Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: SlZH/hCl7VLxTd31+PV/D0N/Zxwx49hs3uL6FBZPy6s=
Subject key identifier: E1:A6:AA:9E:14:FF:48:2A:C0:29:2F:64:4E:57:2E:C3:A7:4E:8E:6A
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0193568A4D6C6AA8A45494FAD26B2E24C38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 0EEB
Signing time: Sat 23 Nov 2024 01:02:04 +0000
Manifest this update: Sat 23 Nov 2024 01:02:04 +0000
Manifest next update: Sun 24 Nov 2024 01:02:04 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: oHWlWwpEq0rWYKsGkMdoQhequcXrMdDJcD5fy8e9lkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:4d:6c:6a:a8:a4:54:94:fa:d2:6b:2e:24:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Nov 23 01:02:04 2024 GMT
Not After : Nov 24 01:02:04 2024 GMT
Subject: CN=e1a6aa9e14ff482ac0292f644e572ec3a74e8e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:ba:ca:ae:fa:51:2b:fc:33:6c:02:20:91:
f8:c3:c5:ae:9a:51:dc:eb:b2:33:c6:c1:ae:dc:70:
4b:9d:66:d4:c6:52:2f:59:4a:60:25:13:09:07:d5:
4d:67:8f:9a:83:14:df:44:11:fb:a5:f7:36:c0:1b:
00:93:b7:5f:51:e0:01:a4:49:63:de:f1:89:cc:99:
60:c7:a2:83:38:38:ec:be:b0:d8:a8:be:7a:2b:00:
18:54:c1:05:71:e6:68:1a:19:79:90:87:f7:c2:06:
6c:7e:dd:70:3d:dd:09:73:7a:2a:33:49:b7:10:b6:
31:02:14:a1:d0:9c:da:ce:d6:98:5e:05:0b:1f:1c:
18:23:fb:7c:d8:13:e8:3f:9d:a0:9a:38:aa:a4:38:
e5:52:a9:2f:0d:08:e3:ae:c9:97:ee:f4:e5:1a:50:
ab:1b:67:6a:be:fb:c6:2b:0e:fa:26:57:c1:4a:80:
8e:19:cd:47:23:6f:88:08:e2:c3:2f:89:b0:e3:f4:
2d:57:71:af:04:98:f0:f0:59:fd:b4:6c:b0:68:78:
c1:da:81:cb:19:15:66:c2:85:4d:bc:f7:0f:49:2c:
b1:5e:bd:bd:fd:8f:2b:7e:2c:08:66:aa:ba:6c:87:
27:5f:e0:c1:6f:85:fd:a0:5f:ce:2c:bd:b4:09:90:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A6:AA:9E:14:FF:48:2A:C0:29:2F:64:4E:57:2E:C3:A7:4E:8E:6A
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a3:3c:7e:02:7f:87:ab:17:57:5f:69:13:ea:90:4a:97:a8:
4b:af:eb:3c:59:71:2e:f9:a3:cb:e6:04:87:7f:f4:6e:21:97:
21:c0:b7:85:ea:71:de:2c:d1:a2:ef:7f:27:72:03:2d:4b:c7:
ff:83:02:b1:f1:db:b8:34:99:78:7f:84:bc:b5:b1:04:5f:ab:
49:32:49:31:18:ef:7b:3a:e9:5a:50:bf:fd:54:ee:15:7b:d5:
d8:75:d1:64:6d:dc:b6:03:44:d2:43:1e:e7:e2:c6:d5:cb:c7:
1b:09:c8:fc:3f:46:ce:f4:b8:34:c5:3c:63:30:36:26:5d:14:
e1:94:59:7d:14:4a:0a:6d:49:9a:75:75:01:0c:56:83:72:ba:
5e:c9:05:0c:8c:77:b2:e7:fe:d1:59:ae:b8:33:7c:ac:c1:94:
66:a8:0a:45:11:16:52:fc:39:96:b1:24:fd:10:34:33:6d:2a:
00:27:74:01:c9:0f:ee:19:a9:71:67:52:9c:2d:b1:da:c7:34:
12:e6:a8:51:f9:0f:83:b0:aa:5f:4a:ee:55:e4:67:14:98:59:
dd:f5:2e:99:67:b5:0f:9b:46:73:94:50:60:0f:56:13:e1:2c:
a1:27:2a:d7:48:dc:3e:5f:e6:11:75:a2:23:1c:64:35:76:0d:
5e:a3:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:50 2024 by rpki-client on console-ams.rpki-client.org