Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: p59s+P6XvZA/23YYth6PH2jAcYSHOs46+L7JZHhk09g=
Subject key identifier: 7F:0C:2D:B8:20:B3:A9:FF:19:D2:08:DA:7D:D3:D4:0B:2A:B4:AE:CB
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 01935689BFDE3C2E9AC7A3FC21AD24D42427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1380
Signing time: Sat 23 Nov 2024 01:01:28 +0000
Manifest this update: Sat 23 Nov 2024 01:01:28 +0000
Manifest next update: Sun 24 Nov 2024 01:01:28 +0000
Files and hashes: 1: Rc0cAVwIlr9asH_7w3r0Ai-j8-k.roa (hash: uv8RlbLfXyp/CH4IbslSzBuVLY3R4YrNag3krfKxT30=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: IgPJzhCmsy0OxMYJkXaLobPfhigHPiy8StV+dJpU5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:bf:de:3c:2e:9a:c7:a3:fc:21:ad:24:d4:24:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 23 01:01:28 2024 GMT
Not After : Nov 24 01:01:28 2024 GMT
Subject: CN=7f0c2db820b3a9ff19d208da7dd3d40b2ab4aecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:28:72:e2:76:0d:cd:3d:3d:ca:38:9f:05:
30:4c:1c:a8:32:79:42:df:1c:d4:0a:45:4b:22:30:
98:7a:41:47:f7:ed:df:c3:9e:33:e6:c1:21:20:ce:
fd:07:34:95:14:ab:cc:46:29:3d:40:f2:7f:60:95:
6d:14:cd:84:88:d5:04:7d:7b:5b:ee:69:56:27:62:
1f:99:7e:fd:e4:67:8e:e3:cc:c9:89:91:1c:1c:08:
f8:56:e0:68:91:35:7c:1d:4e:67:01:c3:f9:6c:41:
a6:b8:7c:bc:b8:48:2b:5c:22:fc:29:67:bd:48:f7:
d3:f0:8a:df:0f:0e:d1:ca:da:39:0c:e6:db:d8:3d:
86:ea:68:12:40:c8:d3:95:f1:09:24:a7:b1:75:b5:
71:3a:1d:1f:62:54:3a:93:fa:ac:ab:72:2f:ef:57:
c7:7d:ed:06:c7:27:59:a4:3d:e6:7e:d1:30:8b:96:
02:1e:b0:47:68:46:cb:06:6f:f7:ed:d9:67:5e:83:
c8:30:53:fd:87:c9:2b:d7:4a:10:ad:af:b3:83:3e:
ae:6c:f1:cc:19:e5:f4:b1:47:c7:b8:32:1c:a3:76:
a9:b8:11:f5:9e:20:72:c0:65:f9:a5:70:01:0e:13:
bf:3f:5b:62:d1:b7:78:d5:55:b7:76:e5:c8:dc:5d:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0C:2D:B8:20:B3:A9:FF:19:D2:08:DA:7D:D3:D4:0B:2A:B4:AE:CB
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2f:ed:0b:03:92:e1:40:45:a4:1a:97:a6:32:f7:e0:a2:fb:
9d:73:e7:41:2a:c7:6e:36:c4:71:17:6a:00:8e:3c:4e:03:c9:
c9:36:7e:e1:c5:79:dd:c9:c9:73:fb:e1:14:81:5a:95:d4:cd:
50:86:02:a9:a1:9c:fb:c1:25:40:a7:66:6b:19:27:54:24:41:
40:e1:6b:0a:a7:0a:4b:9e:95:a5:49:ec:6b:75:f2:ce:dd:61:
a7:12:30:66:43:eb:55:48:13:55:34:5d:76:d2:02:7e:71:48:
5d:82:87:84:b2:85:78:e4:34:e2:f5:ef:92:00:c8:05:32:fd:
1d:fe:f7:aa:04:f2:bb:78:a1:1a:d8:7a:de:a2:65:12:76:f1:
6a:c6:1b:76:4f:0a:8c:98:83:ae:23:91:d3:83:2f:4d:0f:8e:
4e:92:06:19:f6:92:e2:04:8f:57:8c:f6:fc:09:57:2a:dd:4a:
52:75:e6:9a:41:c9:f7:05:5d:94:06:65:6b:ac:96:28:b9:1e:
04:42:52:d5:ff:43:d2:9d:c8:8f:7f:13:cb:61:90:36:0d:e1:
e1:13:5c:d7:42:17:13:9f:14:01:5f:2e:e6:63:85:bf:fa:63:
b0:8c:9b:b7:1c:9e:19:13:2f:23:99:47:44:8c:a0:b3:13:d2:
a8:8f:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:17 2024 by rpki-client on console-fra.rpki-client.org