75:40:d1:db:1f:2f:f0:fa:2a:a0:d1:15:2a:e4:0e:7b:6a:
42:7f:b4:b9:35:55:24:f8:6a:95:da:e7:e6:c9:81:cd:b4:27:
84:94:f4:d0:db:94:8f:fb:49:63:85:a0:79:ad:00:4b:95:5e:
30:14:b7:89:b4:f0:a3:c7:e1:4a:a5:a5:3f:9d:a1:0f:09:c5:
82:ce:36:c7:7c:42:e6:2a:1c:4b:fa:38:d4:86:a0:74:29:28:
58:34:2b:81:1a:b6:85:62:5e:0b:ec:45:48:bc:6a:cf:fc:e3:
07:77:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:05 2024 by rpki-client on console-ams.rpki-client.org