Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: U8wSipU9hxKHslSkHICPSlImzo4aw0o/7XIZXaVRGHg=
Subject key identifier: 98:73:A0:2A:20:15:1C:B0:58:78:A3:FF:15:19:C4:2E:B6:63:70:B7
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019369DABD33130E8B5173208682E5727412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:02:43 +0000
Manifest this update: Tue 26 Nov 2024 19:02:43 +0000
Manifest next update: Wed 27 Nov 2024 19:02:43 +0000
Files and hashes: 1: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: sTbS4owUYUHXb5KogWVK8S9vZeFjsNzAg4Y8qu/XW+k=)
2: YAKZAlEPmn3HgjBAUhLRTlZy24M.roa (hash: ugHREqlEUc7qPe94KQxypKKC4AYGcunT9t0dH00wL7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:bd:33:13:0e:8b:51:73:20:86:82:e5:72:74:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Nov 26 19:02:43 2024 GMT
Not After : Nov 27 19:02:43 2024 GMT
Subject: CN=9873a02a20151cb05878a3ff1519c42eb66370b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:2e:d8:44:27:7d:ee:79:a0:fe:f5:53:3c:
4a:12:a7:41:42:46:4f:29:ee:bc:31:c6:15:1b:48:
22:f9:34:91:74:0f:a0:41:63:56:1b:c5:7a:e1:50:
c3:28:2d:63:23:86:db:f5:1d:54:c6:9e:c2:b1:c0:
37:de:10:e6:b9:29:e9:30:a3:c0:7a:e1:28:79:34:
bd:fd:fd:eb:d8:12:e5:eb:f1:4e:c2:33:24:b7:e8:
a9:6f:4f:c3:b1:41:52:df:d0:87:f8:40:7b:79:37:
e9:ba:83:f1:57:94:92:e6:e0:7d:73:59:77:76:25:
76:b5:ca:4c:f1:b7:c5:9c:23:8b:a4:d3:5b:1a:6a:
3d:62:bd:cd:d2:5f:d8:bc:d3:60:29:1e:6f:63:b6:
24:e4:6c:da:fa:80:ab:d2:74:ad:3f:c8:a3:20:dd:
40:86:7f:5a:9a:ea:cd:07:af:fd:6f:d1:43:67:ae:
9c:f3:ee:93:5d:93:63:d9:42:43:ea:eb:de:e0:f8:
55:6c:28:01:ed:00:41:cb:0c:c0:b4:cc:21:fe:99:
d8:be:40:8f:06:76:d1:3f:8a:ed:4f:09:d4:84:56:
0b:8c:a0:8d:21:c6:94:0c:7e:56:1b:83:a5:5b:28:
ca:f9:38:6c:0b:a7:8d:9f:b9:d6:7a:5a:2b:aa:b5:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:73:A0:2A:20:15:1C:B0:58:78:A3:FF:15:19:C4:2E:B6:63:70:B7
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:db:ad:64:f4:9e:a1:1c:35:86:8c:83:b0:91:3a:37:3e:
df:a3:d8:21:9d:b0:cd:59:7d:33:a5:a6:b7:50:47:05:bb:6c:
bf:a4:69:ae:14:66:99:3c:63:9d:46:8e:c4:45:1c:a9:8c:2f:
1f:c0:a9:fb:96:5a:3c:0e:34:c5:e5:44:20:a2:d3:b6:82:fe:
5c:43:f0:5b:a9:ad:ab:cf:29:28:0a:a9:65:89:e0:a5:25:ef:
9d:85:db:7f:af:00:91:23:5d:81:b9:d8:a2:9c:5a:e1:19:d1:
df:9e:2d:64:b2:08:8e:bb:cb:e1:ab:1c:c7:db:4c:74:69:a2:
41:77:45:eb:9b:19:29:a7:76:c4:31:92:78:ba:52:91:10:c8:
ca:f5:4c:f6:c8:5c:0e:df:8e:a6:ad:86:c0:d1:2f:a8:8f:9e:
d1:19:e8:7a:18:71:11:eb:6e:37:f3:fd:ff:c5:7c:41:4d:85:
00:31:99:f6:62:b7:d0:99:2b:42:90:e2:3b:dc:95:78:9e:ac:
c8:8c:3e:9a:1e:32:fc:09:52:08:f6:b6:aa:12:71:ac:81:4c:
e5:33:d7:45:de:bc:94:d2:6b:99:cd:03:71:c8:ef:a7:83:45:
b7:fc:dc:76:bd:5d:f9:74:4b:f8:f7:99:d1:fd:bb:35:ca:1f:
c9:c4:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:59 2024 by rpki-client on console-ams.rpki-client.org