Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: i3T6NzwSPfyXgl8ZUU/DN5EnwCcaBZ/1kALw3oj3g4M=
Subject key identifier: 4B:0F:7B:63:98:E6:90:6A:7A:0B:F2:A6:66:19:89:F0:5E:3B:44:EA
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019352AE628158F2AA839410B0A78D20D5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 07:03:00 +0000
Manifest this update: Fri 22 Nov 2024 07:03:00 +0000
Manifest next update: Sat 23 Nov 2024 07:03:00 +0000
Files and hashes: 1: 1-mvJ93h5X0u-SK52gxs05RbODI0.roa (hash: 0MmqdgawGKXKVbzK5E2MOBi9rHaxz7B3xyzp6yR6jp0=)
2: BOXUEE6GTcbtxm8g6MDpiP7GAfY.roa (hash: R2mjUdQdLbrcfseEoXTMf3ecw4dFXAaLu5+lewDS50A=)
3: bzdvwM3zvPTlrp9p85MffVoJbdk.roa (hash: j3uF8izn7xo/mvZCdovUnP8cFSSE/YygDIJYvdB0yyw=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: w10pbEgM6DG9E8rJUlmzG2GvN0MEx06czAluau98kiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:62:81:58:f2:aa:83:94:10:b0:a7:8d:20:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Nov 22 07:03:00 2024 GMT
Not After : Nov 23 07:03:00 2024 GMT
Subject: CN=4b0f7b6398e6906a7a0bf2a6661989f05e3b44ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:d0:21:45:10:d9:ba:0f:18:d1:1a:02:6c:
9b:dc:1c:b8:88:a5:a0:6d:2d:64:4a:a7:44:c1:4a:
14:82:05:92:42:af:29:04:f9:4b:2c:3c:dc:cd:44:
cc:4c:84:71:1a:03:74:f9:1f:92:ea:8a:8c:62:e3:
cf:1f:78:b1:6d:c4:1c:8a:b8:ad:0b:52:cd:58:74:
d4:dd:ea:8d:23:4e:c1:22:3b:a6:11:31:1f:52:92:
62:e6:31:3b:71:1f:9a:71:87:35:ab:87:89:8a:c1:
ad:cb:1b:91:54:f4:30:11:2f:8d:a5:8f:41:8c:76:
7c:f2:c3:8b:e6:41:51:cc:c3:fd:93:9e:96:f0:82:
01:6e:15:e8:2f:87:d7:2c:f0:6b:2b:60:c9:66:2d:
d1:bb:2d:3b:89:d8:ee:3d:dc:8b:fb:11:a1:83:d6:
8c:e6:f2:35:b8:45:ed:aa:42:1a:b2:84:88:8b:7d:
7e:61:ec:4c:2c:d1:29:98:0c:9a:a0:f1:1c:78:9b:
ae:13:f3:36:a0:d3:73:3f:6b:de:93:71:aa:de:54:
a3:02:25:7f:b1:63:fc:46:96:b4:5f:3d:09:5b:80:
14:60:c8:0f:7b:50:73:95:6f:a2:60:9e:02:48:1a:
3b:5f:f0:e3:97:4d:32:f5:67:12:a2:7b:58:5b:df:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:7B:63:98:E6:90:6A:7A:0B:F2:A6:66:19:89:F0:5E:3B:44:EA
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:5b:9a:9c:18:73:aa:b3:af:be:d4:8b:5e:fb:6b:fd:e0:
69:66:2e:ec:4c:c1:e0:1b:59:86:59:3b:47:6b:37:8d:96:49:
25:26:3d:88:f3:68:4a:93:e0:32:20:84:83:36:93:d1:e3:94:
ae:87:d4:0f:3c:e2:a7:2f:18:5a:2c:ab:22:29:da:2b:55:b1:
a9:c5:30:e9:d8:7a:bb:f7:29:6a:93:1a:e1:1f:fb:2f:a0:4e:
50:59:7f:d8:4b:dd:74:0d:f8:7e:0a:18:35:87:f0:44:bb:d5:
b8:ed:85:7e:4e:88:d7:11:0e:e3:56:eb:63:2f:75:f2:8f:dc:
e8:70:dd:5a:1f:9c:9c:ce:2e:d1:77:fa:ac:e0:2e:4d:fa:c5:
a3:94:5a:e2:69:4c:bf:0c:c3:c1:22:ec:7e:ed:e9:36:92:a1:
6c:fe:99:60:d4:a8:cc:81:b7:3d:60:de:5a:75:02:31:4f:a6:
a2:aa:12:d1:30:b7:45:f0:f6:f4:02:6e:2d:87:cd:56:7c:62:
6d:a2:29:a5:92:75:c7:65:13:69:a5:45:99:19:26:1c:89:ff:
74:40:06:ee:3e:bc:3c:44:23:91:d2:61:79:67:59:f5:cb:cc:
49:c5:02:85:7c:a2:18:c0:76:5b:db:92:a5:10:90:67:81:dd:
7b:10:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:22 2024 by rpki-client on console-fra.rpki-client.org