Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json)
Hash identifier: gck2Zqk3NLLC5eSBLVUiWOWTlyyEG4J9DEO79u5u9lI=
Subject key identifier: 47:24:1F:B7:26:15:3A:AE:4F:1E:19:37:83:86:1F:1B:C1:24:81:72
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 0193568B0E2A7A271CAFBBDD8B2528CF3A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
Manifest number: 12D6
Signing time: Sat 23 Nov 2024 01:02:53 +0000
Manifest this update: Sat 23 Nov 2024 01:02:53 +0000
Manifest next update: Sun 24 Nov 2024 01:02:53 +0000
Files and hashes: 1: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: n/7l98bZDYHITmKkmqmgIOiiCGQqj8i66Jt18RFSD9s=)
2: a0SjMImekPxTMhxflVUxKkfI67U.roa (hash: KX3Evs5O+FtvHFmurNlWzhI7z5fW54IpRDhPGUSydds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:0e:2a:7a:27:1c:af:bb:dd:8b:25:28:cf:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Nov 23 01:02:53 2024 GMT
Not After : Nov 24 01:02:53 2024 GMT
Subject: CN=47241fb726153aae4f1e193783861f1bc1248172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:b3:4c:13:17:64:b1:c5:b8:39:59:29:3f:
55:c8:0b:39:df:22:97:d9:e6:4b:df:b8:ef:91:0c:
0c:13:3e:a8:c2:62:8e:1c:ec:c3:01:97:9b:03:a7:
41:9c:48:e1:dc:d5:9e:e5:64:fe:8c:bd:3d:26:91:
87:27:70:19:f8:98:52:cd:50:09:4a:60:8a:1a:fa:
22:f2:91:91:c9:6d:ef:35:26:c0:da:89:ad:0b:f6:
66:08:ba:f8:64:b3:23:6f:e6:d3:c7:76:2a:37:7b:
02:96:67:d5:e3:a7:bd:6a:75:81:92:d1:8f:c9:75:
af:a7:47:f3:f4:fd:ca:66:d5:f4:ce:cf:4f:94:7c:
32:2b:9e:2a:2a:16:c0:4a:49:df:c1:c0:8c:09:af:
18:02:d4:3d:5d:8b:f4:21:9b:15:a4:75:df:10:cb:
2b:46:9d:60:6c:15:a7:53:ee:11:71:65:73:8d:07:
65:94:f2:33:22:61:d8:76:a5:76:aa:3c:4c:eb:ef:
89:8c:c5:ab:8c:fb:8d:87:d0:4a:09:93:90:a6:df:
f9:6e:00:4f:87:5c:3b:75:87:e1:92:78:2d:ad:cd:
fa:13:a3:b7:5f:ca:35:4e:f2:23:aa:25:6d:50:f7:
75:1b:47:6b:8c:2a:99:ff:08:00:05:80:83:62:59:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:24:1F:B7:26:15:3A:AE:4F:1E:19:37:83:86:1F:1B:C1:24:81:72
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:67:1d:74:52:9d:ea:46:a8:ad:56:ed:43:c0:fc:ae:60:f2:
37:36:0e:b2:57:0d:c5:52:2d:2e:3d:bb:ca:33:f7:f5:0f:06:
a5:28:69:bf:34:af:58:76:98:ac:d5:59:18:9d:0b:46:2d:e8:
b5:1f:07:dd:55:52:71:91:6b:70:5b:81:60:db:12:ef:1d:3f:
2e:c2:d7:1e:49:7c:23:d0:c5:74:ec:b5:f6:54:d3:1d:92:13:
59:a2:b2:d4:78:fd:72:5e:80:d2:28:c4:70:a7:d6:e9:2d:df:
7f:11:91:03:a4:ee:34:58:e4:18:a4:3c:48:23:66:16:06:70:
ad:49:ab:0e:8c:03:83:e9:f6:54:9b:f8:7e:49:79:7d:15:83:
f6:a0:e0:b0:30:a6:3d:74:99:c8:29:82:4d:56:b9:01:6f:17:
5e:58:69:6f:74:71:10:24:65:be:e6:d8:af:df:c9:de:1a:c1:
f0:21:92:40:51:a7:ea:2b:8d:ac:10:ba:cc:68:7e:77:27:4f:
36:bd:1b:4e:56:7b:5c:9b:f6:e6:5b:06:dd:11:5d:6e:4c:50:
21:bc:e5:75:33:01:0b:61:e6:a9:c9:e9:56:f2:e4:91:be:32:
11:85:13:d3:7a:e7:67:54:4b:1b:c5:be:33:f8:0a:34:fb:df:
ea:4c:39:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiw4qeiccr7vdiyUozzoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YTBjODgyNmMxOGJjZDUxM2FhYTdlNTIwODFmZjlmZDM3
OTE5ZmIwHhcNMjQxMTIzMDEwMjUzWhcNMjQxMTI0MDEwMjUzWjAzMTEwLwYDVQQD
Eyg0NzI0MWZiNzI2MTUzYWFlNGYxZTE5Mzc4Mzg2MWYxYmMxMjQ4MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklizTBMXZLHFuDlZKT9VyAs53yKX
2eZL37jvkQwMEz6owmKOHOzDAZebA6dBnEjh3NWe5WT+jL09JpGHJ3AZ+JhSzVAJ
SmCKGvoi8pGRyW3vNSbA2omtC/ZmCLr4ZLMjb+bTx3YqN3sClmfV46e9anWBktGP
yXWvp0fz9P3KZtX0zs9PlHwyK54qKhbASknfwcCMCa8YAtQ9XYv0IZsVpHXfEMsr
Rp1gbBWnU+4RcWVzjQdllPIzImHYdqV2qjxM6++JjMWrjPuNh9BKCZOQpt/5bgBP
h1w7dYfhkngtrc36E6O3X8o1TvIjqiVtUPd1G0drjCqZ/wgABYCDYlljHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEckH7cmFTquTx4ZN4OGHxvBJIFyMB8GA1UdIwQY
MBaAFDigyIJsGLzVE6qn5SCB/5/TeRn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTkt
MDUwMmE2YTU0YWFiLzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTktMDUwMmE2YTU0YWFi
LzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGcddFKd
6kaorVbtQ8D8rmDyNzYOslcNxVItLj27yjP39Q8GpShpvzSvWHaYrNVZGJ0LRi3o
tR8H3VVScZFrcFuBYNsS7x0/LsLXHkl8I9DFdOy19lTTHZITWaKy1Hj9cl6A0ijE
cKfW6S3ffxGRA6TuNFjkGKQ8SCNmFgZwrUmrDowDg+n2VJv4fkl5fRWD9qDgsDCm
PXSZyCmCTVa5AW8XXlhpb3RxECRlvubYr9/J3hrB8CGSQFGn6iuNrBC6zGh+dydP
Nr0bTlZ7XJv25lsG3RFdbkxQIbzldTMBC2HmqcnpVvLkkb4yEYUT03rnZ1RLG8W+
M/gKNPvf6kw5XQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:01 2024 by rpki-client on console-ams.rpki-client.org