Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: VLyFLVhrmw/YFVhuy6QwQg7930tskc5Cw41aFPUm00s=
Subject key identifier: 75:36:12:B5:79:4B:5E:AA:9A:AA:A2:56:DD:E6:50:BC:9A:FC:2D:A4
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01936A7D7D86B5EC71619CAEF58DBB76ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 22:00:29 +0000
Manifest this update: Tue 26 Nov 2024 22:00:29 +0000
Manifest next update: Wed 27 Nov 2024 22:00:29 +0000
Files and hashes: 1: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: Bk9iacEXpgEyY9SFg5BJVHA4eCjtV1pQBGua4DW/Od8=)
2: awVW0O-vaHxr09_8yOZgTi6v3BU.roa (hash: u5JBdyOvwY1vHw1gpTEIVTNgfNIf+KQKbB2GsJbVyS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:7d:86:b5:ec:71:61:9c:ae:f5:8d:bb:76:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Nov 26 22:00:29 2024 GMT
Not After : Nov 27 22:00:29 2024 GMT
Subject: CN=753612b5794b5eaa9aaaa256dde650bc9afc2da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:1e:c2:6c:fe:91:2a:da:22:cc:5e:e6:53:
31:44:9e:99:41:d4:b6:f6:ed:6f:bb:c9:ef:59:09:
1d:91:03:7f:78:f7:42:65:0b:5d:ac:81:d7:0e:a2:
f4:25:97:7d:72:9d:14:0f:ab:cf:23:15:58:60:52:
9c:6c:23:a1:7f:ef:34:a1:00:f8:05:0e:5b:52:a5:
a9:28:ab:67:3b:16:cc:9c:cb:f8:3e:7d:d7:05:87:
f8:bb:f1:bb:63:1a:99:47:c1:5f:86:1c:b6:87:7e:
82:44:f2:13:46:ef:7b:6e:78:07:62:0a:d1:cd:96:
65:f0:ab:10:5b:20:d9:db:a9:1b:88:d1:11:a0:64:
93:f6:d7:30:4e:a7:a1:7a:c2:54:4a:50:a1:bb:2c:
3e:ee:ac:76:7c:06:22:8f:25:f7:bf:a2:dc:1f:be:
07:25:36:e0:a2:b3:5e:16:f3:8f:7b:41:d7:df:42:
a4:96:c1:1f:9f:ef:c2:fb:76:94:9c:e6:33:55:e7:
2c:28:69:38:2c:8f:a3:16:5c:e2:8c:fb:2c:00:be:
88:ee:42:b9:fe:dc:ab:e8:7a:4f:f5:9e:0e:a0:be:
b6:0f:9a:ce:09:63:93:4a:e4:e3:db:f4:a8:59:11:
53:1c:d2:7f:70:ff:ed:9f:f6:9f:30:d0:eb:d5:21:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:12:B5:79:4B:5E:AA:9A:AA:A2:56:DD:E6:50:BC:9A:FC:2D:A4
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:45:77:13:d9:f5:f0:10:e8:5a:d2:58:92:6e:09:49:de:
1c:f6:60:c5:4c:ae:3c:21:2e:43:26:d3:e9:1a:73:08:4e:86:
78:85:05:44:05:bf:bd:69:33:8b:5f:ca:5c:0f:73:73:c0:d2:
07:f7:7a:af:3a:94:73:df:3f:74:bc:87:66:64:18:fa:6e:f7:
1a:6a:c2:d1:d6:85:66:19:dc:4e:47:4e:63:88:0c:58:80:5d:
97:05:fa:27:2b:ed:88:45:67:6d:a6:d9:90:ec:74:65:bd:6b:
b4:d2:0f:da:0f:a5:a0:44:d2:1a:54:66:70:b7:7a:17:b6:fe:
d7:dc:fc:4e:15:0e:99:66:81:ab:11:3e:b8:f4:5e:cc:0a:a2:
e4:88:ff:e1:ed:cb:b3:26:36:c3:04:3e:fd:ce:b8:e9:f7:66:
f7:09:cd:aa:6d:70:07:01:fb:ce:86:fa:30:68:f5:46:c5:e0:
59:e6:c7:74:cd:f6:a9:44:af:cc:b8:aa:92:f7:29:dc:e9:79:
23:ee:eb:c3:d3:2a:ce:f4:f6:0d:b6:e2:34:4e:be:48:bf:ae:
97:14:ac:be:2e:7a:0c:e1:ec:4b:31:bc:01:11:05:be:c1:d6:
4d:77:13:83:4e:f5:92:f4:81:91:b9:59:b0:8a:3a:03:7d:a7:
e2:6b:7f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfX2GtexxYZyu9Y27duzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZDQzYzI2NDY4ODE5YzA3YjE5MjUxMTVmZTQ5MjFmODQy
MDNkMTYwHhcNMjQxMTI2MjIwMDI5WhcNMjQxMTI3MjIwMDI5WjAzMTEwLwYDVQQD
Eyg3NTM2MTJiNTc5NGI1ZWFhOWFhYWEyNTZkZGU2NTBiYzlhZmMyZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ucewmz+kSraIsxe5lMxRJ6ZQdS2
9u1vu8nvWQkdkQN/ePdCZQtdrIHXDqL0JZd9cp0UD6vPIxVYYFKcbCOhf+80oQD4
BQ5bUqWpKKtnOxbMnMv4Pn3XBYf4u/G7YxqZR8Ffhhy2h36CRPITRu97bngHYgrR
zZZl8KsQWyDZ26kbiNERoGST9tcwTqehesJUSlChuyw+7qx2fAYijyX3v6LcH74H
JTbgorNeFvOPe0HX30KklsEfn+/C+3aUnOYzVecsKGk4LI+jFlzijPssAL6I7kK5
/tyr6HpP9Z4OoL62D5rOCWOTSuTj2/SoWRFTHNJ/cP/tn/afMNDr1SHohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU2ErV5S16qmqqiVt3mULya/C2kMB8GA1UdIwQY
MBaAFDnUPCZGiBnAexklEV/kkh+EID0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQt
YWJmMGVhMDdlZmFmLzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQtYWJmMGVhMDdlZmFm
LzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkodFdxPZ
9fAQ6FrSWJJuCUneHPZgxUyuPCEuQybT6RpzCE6GeIUFRAW/vWkzi1/KXA9zc8DS
B/d6rzqUc98/dLyHZmQY+m73GmrC0daFZhncTkdOY4gMWIBdlwX6JyvtiEVnbabZ
kOx0Zb1rtNIP2g+loETSGlRmcLd6F7b+19z8ThUOmWaBqxE+uPRezAqi5Ij/4e3L
syY2wwQ+/c646fdm9wnNqm1wBwH7zob6MGj1RsXgWebHdM32qUSvzLiqkvcp3Ol5
I+7rw9MqzvT2DbbiNE6+SL+ulxSsvi56DOHsSzG8AREFvsHWTXcTg071kvSBkblZ
sIo6A32n4mt/zg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:32 2024 by rpki-client on console-ams.rpki-client.org