Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: iYvDTVQjGRqDs5auY8cgov3YtEuxB4Lvt5v6sRjvswM=
Subject key identifier: F6:E4:7B:A7:B5:AB:BE:23:47:33:1D:18:ED:D9:30:55:91:B0:E0:00
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0193617AECA07E2DBC89F473755DAD2641C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1378
Signing time: Mon 25 Nov 2024 04:01:05 +0000
Manifest this update: Mon 25 Nov 2024 04:01:05 +0000
Manifest next update: Tue 26 Nov 2024 04:01:05 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: l6I+ESu0RYHSConp5R+H3g/SyY1lfHFsZCF6Z3UUvZ0=)
2: xj_-cVoqmYhbo9Psja1AvOTnr7s.roa (hash: psNmnPbV14dv7v9rlF39sIi1Np0xNmyeVJtB3eZmtW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:7a:ec:a0:7e:2d:bc:89:f4:73:75:5d:ad:26:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Nov 25 04:01:05 2024 GMT
Not After : Nov 26 04:01:05 2024 GMT
Subject: CN=f6e47ba7b5abbe2347331d18edd9305591b0e000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:50:22:8f:6c:89:8d:9d:cb:12:f7:6d:ee:
b8:c9:a8:6e:91:07:ba:35:86:9c:6a:b7:df:0b:58:
9e:c5:67:3c:16:25:f9:79:68:aa:6f:40:f6:61:72:
79:23:5a:f7:27:de:e0:13:0d:c3:84:29:51:ae:be:
9d:27:fe:e7:73:c2:3e:16:0f:44:29:ad:f2:9b:07:
f6:49:fb:ad:27:8e:2d:62:39:76:92:bf:ae:96:b3:
c0:cd:4d:53:c9:f4:3c:5a:e7:40:04:1e:0d:7a:ec:
c4:3c:d6:85:4f:5b:2f:ac:2c:58:9f:b5:b4:91:99:
e9:07:ba:bc:f7:73:5f:a5:8e:4e:af:89:a2:12:75:
7e:9a:82:6d:59:9a:5c:45:bb:15:6a:ce:b4:75:7e:
6d:ba:0e:d2:7f:ad:b7:8a:ef:cf:df:7e:bf:99:ac:
7f:d3:1a:da:8f:4c:ca:f8:ff:ce:5a:1d:e2:cc:86:
be:98:88:8e:9a:1f:ea:64:42:20:c6:f8:86:d4:0d:
b5:00:ac:e2:63:b0:eb:67:bb:f0:2c:fd:24:57:3f:
42:39:81:97:e1:47:71:69:00:20:ee:b3:af:37:96:
4a:fa:1d:90:a6:45:cb:a1:bb:87:dc:28:ed:24:f6:
55:4a:51:fb:ef:91:45:dc:77:a6:bc:01:14:56:c7:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:7B:A7:B5:AB:BE:23:47:33:1D:18:ED:D9:30:55:91:B0:E0:00
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:26:79:8d:b0:b6:d0:26:34:d3:c0:de:1c:c9:95:43:e2:89:
0d:a8:26:e5:fe:69:53:ef:75:c1:6a:75:f8:f8:73:ba:55:9e:
d5:23:f9:79:fc:01:47:a6:b1:43:8d:df:ec:0f:0f:df:98:7d:
63:71:dc:c0:34:dc:e1:7f:67:10:cd:47:2c:00:3f:8d:2b:c7:
12:da:02:33:0a:47:8c:df:5e:d4:07:68:c5:75:bb:c5:33:d4:
6d:a5:7b:f1:f0:94:35:19:19:d3:26:d4:66:ac:2f:d2:08:50:
4f:5d:2b:b6:d8:ae:a8:6b:cd:57:ef:0e:e8:27:5d:9c:fb:96:
94:bf:b1:36:64:87:df:4d:2d:0a:39:d2:2f:d5:72:7e:81:a8:
ff:c8:c7:9f:36:91:0a:4b:e9:f4:41:c4:60:0a:04:2d:16:25:
b8:71:c3:05:c8:13:2f:97:4d:df:a6:62:03:3f:74:0d:86:b7:
e9:fb:11:2c:83:63:51:db:3e:e7:7b:fc:48:15:57:f2:a8:33:
cf:1a:99:09:fb:c3:09:15:f9:8e:29:b3:a6:80:d6:e1:ee:4e:
59:7e:a1:70:62:f3:09:19:e2:8d:8a:e1:19:a1:57:c3:bb:b5:
73:2b:2d:2b:c3:c2:c5:70:c7:cf:9d:ac:31:8b:dc:3b:54:2c:
eb:e2:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:55:00 2024 by rpki-client on console-fra.rpki-client.org