Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: +ZQJM4EsQjRzeUQfE1Tun5qox97h5pn/qQMh6jccYKg=
Subject key identifier: BB:B4:59:D1:68:67:BA:88:45:21:6D:26:84:6A:46:FF:75:EB:87:71
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 019356F736B720ACBC62C98664B535F40EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 1363
Signing time: Sat 23 Nov 2024 03:01:02 +0000
Manifest this update: Sat 23 Nov 2024 03:01:02 +0000
Manifest next update: Sun 24 Nov 2024 03:01:02 +0000
Files and hashes: 1: 06AoKiANfk2OcNcKhAbJ8-wS_lc.roa (hash: O5fLtuz0EMEoKtlzHOx0QxH/wnLA1vpFojlVK1Ne5bs=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: kcsrtFlJxzG/BfvVmW0RnX6LD7Bo5ETfErSbpb3UHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:36:b7:20:ac:bc:62:c9:86:64:b5:35:f4:0e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Nov 23 03:01:02 2024 GMT
Not After : Nov 24 03:01:02 2024 GMT
Subject: CN=bbb459d16867ba8845216d26846a46ff75eb8771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:1f:08:2e:f9:ac:f1:8d:57:b2:18:0d:1a:
f2:28:01:e4:a7:e0:f2:2b:21:ff:52:71:31:32:40:
e5:0f:53:40:8f:06:6c:d5:cf:3b:32:4b:57:6d:ce:
b7:2b:bf:bb:86:f6:d0:a5:86:a2:a9:a7:07:1d:7f:
90:5c:2d:da:6d:6d:89:4c:21:e5:c2:81:f8:36:ac:
be:ff:48:10:9f:4f:f7:40:af:1e:5b:d2:6b:23:6a:
47:f0:16:c5:da:7b:49:ad:ca:14:eb:90:19:11:0b:
eb:ef:fe:80:a3:60:96:3c:b8:23:f8:ff:d0:e3:44:
0b:02:91:b4:74:a9:d0:e2:f8:65:8d:80:ab:75:ac:
ce:03:9a:5f:98:09:7f:6f:b0:ed:7c:a5:55:c3:53:
94:34:bc:6c:8a:40:77:cb:ea:73:37:cb:56:4f:c2:
d5:ea:4d:ad:27:a0:5e:8a:5e:c3:57:0a:f8:4a:9f:
08:c5:e8:e6:5d:d2:cd:e7:4b:52:1f:19:69:cc:30:
29:db:85:9c:72:30:53:d9:bf:fd:ac:98:8b:e0:5b:
90:14:9d:3c:71:7f:93:f5:2d:41:23:43:e9:70:82:
d1:7a:3f:11:4a:1c:c9:ee:ee:3f:a1:e9:07:c3:2a:
82:7a:40:27:e3:b7:dd:7a:73:2f:ac:8b:72:bb:ea:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:59:D1:68:67:BA:88:45:21:6D:26:84:6A:46:FF:75:EB:87:71
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:d6:12:a0:0c:f3:ad:1c:fb:6f:2d:08:e5:a2:7c:12:a9:
dd:ce:04:87:16:15:db:f7:6e:9b:c6:0a:e3:96:43:d6:33:52:
19:bb:06:6d:13:2c:7a:ea:21:2a:f0:d9:d3:70:71:dd:54:7b:
85:8f:43:46:46:0a:3f:10:b5:36:36:63:52:62:50:11:76:07:
ce:53:f4:76:65:a1:71:c4:f9:58:29:b8:91:ba:23:b7:8b:32:
6a:5e:13:f4:5a:93:4a:54:f8:95:01:04:32:21:0d:31:9e:6b:
c0:13:b7:75:a3:b6:49:a8:18:46:c9:7b:3c:2f:c0:16:59:52:
02:58:0c:48:51:51:74:9c:1d:38:e2:d8:69:0b:e9:3f:a5:71:
45:f7:0e:c9:9c:9e:0b:35:2b:be:74:96:7d:53:12:d0:7f:88:
18:88:f6:91:2d:ba:97:f2:16:b2:ab:2d:24:cd:f4:10:43:f9:
83:48:3b:71:43:78:49:29:1d:42:ae:36:b2:be:87:af:a4:2e:
6d:7a:f2:a9:d1:fe:8f:3f:ae:87:65:5f:44:ba:95:d0:3f:e4:
97:cf:70:cd:27:65:cd:65:f3:68:69:8e:35:ec:68:73:22:2f:
0e:10:5c:8e:4f:02:9d:a9:1e:ef:6e:e3:3b:39:f7:94:db:f9:
ea:9d:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:30 2024 by rpki-client on console-fra.rpki-client.org