Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: ZxGJ+bVnbUwkPiAwgxw1qpBam2abL7mAIDiqZWRCng4=
Subject key identifier: 3E:FD:58:6D:48:78:E4:76:29:DE:9F:88:24:9A:BD:93:3F:84:EC:C9
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019356890490F3876C73E5782DA7B55A6E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1380
Signing time: Sat 23 Nov 2024 01:00:40 +0000
Manifest this update: Sat 23 Nov 2024 01:00:40 +0000
Manifest next update: Sun 24 Nov 2024 01:00:40 +0000
Files and hashes: 1: 4ORe2X1iPPR8WW4U270aGg6m-9w.roa (hash: HnmO2+M/L6Bls//+lJ/dqu3Ge7stVfLuPpcOxh6vo7k=)
2: J5mBSix-udXnFbcxqhhMfR-u9mE.roa (hash: 5iTchAkjqwYFP/Kqx6Swg1w18G9Jysa1ksWuUa6LY68=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: wRZYGNsQUF7NGb290dkUcJIQ7P5T1LMkhxyrYIrDIV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:04:90:f3:87:6c:73:e5:78:2d:a7:b5:5a:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Nov 23 01:00:40 2024 GMT
Not After : Nov 24 01:00:40 2024 GMT
Subject: CN=3efd586d4878e47629de9f88249abd933f84ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:79:86:0e:e0:46:51:f1:87:7a:a7:cc:a8:
19:fd:33:46:fd:d8:26:03:2c:38:31:e2:67:e3:f0:
e1:d3:97:20:34:63:aa:b0:33:c3:87:23:00:81:b6:
ae:56:98:bd:5d:0f:6b:5f:fe:75:09:bc:e2:01:e0:
62:f6:a0:37:3b:5c:fd:f6:eb:91:12:90:30:4a:96:
09:4b:11:40:53:97:7b:e5:7e:2f:04:49:e7:1b:37:
bf:88:7a:20:8f:87:3b:b6:d8:2b:16:5f:2c:5d:4a:
0d:94:61:9b:cd:16:6d:e6:c1:a2:7b:0c:81:03:ef:
40:91:c4:52:23:2f:62:df:5a:65:ae:27:32:80:9c:
9e:20:9a:2a:e4:86:0d:61:f2:32:e0:39:d0:9c:e3:
77:4c:a7:b3:23:96:ca:c6:0b:4b:0c:2e:12:f6:30:
41:ee:c0:01:67:6d:9c:47:d4:27:71:44:51:db:23:
87:d5:4f:77:82:4e:dc:5d:7d:1e:61:ee:1f:b6:28:
84:59:52:86:d9:bf:e7:f8:0b:90:f7:ba:8c:e3:30:
28:29:0d:ed:da:b5:db:06:9e:5e:64:92:bb:5e:09:
31:c2:23:80:63:88:8b:f8:b5:9e:95:6e:52:9d:5e:
08:97:2a:eb:92:0c:dc:31:45:25:32:75:e8:ec:75:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:58:6D:48:78:E4:76:29:DE:9F:88:24:9A:BD:93:3F:84:EC:C9
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:96:87:5c:be:17:a0:24:25:eb:5c:91:2a:24:e4:99:07:
6c:3d:a4:77:67:d0:7c:33:bd:45:28:38:b8:ea:a6:0e:34:2f:
13:b0:42:68:f8:57:77:ad:db:3a:af:58:c7:25:ba:a6:7a:a4:
b5:4a:11:71:12:22:70:1a:81:ce:4a:6c:4a:ea:21:38:6a:df:
f0:8b:2f:b3:63:13:6e:fc:59:f9:22:f3:8d:f0:7b:96:3f:cb:
de:91:4d:a2:e4:a1:3e:a8:3e:f3:9c:c9:ef:74:b7:0f:11:d2:
49:29:da:67:21:cf:b9:8f:29:10:95:03:65:82:c5:93:52:fa:
f0:5b:90:5f:33:60:8a:15:6f:66:4b:27:e1:30:5a:19:d7:7d:
a9:f5:92:3a:29:f3:39:6f:fb:62:c5:ee:6e:57:cc:d3:72:67:
a5:6b:c3:fc:f3:ca:9f:a2:4d:1e:2a:ce:ac:b0:a3:04:c1:04:
63:5f:7f:ae:25:12:ed:27:14:d7:1d:77:2f:4e:fa:4c:c4:fe:
0b:8c:7c:94:11:8b:99:e3:e1:0b:16:a9:c5:79:55:ab:f7:b1:
35:ad:b1:c7:6b:6e:d5:13:56:7f:c4:cc:00:9c:81:7b:ca:e5:
6b:b6:8b:11:66:f6:61:c5:4d:5d:f3:83:09:86:28:d5:ec:6d:
53:e1:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:58 2024 by rpki-client on console-fra.rpki-client.org