Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: zeJwRTbchixlzcdAF4d554j6ToyKTySv1IT6+zfRUkE=
Subject key identifier: 6D:78:15:5E:C2:6C:DD:18:B4:A8:E2:E4:3E:2A:FA:4A:9A:15:C8:DB
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019353BEAA1593BA6933A540C43A4429DC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0756
Signing time: Fri 22 Nov 2024 12:00:24 +0000
Manifest this update: Fri 22 Nov 2024 12:00:24 +0000
Manifest next update: Sat 23 Nov 2024 12:00:24 +0000
Files and hashes: 1: dAm-l0_ABT478I9ddaiSpv6XfgY.roa (hash: IDQxC4qBDaKjClhn2oRJVnCknOoNZfUqqQ1P36gQsqo=)
2: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: aPf/rMjbNXwHDkdf+2uO47a6B4UTTpiw1m9tzO8oeZE=)
3: sU01qWt28hAz_qgW-HjVZRaA3uQ.roa (hash: B+5K+gy9Zm7LD+sZEXQdr/SPEgQC+jEhrwGKkMlT+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:aa:15:93:ba:69:33:a5:40:c4:3a:44:29:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Nov 22 12:00:24 2024 GMT
Not After : Nov 23 12:00:24 2024 GMT
Subject: CN=6d78155ec26cdd18b4a8e2e43e2afa4a9a15c8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:04:fa:33:58:00:87:70:72:58:39:67:14:
94:f4:a6:cb:e0:fa:36:7e:52:51:0b:b0:19:47:1d:
52:13:ce:ed:17:cc:d8:ae:00:69:2e:b9:9e:55:3f:
5f:44:54:b2:f8:76:33:9a:5f:eb:9a:94:86:db:d1:
67:18:34:01:69:28:96:6b:b8:b8:ff:fd:b7:f9:a5:
61:67:ce:69:76:40:c1:dc:23:32:2e:1a:2b:d2:69:
39:c9:1b:51:b6:9c:69:b4:82:c5:28:31:f4:6d:34:
13:0c:13:e3:b3:64:ed:b7:13:98:1b:8f:05:0b:ed:
a7:90:9b:7e:48:89:be:d8:c6:0c:e9:93:17:7a:92:
1e:9b:cf:54:90:47:e0:1d:70:ee:e9:a1:60:95:f7:
6f:bb:7d:5b:5d:10:f7:eb:71:21:30:23:44:55:d2:
51:bf:49:12:56:df:bb:da:d6:5f:77:85:b5:e4:59:
ff:ff:05:2d:f1:f9:94:3f:51:55:58:06:34:69:78:
27:67:d3:cf:4f:07:12:1b:f6:ed:6b:be:39:32:fd:
9b:03:8d:12:42:67:b1:d6:12:67:fa:0a:67:55:e6:
d9:7c:bf:e2:e3:9a:18:dc:25:1b:e5:f4:69:b2:2e:
e2:17:4f:f3:ff:7e:5d:8b:22:9f:0f:65:43:be:3f:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:15:5E:C2:6C:DD:18:B4:A8:E2:E4:3E:2A:FA:4A:9A:15:C8:DB
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:df:ab:09:f3:14:6f:71:b7:a8:85:01:2b:4b:3b:0e:72:1a:
13:10:9d:24:86:4c:fa:72:16:9d:13:ed:48:28:9d:cd:e8:71:
e3:66:0e:4d:af:ba:79:39:18:02:27:a1:08:7a:ca:cc:de:bf:
8f:a7:79:22:a8:dc:6d:11:2c:9b:33:84:12:bc:71:67:57:84:
78:62:ea:11:76:2c:8c:74:f0:a6:b8:3f:c2:91:03:5e:17:ad:
be:92:e1:f7:76:f8:07:2b:76:37:eb:32:32:84:6b:44:ed:98:
cc:05:f1:57:17:ca:94:4c:07:9c:5c:b7:30:b9:9a:f2:ef:d3:
da:78:e2:06:13:e7:0c:e3:30:a7:97:6e:de:79:20:5e:8e:76:
2a:cb:d0:63:be:70:03:9a:2f:98:a5:84:ac:df:04:46:61:9e:
65:99:66:d9:ef:1a:63:d8:7b:1f:04:75:13:94:8c:6d:a7:b2:
a7:6c:c2:29:7f:42:ef:9f:c1:f9:88:8c:dc:c8:d4:e3:12:6d:
b4:5e:72:76:d5:3f:e4:e5:f3:c1:c0:f6:55:b8:9d:fb:d9:67:
4f:e7:0b:9a:ba:4b:fe:12:34:4f:1c:54:f9:e4:a3:36:63:2e:
0b:66:6d:12:78:23:2a:55:f4:37:a2:6b:e4:a1:a0:5d:17:0e:
fa:fb:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:01 2024 by rpki-client on console-fra.rpki-client.org