Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: oknxuQB/gNWmtCjIvT5gZqeD/sBAqrh/L0b9wS8xMA8=
Subject key identifier: 12:6E:0E:1E:D9:F9:72:18:DD:56:9B:EB:50:BD:E3:4B:3C:A7:7D:07
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 01935508CAA6D729B27462AB12F566F7BA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0A1E
Signing time: Fri 22 Nov 2024 18:00:59 +0000
Manifest this update: Fri 22 Nov 2024 18:00:59 +0000
Manifest next update: Sat 23 Nov 2024 18:00:59 +0000
Files and hashes: 1: BwxNdb_Ys_zLxGY7D4jB0R9p_Ms.roa (hash: lUCucCJUsMQaNA8A17vhH5NLl1wjeRBXJRH/ujJgUtg=)
2: PSUOkGCxqaR3fC-7nZukt4czt60.roa (hash: /AjZGKYfMgDBSzKPcs8sc5cGsTLsgA/lrC5LUSJ2xUc=)
3: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: /ecGq0XKn7GywtwCX98RGIQq8ex80lYXyVo7LsQzCP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:ca:a6:d7:29:b2:74:62:ab:12:f5:66:f7:ba:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Nov 22 18:00:59 2024 GMT
Not After : Nov 23 18:00:59 2024 GMT
Subject: CN=126e0e1ed9f97218dd569beb50bde34b3ca77d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:10:ed:10:62:77:fa:33:fe:ec:94:69:cc:
d5:1c:0d:74:79:1d:af:5f:07:35:84:00:64:77:a8:
90:24:97:d3:c5:ce:1f:a4:60:8b:d9:8c:84:6b:6b:
f9:57:e7:d4:9d:24:8b:98:64:a7:e2:a4:03:1d:25:
de:72:f7:89:1d:56:de:21:cc:8c:9b:65:74:01:b9:
45:cd:9f:8f:a5:3e:5f:e0:54:7a:c1:50:86:9f:66:
e9:75:d5:bf:fb:76:8c:0b:18:be:22:7b:f9:1f:7a:
9e:8d:15:fc:64:99:c9:04:e5:b4:5e:1c:7c:62:50:
5b:67:88:a5:11:9e:4a:e9:58:85:84:55:e9:a0:f5:
94:06:80:ba:f6:81:fd:a5:e3:17:c3:c4:17:3c:a4:
16:7e:bb:77:7e:61:58:69:06:d4:25:2b:46:71:12:
a3:c8:49:3c:1f:99:8c:f3:6b:1a:31:15:f6:55:9c:
a7:29:46:22:16:ca:39:e5:16:f7:a7:42:66:a5:e4:
9b:26:bc:dc:3d:d2:21:d5:86:6e:7d:30:2f:f4:71:
b9:84:97:60:44:b8:02:0c:18:27:e1:df:41:00:19:
92:43:e9:ac:36:62:0f:2e:9b:03:e9:a4:e1:46:2c:
7b:69:4b:e2:1b:be:63:01:3c:f8:f8:c5:ff:24:78:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:0E:1E:D9:F9:72:18:DD:56:9B:EB:50:BD:E3:4B:3C:A7:7D:07
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5d:50:9b:b1:68:6d:88:1d:44:b6:46:d3:97:0a:25:ad:29:
6a:07:aa:4e:89:07:ad:f0:96:09:ff:89:5c:75:0f:3f:16:b1:
42:d9:c7:db:9c:b7:b4:da:1f:88:f4:f6:48:7f:c0:f9:9b:59:
2b:a0:f6:2c:b9:e0:a3:1e:bb:1f:da:13:8f:5c:47:9e:c5:4d:
c3:70:fb:30:55:5c:fc:f8:78:6b:c5:3c:f3:3a:e8:31:5b:1b:
84:26:f8:c6:65:95:fc:c8:de:6a:a5:fe:b0:33:56:80:5d:c2:
26:03:df:69:ca:24:51:65:fd:4c:54:93:80:d9:9c:59:7f:43:
09:56:5a:04:ea:c7:62:0a:f7:88:e6:a7:b5:95:5b:51:b4:13:
f8:8c:cb:32:f8:f9:ce:b8:af:41:b2:35:17:3f:0a:e7:27:8c:
c6:92:87:a8:02:28:62:38:6c:9f:50:50:65:3f:91:7b:cf:03:
02:b3:1b:54:a3:af:11:c1:ad:fc:29:f2:2c:a8:25:48:08:af:
96:4b:4c:44:de:f2:d5:8d:d6:7e:60:d5:f9:98:13:0c:9a:e8:
49:34:36:a8:7f:f4:93:2b:57:5e:31:69:54:63:2b:9f:73:2c:
81:0b:91:18:f6:f6:70:25:24:13:b1:ea:a6:bb:7f:e5:35:8e:
20:44:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:54 2024 by rpki-client on console-fra.rpki-client.org