Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: dbv9BoqvZ7QwROJVO5LmUW0tU1RCXdgl/S65wSQPFeo=
Subject key identifier: 54:E2:80:5C:CB:95:C2:42:38:FA:4D:50:EA:C4:A4:4D:E5:77:EE:EE
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 0193572DA8B9B6CDC998F4598A08BB21990F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0455
Signing time: Sat 23 Nov 2024 04:00:30 +0000
Manifest this update: Sat 23 Nov 2024 04:00:30 +0000
Manifest next update: Sun 24 Nov 2024 04:00:30 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: V7bdwyY5wU5+mW7bSFhfW7z3Y9pkMV9zBhGF/l5Ju0w=)
2: OpGb0KNHgL7BMTzZEZqxZWI76P4.roa (hash: wMeNpJ8/oFp92ngLFWxv8rAa82e7cDOtDDC1sV4DR+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a8:b9:b6:cd:c9:98:f4:59:8a:08:bb:21:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Nov 23 04:00:30 2024 GMT
Not After : Nov 24 04:00:30 2024 GMT
Subject: CN=54e2805ccb95c24238fa4d50eac4a44de577eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:75:89:94:93:4b:e5:de:f3:81:7a:4f:72:
92:6e:89:8e:3d:f1:ac:66:2d:84:ca:b5:42:b5:f5:
ee:d2:a3:4d:a2:d0:64:5d:b9:c8:9d:91:33:98:a6:
f6:69:7a:76:0a:e2:a8:cc:05:c4:41:f9:5a:77:f9:
3c:93:c2:39:58:9d:04:2d:2a:74:b3:a2:7c:22:9b:
0a:cd:78:9f:d9:c8:ef:8f:bc:90:47:50:ea:d6:2d:
11:b2:e5:d2:15:46:9a:3e:f8:3e:c0:4e:90:f8:49:
94:a6:2b:06:93:ca:11:af:28:bb:88:b6:aa:7d:d7:
6d:f6:bf:15:cc:ae:5c:69:8c:2a:d2:0d:ce:44:2a:
92:c7:8a:05:f7:37:cb:34:56:4f:3c:cc:55:5a:e7:
a0:c5:bf:a3:4b:d7:31:77:a8:94:42:15:bf:e1:1f:
be:48:00:2c:10:45:38:46:bc:cb:74:22:a2:eb:8d:
7a:0e:c5:eb:8f:db:ad:6c:c8:2a:56:eb:ce:2b:e9:
eb:bb:53:40:c8:74:41:ce:d0:f6:cb:08:2e:35:6f:
6c:cd:53:e2:5a:10:d7:93:4e:4b:d5:62:15:60:50:
37:d8:66:50:c8:42:a9:21:a5:e5:d0:00:fe:85:4e:
4b:61:04:07:1b:fa:b6:2e:94:62:6c:4d:d4:66:5c:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:80:5C:CB:95:C2:42:38:FA:4D:50:EA:C4:A4:4D:E5:77:EE:EE
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:74:2a:2c:94:54:1c:c4:c3:98:ad:23:b3:15:10:6c:08:3b:
a3:e4:32:50:ff:25:59:29:87:19:a4:b4:c0:15:6c:59:9a:9d:
e6:25:84:9d:91:47:28:f3:00:8f:75:6e:3a:0a:b0:cd:1b:b5:
7c:87:9a:82:f3:c6:c4:9b:c9:ce:8b:f9:7a:41:df:42:32:53:
3f:42:3f:77:24:d0:24:4f:a4:72:85:f6:19:12:a6:3e:57:3d:
87:a5:63:90:9b:29:b9:40:82:55:f1:bd:45:68:28:7b:40:68:
65:aa:70:30:95:28:76:79:20:7f:c2:a5:09:b3:d8:e2:0f:64:
21:7d:b7:42:20:d3:9c:4f:6d:9b:81:6a:1d:b2:ff:f4:31:a3:
dd:88:e5:cb:8e:a2:d9:b5:90:d5:74:df:19:72:54:28:eb:71:
c5:95:96:19:42:0f:b4:72:3d:f2:06:ba:9c:ac:cb:9f:8b:fc:
ff:14:a2:ec:56:a7:a3:1f:19:e6:be:e3:d0:e7:19:36:b3:59:
e8:3f:87:f8:98:08:f7:e4:fa:30:c2:d2:ec:ad:4f:3e:56:cb:
71:23:ae:b1:ca:e8:96:1c:4d:a2:55:df:0e:03:aa:fe:0f:c4:
c3:7d:fe:5e:4a:a9:d0:81:7d:e6:47:3f:d7:46:06:e0:af:c4:
57:e4:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:22 2024 by rpki-client on console-fra.rpki-client.org