Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: DdOfrjIWgr/kyPam+x4RRn8K69+Nts7gaseEovCvEV4=
Subject key identifier: 0D:FA:0F:ED:DC:EE:66:4D:D5:78:E7:60:2D:DB:56:3E:69:58:A9:1F
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 0193549B7A8BA52621877E1691F5482775F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 07B9
Signing time: Fri 22 Nov 2024 16:01:35 +0000
Manifest this update: Fri 22 Nov 2024 16:01:35 +0000
Manifest next update: Sat 23 Nov 2024 16:01:35 +0000
Files and hashes: 1: 4Hor4kxSENCP8-_Vo9k5yU1uU1s.roa (hash: IwkubWuBTYakpLwOJDAE02Ri3SqlzyWG512qAnEfALY=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: 1e6PyQ9w0HVFGcplNwrXQMchetN4Zj7DZ/2XtGECMM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:7a:8b:a5:26:21:87:7e:16:91:f5:48:27:75:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Nov 22 16:01:35 2024 GMT
Not After : Nov 23 16:01:35 2024 GMT
Subject: CN=0dfa0feddcee664dd578e7602ddb563e6958a91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:b8:51:bb:62:c7:ab:6e:ed:f0:3e:9c:bc:
7a:3d:97:b8:da:31:c9:3c:10:65:85:d5:25:e9:36:
03:4c:6b:31:0f:d1:df:ee:39:c7:86:eb:aa:80:85:
e6:f1:d8:e9:15:3c:59:86:11:ff:7a:1f:3a:53:13:
16:19:17:1f:ba:c0:77:49:1d:93:4b:4a:a8:dd:30:
49:0e:97:c1:c6:7d:d7:ed:0a:24:76:54:e9:f6:bf:
f2:3b:0e:13:21:f3:bb:72:df:70:8a:dd:29:16:23:
ae:6f:3f:60:03:06:4f:12:bc:9e:62:b6:40:ba:07:
ed:25:af:3a:c9:8d:4c:6d:1d:d0:96:57:c3:bc:ff:
78:b8:93:ea:27:ee:b2:6b:9c:8c:d8:02:ce:64:a7:
5a:3a:42:2d:a9:fa:fa:b1:bb:cb:b4:ac:87:3a:eb:
a1:95:92:c6:ed:0f:d6:f2:7f:84:46:64:25:35:6e:
21:9d:5b:43:f7:7e:31:ad:74:90:31:2b:97:5d:f2:
d4:0d:69:87:9a:6c:53:f7:df:6c:e7:72:2f:c8:98:
8c:56:4e:9c:2d:47:8a:54:f5:af:06:e9:70:3a:11:
31:da:46:cd:f0:95:d0:d2:f4:8d:8e:a2:93:dc:6d:
db:05:c8:fb:51:6f:1f:fa:6a:32:9c:fe:cd:13:df:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:0F:ED:DC:EE:66:4D:D5:78:E7:60:2D:DB:56:3E:69:58:A9:1F
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:37:b8:0e:56:a9:e0:03:63:15:ab:e1:9a:fb:33:1f:eb:ad:
25:71:36:9f:8c:58:c6:b7:94:50:7e:4f:e7:30:e7:0f:49:4b:
fa:53:12:27:1c:69:d8:70:4a:e8:31:9e:83:5b:51:dd:c2:b3:
74:61:3a:48:14:bd:cd:b4:88:3c:85:cd:46:54:8c:26:86:a4:
7e:9c:58:40:c5:e0:71:ae:37:b6:c1:11:e8:f9:3c:07:55:e6:
1f:de:ea:b3:5c:4b:1e:98:dd:e8:f8:75:43:42:c8:1b:a3:7f:
93:66:49:06:9f:1c:e2:ae:f9:77:eb:d3:2d:63:f3:e0:c1:60:
49:61:51:a8:36:ae:16:40:f7:e5:47:92:33:b3:40:53:2f:3e:
17:1f:b6:73:6c:0e:ca:76:0c:39:d2:b7:1f:05:ea:19:e4:d4:
65:53:5b:bc:ab:51:e8:01:49:af:1d:5d:e9:8c:55:82:ba:94:
32:83:91:fb:45:17:de:ab:82:65:36:4b:c7:ac:1b:56:ac:6d:
66:17:e5:9e:0f:a3:76:bf:ce:0d:d9:e0:bf:7e:58:82:04:bf:
fb:fd:0d:65:00:c7:ad:ae:e9:62:4c:52:c8:49:29:97:da:af:
07:7d:b4:1e:c3:ca:e1:ff:91:55:b5:bb:9a:5f:c7:31:66:38:
e6:95:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:17 2024 by rpki-client on console-fra.rpki-client.org