Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: YTKiupEF+t++ma/s7FCHsHCDbUI07cxNHsTm9b1tfAA=
Subject key identifier: ED:81:FC:34:43:73:E0:F0:54:B2:1F:10:A8:39:41:79:97:3D:CB:82
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0193579BA51677D05FB461087E9FC02E8E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0C42
Signing time: Sat 23 Nov 2024 06:00:38 +0000
Manifest this update: Sat 23 Nov 2024 06:00:38 +0000
Manifest next update: Sun 24 Nov 2024 06:00:38 +0000
Files and hashes: 1: awMwn_R_u7oj7JMB8wMpKQctV7M.roa (hash: mriSUVGFewV9MB2M/3QTDo4RuSvfvQyRrfGbCavpYvk=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: 6IBOlLv7XLMg0BWyxXsAh3zSjcxzJjf5CdVFSpGidOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:a5:16:77:d0:5f:b4:61:08:7e:9f:c0:2e:8e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Nov 23 06:00:38 2024 GMT
Not After : Nov 24 06:00:38 2024 GMT
Subject: CN=ed81fc344373e0f054b21f10a8394179973dcb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:fd:55:b5:7d:05:a3:5f:2b:e2:f6:8b:ce:
07:af:b0:c6:3f:a3:0d:e5:98:c5:b3:1d:7a:1a:81:
80:b5:94:c3:81:bc:89:1c:78:fa:21:cc:7c:fe:62:
f8:d2:c3:f4:45:5e:9a:13:07:c4:26:11:93:02:9f:
07:bb:3e:9b:48:3e:d3:9c:23:4b:19:bf:c9:15:9a:
0c:ff:fa:38:95:21:98:ca:89:64:b5:18:a8:2f:60:
0c:31:7a:88:70:6a:fb:17:42:ca:1b:b3:6f:79:04:
0e:34:27:9c:28:f4:8d:d9:b0:4f:a2:af:65:82:5a:
9b:ab:af:4b:8f:f3:76:a4:c5:2a:88:bc:55:8f:dc:
27:70:8b:76:23:88:9d:60:8e:8f:64:13:ff:6e:41:
30:72:96:a4:6a:18:cd:fb:dc:bf:7a:eb:cb:0e:eb:
31:75:96:fe:61:04:c0:2a:6e:de:9f:e6:93:9d:0e:
25:fa:d0:8f:0c:1a:91:a9:c8:5f:aa:36:f7:22:2b:
25:4b:6e:c0:58:9f:70:b1:71:f2:99:70:b9:3d:8f:
d2:f0:f9:17:5e:45:7b:1e:8a:dd:75:8c:06:25:65:
8e:88:82:57:c4:d2:87:91:e8:a1:d4:bb:33:53:3a:
11:f4:c6:34:f5:66:53:9c:a0:fe:03:f4:dd:3e:c4:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:FC:34:43:73:E0:F0:54:B2:1F:10:A8:39:41:79:97:3D:CB:82
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c7:eb:14:44:b8:d4:dd:42:8b:ba:e4:bc:9b:36:e1:d0:7a:
45:f1:7d:54:e4:ff:ea:e5:3a:a0:d1:e6:26:9f:44:b5:8c:a3:
98:1c:90:ec:4f:d0:05:72:e7:ba:fb:ea:8b:c5:1f:86:4e:58:
15:a6:0c:13:4e:40:48:9c:cc:36:ce:17:b6:38:e4:e6:c0:87:
93:61:a3:37:7b:e0:e7:5b:a0:54:ac:09:79:5a:b5:2d:01:3a:
03:ab:77:2e:bc:aa:76:f7:28:0f:45:cf:11:60:74:79:3f:f3:
02:4e:a7:16:ee:ce:15:31:04:8e:89:f6:8e:82:2b:ac:c0:99:
64:74:14:a1:a8:75:27:10:bc:80:79:bb:70:d9:fc:63:bf:9d:
97:a1:7a:4a:07:3c:7a:e8:9e:bd:0c:d6:61:c7:68:d0:88:d8:
72:a2:c5:7c:49:1a:c0:67:69:84:6d:13:43:6b:8a:40:29:6c:
58:94:3d:34:d4:74:c1:44:34:9d:fd:77:9e:f5:56:eb:f2:99:
63:82:61:79:01:ed:39:3c:42:13:47:bf:8e:a5:02:56:7f:39:
32:2c:2f:c7:4f:63:97:d9:dc:d3:e2:2a:f2:20:9f:0b:8b:bc:
87:a1:b5:a3:60:c5:c6:23:0c:c9:49:be:c9:8e:a1:34:ff:0b:
1c:b2:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:36 2024 by rpki-client on console-ams.rpki-client.org