Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
File: O8iOk9iVAzFkvO-XU52MidZxfas.mft (raw, json)
Hash identifier: HJSyoZi1siSU14ybxYZF7nTm9uoR6PmRPnWlFjmXDXY=
Subject key identifier: E7:34:EA:A5:2E:0B:1A:8C:97:35:33:FB:54:59:D9:49:51:C0:11:B3
Authority key identifier: 3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
Certificate issuer: /CN=3bc88e93d895033164bcef97539d8c89d6717dab
Certificate serial: 0193568AE3D0834096D1C8A1129B9F145EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 01:02:43 +0000
Manifest this update: Sat 23 Nov 2024 01:02:43 +0000
Manifest next update: Sun 24 Nov 2024 01:02:43 +0000
Files and hashes: 1: GqdYxxm-z9v5v0Yj8m-6Y9VXjjg.roa (hash: KYzjTpHmjuq4/Y/CcyOvng8tF2cucBkxu+/DmHWpgIE=)
2: O8iOk9iVAzFkvO-XU52MidZxfas.crl (hash: tI9pt1CaXmMy3ccBDQiFAVociB5Cq7HiSgOuFfdXrZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:e3:d0:83:40:96:d1:c8:a1:12:9b:9f:14:5e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc88e93d895033164bcef97539d8c89d6717dab
Validity
Not Before: Nov 23 01:02:43 2024 GMT
Not After : Nov 24 01:02:43 2024 GMT
Subject: CN=e734eaa52e0b1a8c973533fb5459d94951c011b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:a5:8b:bc:60:3c:1a:56:bc:43:c2:df:cf:
71:15:ca:f9:19:b2:1e:8d:f8:3d:31:c3:b5:2a:fe:
af:b6:f5:23:5c:74:c1:31:cc:89:21:f5:04:fc:f1:
a6:54:38:4e:b6:b6:3b:08:a6:d0:97:ff:06:2b:4e:
cc:19:6f:f2:5f:06:ff:d2:c1:0c:68:dc:2e:c1:ca:
c8:66:1d:16:87:ce:5b:cb:a6:88:2b:dc:96:e6:77:
c4:4a:50:00:e1:e0:cf:50:ad:e7:b2:6a:01:41:40:
4f:97:c6:de:35:2b:5c:44:73:7f:c3:41:b0:67:99:
11:62:2a:8f:4a:bd:13:c5:7e:88:c5:25:0c:0d:85:
75:6f:d4:18:41:92:2f:60:34:6a:c8:b0:16:88:e6:
97:ff:1b:ce:d3:ff:e9:51:95:85:8d:6f:26:db:68:
57:9d:26:1b:17:bf:02:f5:49:fa:18:53:9e:2e:6d:
82:34:38:5a:ba:2e:b5:e8:49:76:58:22:ec:f7:67:
c5:39:1e:1e:f5:64:cd:56:c4:5b:16:b4:dc:84:c1:
0a:bf:6d:2a:b1:9d:da:95:ba:17:09:00:14:2c:08:
a9:12:41:c1:af:37:a8:e6:a3:16:f9:f0:aa:b0:1d:
af:0b:14:3c:7c:03:44:80:6d:36:bc:ca:08:bd:71:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:EA:A5:2E:0B:1A:8C:97:35:33:FB:54:59:D9:49:51:C0:11:B3
X509v3 Authority Key Identifier:
keyid:3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:0c:49:70:cf:93:c2:49:ee:8a:37:b8:3d:16:d9:9f:2b:
bc:9d:12:e9:cd:19:d5:7a:47:15:c1:a6:54:b4:d9:d2:e0:21:
2a:78:50:6f:b8:96:eb:87:c8:d8:9d:59:71:20:56:3b:ad:3a:
8c:53:99:4e:b4:a3:2b:89:22:24:82:ae:b2:d0:ff:06:48:51:
5b:90:04:e0:ab:da:46:c1:c1:71:21:14:b7:6b:a0:f5:e0:b4:
4c:2e:e7:c7:e2:09:bb:9b:c2:c0:da:c0:9b:f8:7d:3b:63:2c:
b4:ae:ff:d7:c3:68:af:ad:bb:fd:1c:17:01:80:b9:cb:3c:4f:
64:87:b6:38:40:57:2d:62:98:cb:ff:7f:18:92:cb:c1:14:dd:
2e:9b:06:4b:81:2a:e6:a6:3d:ac:fd:21:a5:e5:3d:16:c6:83:
74:ef:9d:4a:2f:cb:66:cc:83:03:0b:83:47:66:2f:ee:8e:e6:
c7:01:6c:7b:62:33:04:f0:c9:fb:02:7b:60:53:e3:b4:e3:b3:
6b:52:ba:c1:55:8b:f5:03:69:ec:97:c6:f9:f7:88:68:e6:b5:
30:16:5a:ce:08:f5:4a:19:53:ee:91:3b:0e:c7:a0:92:4e:4f:
bd:98:ed:7a:90:03:59:46:e2:91:c6:61:c9:8a:ee:41:72:79:
21:b5:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:25 2024 by rpki-client on console-fra.rpki-client.org