Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: j26ARWhkhAKdqAVPeIuQbbLUqd5+nuZKRKmn4l1f4ek=
Subject key identifier: 3B:CF:05:8E:1E:BC:63:63:C4:D6:AB:11:A0:84:93:B8:4E:F8:D8:D4
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 019369DA0FD41A1F087F666DF03FB03E7DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 07B3
Signing time: Tue 26 Nov 2024 19:01:58 +0000
Manifest this update: Tue 26 Nov 2024 19:01:58 +0000
Manifest next update: Wed 27 Nov 2024 19:01:58 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: jHvrz5d1uZJF/atx5suFYYIE1UIADy7dDvCMV3mCIyk=)
2: QugycpULQh-gXxmbxJJyhyXodBc.roa (hash: stJ0RgFSUMZ+VJYCDPlk1gzwzU3qFcoTmuuFzfVzk8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:0f:d4:1a:1f:08:7f:66:6d:f0:3f:b0:3e:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Nov 26 19:01:58 2024 GMT
Not After : Nov 27 19:01:58 2024 GMT
Subject: CN=3bcf058e1ebc6363c4d6ab11a08493b84ef8d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:43:9b:a7:92:d6:57:6b:f2:c5:c4:24:dd:
e5:8b:f5:45:1f:1a:ae:27:5a:b9:86:d3:40:31:2f:
e5:ff:9d:dd:38:fe:26:f8:16:a8:ba:32:7d:55:45:
51:05:6e:cb:f9:67:94:b7:1c:79:11:38:28:e3:0f:
a1:5f:aa:79:ba:d5:52:74:5a:5f:65:58:d8:ce:8b:
e5:62:9a:18:c7:2c:1e:e3:db:d1:de:23:4d:92:0d:
48:a4:18:0f:36:44:a5:6e:a7:e0:39:fa:8d:e0:a9:
ab:04:ea:05:8a:ab:3d:db:f7:a2:27:3c:ca:a1:c5:
db:da:c0:df:90:a3:49:6c:a0:bd:a4:b6:a0:38:9e:
64:bb:a6:ce:14:4d:93:ca:3a:a7:32:ac:b9:ee:3a:
6e:1c:0b:6c:a8:ed:ae:75:46:e4:80:75:79:35:8a:
08:47:c8:7b:be:08:29:9a:59:0e:d3:43:c3:eb:48:
8e:4d:b4:10:6b:0c:82:f4:81:98:30:32:81:db:39:
ce:52:a0:3f:a7:f8:80:2a:33:f0:4a:c8:3d:f6:7c:
e2:c5:e8:7c:fe:a1:7b:ee:06:ba:bd:f0:b6:f0:2f:
89:fd:a3:3c:fc:52:0a:95:62:e7:19:64:82:d0:2d:
52:5e:99:cf:89:d4:03:13:3f:01:34:94:b5:9a:62:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:05:8E:1E:BC:63:63:C4:D6:AB:11:A0:84:93:B8:4E:F8:D8:D4
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:35:5e:e5:c7:40:7c:57:70:a0:c4:ef:f7:78:30:7c:5b:2e:
1a:74:4d:7b:f5:2d:59:f9:93:b3:84:d4:03:92:ff:67:3e:05:
a4:21:d9:b6:c6:35:bc:f3:79:86:3e:84:b6:e1:65:ec:61:fe:
bc:0c:53:db:ed:e9:39:ab:aa:63:17:74:7b:9e:f4:a1:32:d6:
41:f6:e9:31:e1:d1:57:9e:57:97:9d:da:f3:dc:fc:f9:f9:2d:
a7:f0:8a:6f:95:2b:ee:78:6a:50:b6:a5:79:25:6b:6b:f3:81:
53:25:b5:ab:88:b9:38:62:03:d6:5a:84:86:41:14:69:f2:03:
c2:cd:bf:90:a5:cf:dc:49:84:5a:24:4e:a1:da:f3:7f:64:21:
d3:76:11:87:a0:6e:c2:44:b3:03:59:2e:f0:c5:f4:76:4a:92:
92:01:76:dd:6b:49:13:e1:81:df:60:23:45:6c:72:b4:68:1a:
c0:8f:30:33:a0:d7:9c:a5:ad:c2:17:6b:ca:12:4f:6b:bd:46:
81:af:8d:b4:60:fd:a1:6e:02:40:e4:e6:dc:99:f1:1f:a9:45:
2b:38:76:4c:42:6c:52:d7:fb:c6:fa:f3:5e:9b:ff:d2:88:4f:
a2:fe:11:ae:46:f1:97:97:5a:f5:77:e0:a2:1e:41:af:d6:b1:
c9:18:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:40 2024 by rpki-client on console-fra.rpki-client.org