Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: ANbfvxSTwdxP0z6ODoUPirdkcr2s5IIbpjAZnkqB5t8=
Subject key identifier: 03:93:A7:80:1A:E0:EA:C1:A2:55:64:69:81:55:61:CF:77:A4:4F:62
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019369DA626A6C9E02CBF310BE193EB85E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0809
Signing time: Tue 26 Nov 2024 19:02:19 +0000
Manifest this update: Tue 26 Nov 2024 19:02:19 +0000
Manifest next update: Wed 27 Nov 2024 19:02:19 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: YLGNHeQWnfEB9vJuRQ7E/n+GnjpEcr76WTimA4AZq44=)
2: bk1HaROtwgqOL6v8H4pih5VVV7M.roa (hash: YSBEC7svBSNsA8Nm0QUFNVJq7J3+RLjeXTs9zhdAZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:62:6a:6c:9e:02:cb:f3:10:be:19:3e:b8:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Nov 26 19:02:19 2024 GMT
Not After : Nov 27 19:02:19 2024 GMT
Subject: CN=0393a7801ae0eac1a2556469815561cf77a44f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:04:6f:dd:3e:1f:aa:79:06:db:c8:20:67:
cb:2f:cf:b4:3d:ee:6b:69:f1:0c:c0:df:4c:8e:62:
ab:56:0c:d6:28:c7:e6:89:a6:af:ef:56:6a:07:8d:
de:d7:1e:26:04:fb:ef:05:a9:01:82:28:86:60:47:
31:a7:b6:20:8b:26:eb:4c:f7:19:5d:a9:8b:43:c7:
50:b7:6f:38:58:88:1b:84:ed:09:7f:e2:7f:88:a3:
11:bb:0c:57:b3:05:be:4b:b8:10:4b:05:f4:b1:56:
7a:1c:e4:df:c6:77:45:ff:48:b8:83:18:e5:66:76:
73:48:23:a9:3a:a2:b9:6f:6a:96:1f:73:65:b6:92:
18:90:38:e6:49:9b:b8:9c:8f:a9:15:36:41:ac:bf:
0d:5c:98:13:b3:a5:97:33:d6:ac:0e:fd:d2:89:02:
33:b8:5f:71:11:16:c9:0f:8c:20:2a:b1:8a:3c:f1:
7b:db:24:2a:00:b8:50:35:38:1a:bc:3a:56:f9:34:
77:d3:bb:fd:ab:07:3f:ad:53:72:e1:d5:5b:ec:71:
cf:06:ad:55:bf:2f:fe:9e:1b:2e:52:79:c3:66:5f:
4c:ca:11:3d:1a:c0:6a:5a:0d:dc:a4:63:b7:bb:a3:
cb:31:e4:cb:85:57:f6:02:1f:a5:f5:d1:9f:c7:4f:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:A7:80:1A:E0:EA:C1:A2:55:64:69:81:55:61:CF:77:A4:4F:62
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:96:8c:53:ce:8e:b4:41:89:5e:ab:6c:f7:2b:c5:56:61:22:
cb:df:04:dd:1e:ed:59:56:29:ad:1d:dd:92:ad:e4:1a:c1:72:
07:d5:88:a5:f5:aa:97:f3:ca:bd:e5:0b:4f:b2:ca:c2:7c:21:
f7:6f:df:92:09:d1:8d:29:c1:2c:42:80:ab:58:d9:27:ad:ba:
b6:8f:2e:b6:f5:f4:7b:47:18:6e:de:fe:b0:bf:f7:dc:65:cc:
b5:97:b0:44:0e:aa:c8:69:0c:94:39:ae:88:6d:11:35:ad:c6:
0c:53:40:8f:71:cc:80:57:d9:8c:b2:2f:25:fa:8d:4e:d7:df:
0a:b6:b0:1b:e2:6d:71:be:32:c8:6b:f6:16:70:3f:95:c7:7d:
c1:e0:8e:31:aa:6c:53:d3:08:7a:2c:5f:56:d0:56:6e:99:45:
88:c0:29:e9:ab:ab:63:0e:fd:0a:cf:54:f3:80:10:82:b8:83:
4c:df:fc:e4:72:df:d6:e7:95:32:b9:d9:44:b1:73:6c:d2:0a:
b9:8a:47:90:22:4e:e6:89:ec:e2:55:ce:b4:a8:1c:7d:52:0f:
73:6d:2e:42:c7:bb:85:c9:5a:a6:8f:b0:f3:6e:2f:db:fc:6a:
8d:1c:ff:d4:7b:9e:8a:25:00:cc:46:47:8e:25:1f:a6:07:a4:
cf:11:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:26 2024 by rpki-client on console-fra.rpki-client.org