Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 2A8GDuokGz3PZK9J/ojbkqY1GfYIymPXmaJDUkqDg3Y=
Subject key identifier: B4:7F:B3:EB:C0:3D:CD:BC:02:86:B4:10:13:F1:D6:BF:58:A5:BF:B3
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019353509678A95DB382F73A60444DA5CCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 0D7F
Signing time: Fri 22 Nov 2024 10:00:10 +0000
Manifest this update: Fri 22 Nov 2024 10:00:10 +0000
Manifest next update: Sat 23 Nov 2024 10:00:10 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 2cYP48BJSVx4jezed7KVCBQElxppq0F3hPCS4FZ/nnw=)
2: pk2ixnzKwSm4ig0JZYkAP7QMkjw.roa (hash: UCqJ11xExSMfi1MeWb9dR6txpzYhnwD0VI8PCSKcu20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:96:78:a9:5d:b3:82:f7:3a:60:44:4d:a5:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Nov 22 10:00:10 2024 GMT
Not After : Nov 23 10:00:10 2024 GMT
Subject: CN=b47fb3ebc03dcdbc0286b41013f1d6bf58a5bfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:e8:24:16:19:96:e8:e9:d0:33:ca:ff:15:
98:31:da:18:b8:e8:70:75:30:9f:3c:3d:df:d8:0c:
9c:f3:a5:e2:b4:9c:f1:13:e9:49:d8:b9:6b:ba:fe:
fd:8d:49:dd:5e:3e:ba:76:16:6f:05:9a:31:90:8a:
b8:65:15:73:f5:be:c9:a7:e6:0f:eb:d3:37:47:d1:
d6:8f:22:9a:65:15:93:46:99:f2:47:80:ef:e9:ce:
b0:38:48:4f:35:7c:ba:63:a3:b6:9d:e8:92:ce:8e:
63:ee:95:ce:01:18:24:23:5c:d4:95:98:fd:3d:ae:
7a:22:2c:df:c5:8f:aa:3d:3b:62:55:8b:b6:cb:b1:
d7:dd:b6:25:8e:38:b8:90:dc:f5:d2:fd:17:a0:59:
55:d0:8d:65:6b:41:7a:90:fa:92:30:e1:5a:02:ce:
e4:d0:2e:62:8b:c6:83:83:c2:3e:03:97:bc:b7:34:
2e:5a:23:c3:aa:e4:11:44:08:40:ce:e3:c7:50:b0:
b3:32:95:9f:d2:e5:98:95:5d:77:0e:4b:75:9c:c1:
c7:bd:98:63:31:a4:f4:0a:b2:00:49:99:5b:e3:2e:
02:90:6f:ac:cc:20:1f:15:d4:be:aa:b3:b1:d3:67:
79:45:b5:46:02:8a:17:da:17:b2:20:5a:be:3f:b6:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:B3:EB:C0:3D:CD:BC:02:86:B4:10:13:F1:D6:BF:58:A5:BF:B3
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:12:97:bd:ee:8b:5d:81:64:d3:f5:a6:04:55:ac:13:f5:
bd:53:c9:4b:8f:fa:ce:fb:fe:cc:26:03:24:ed:ea:22:f0:a4:
3e:97:79:e3:92:59:7a:64:dd:01:c9:f1:31:75:ea:32:72:50:
bf:10:42:b6:91:de:68:02:2f:fe:dc:66:84:64:39:df:c5:91:
17:19:b1:ea:86:b1:fe:d8:4d:c6:69:c7:d0:07:76:fd:94:24:
5c:9d:e1:0c:da:0e:5f:f7:0d:94:45:30:dd:87:e5:74:10:bf:
fc:c2:1c:2f:3c:e4:bd:5b:a3:6d:2b:4a:fb:56:c2:77:4a:60:
84:4e:76:e9:0c:71:c1:40:4f:de:60:9a:3f:3f:f2:41:be:c3:
fd:c7:44:5d:12:f2:93:5d:22:15:b7:d6:2f:3b:af:f9:c0:34:
32:d2:50:1e:f6:a2:b3:32:1f:d5:49:2b:85:d9:fc:b7:d9:38:
bb:7d:a6:d2:61:1c:2a:be:cb:67:93:76:04:bb:1c:74:83:34:
57:5f:8f:ec:03:20:ee:37:9c:01:8f:0a:1e:ec:e7:b8:77:40:
27:e3:c0:44:1f:27:e6:db:88:2b:9a:be:d8:7d:a5:55:53:72:
c9:02:d9:aa:67:4a:4f:1a:09:b1:25:5d:89:5c:92:2b:4f:22:
73:dc:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:09 2024 by rpki-client on console-ams.rpki-client.org