Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
File: ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft (raw, json)
Hash identifier: v1m4zVgHMiF9MpLdZy/1XWaiOdPaDcwIGSiqaWsL910=
Subject key identifier: 3F:DE:E3:89:E1:3A:B5:46:C4:38:D3:26:56:7C:3A:1A:15:4A:36:EA
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 019352AC0159696CEA90C2113EA53D016896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 07:00:24 +0000
Manifest this update: Fri 22 Nov 2024 07:00:24 +0000
Manifest next update: Sat 23 Nov 2024 07:00:24 +0000
Files and hashes: 1: ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl (hash: wa8SWydSP6+ElUex5MvvxRHMSD03GrbbMs+dl+gMUnU=)
2: rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa (hash: tjCSK37uqLsyNibvDIOYmAdzQ6MTUfBHFQH7pog1lPg=)
3: ztMFBySgYeNK1WuO7wte9mx5890.roa (hash: w8LECpTRTUjWqqiHNN9TrgV+zcgO6O2DaAPc6BiPc/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:01:59:69:6c:ea:90:c2:11:3e:a5:3d:01:68:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Nov 22 07:00:24 2024 GMT
Not After : Nov 23 07:00:24 2024 GMT
Subject: CN=3fdee389e13ab546c438d326567c3a1a154a36ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:95:bc:e1:27:d9:15:82:7f:e2:11:9e:24:
2a:55:af:1d:ec:02:80:e9:1e:56:68:22:88:c1:cb:
3f:b2:32:c8:c7:83:f6:1e:9d:6e:47:74:23:2e:2b:
f5:96:13:6d:4a:e2:00:0a:b8:21:10:97:98:f9:a8:
32:08:80:d5:9f:dc:ff:01:4e:33:f1:8e:3f:3d:20:
16:31:35:18:23:41:03:6d:91:e5:76:46:06:1b:b5:
ad:5b:f8:a0:e1:63:12:64:8c:1d:1e:a7:c3:51:54:
50:81:b5:20:94:13:6d:60:a7:9e:5f:e2:d9:1b:76:
91:e0:ed:8b:d0:86:9b:92:84:2c:d5:32:e9:9d:e9:
ba:f1:dd:91:2f:e8:7e:ef:34:b6:77:48:b6:29:45:
5a:0c:13:16:4e:06:09:09:93:1b:65:10:e6:bd:f1:
b5:38:5a:bc:30:28:61:9a:48:d3:cf:e7:c4:17:97:
fc:6f:62:bd:cd:0a:77:f2:07:60:fb:84:5e:6b:dc:
0f:ba:bc:67:89:3e:b1:17:e2:b7:fe:df:e8:99:ce:
f3:5b:8d:01:f7:61:f5:fe:40:2e:4b:6c:1d:e9:5b:
8f:55:8e:4e:e0:ea:8f:f9:f5:3f:b6:cf:b9:41:e5:
85:f5:e4:33:9f:32:98:ee:8b:21:b9:76:71:ca:3a:
f0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:E3:89:E1:3A:B5:46:C4:38:D3:26:56:7C:3A:1A:15:4A:36:EA
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:6b:7d:b7:5d:45:99:2c:4c:34:c9:56:23:5b:a0:80:a5:
81:e8:6d:39:86:8c:6c:35:c1:09:8a:1b:de:6c:f4:03:1e:86:
7a:f7:48:c6:25:84:1f:38:1b:42:2b:5b:53:7a:38:91:b0:da:
02:4d:3b:e7:2f:62:9f:19:c3:c2:eb:9a:ae:8a:63:4f:f2:10:
de:fd:97:df:7a:28:50:9a:11:67:fe:7b:9c:ca:bc:6b:77:79:
8f:dd:5c:7f:9d:3f:a6:90:71:63:9f:c7:23:53:b9:f4:53:87:
04:f7:cf:69:2e:b8:31:02:88:0a:12:f5:30:1a:9e:d4:e5:df:
a4:d5:a2:3d:fe:57:7c:66:85:02:6a:ff:2b:c1:b2:5b:c0:0d:
d6:40:53:8a:12:08:df:d3:d4:87:f7:4d:14:59:cd:a1:ef:5d:
48:35:5d:d2:d7:84:47:cf:9e:1b:13:7e:64:7a:67:f9:31:dd:
ea:55:b1:53:d8:e0:88:ec:18:68:37:46:00:14:3d:ff:61:f5:
e5:7f:4d:df:88:98:32:99:5b:01:e5:f3:74:17:8d:e1:ef:3f:
6f:d2:fe:e1:d5:0e:8d:18:f6:24:65:42:e3:8d:52:05:67:c4:
09:d4:74:49:56:b2:48:d3:b0:d5:8d:6f:e8:1c:4b:ff:0f:27:
9b:c9:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:51 2024 by rpki-client on console-fra.rpki-client.org