Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: 9g3s96PP9jA8mu577gW1KA2owqJRV+oQgxTs3+O2sGw=
Subject key identifier: 03:78:91:F9:11:DB:47:92:6E:25:18:ED:98:68:40:F5:B5:F9:C2:EB
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0193549ABC69FA9EF72393C82761E6DBBFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:00:47 +0000
Manifest this update: Fri 22 Nov 2024 16:00:47 +0000
Manifest next update: Sat 23 Nov 2024 16:00:47 +0000
Files and hashes: 1: 1-fVxYVA90ENf6TO5BN-RM0zVQDI.roa (hash: g7vc0EjqbHOCFrg4mOslwVR90hPyS10ox5oPFIZsjeM=)
2: uLjydiLVYatJ81jKuB9teUAji-k.roa (hash: +uFO40aC8Sf1aTnEHZ3Tiisy/s+TZS9NPN1xWXxdYLw=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: GdCs7YKdOw3xZJWulzQvRVLiZVJkO/SKj6Dwxw+OSbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:bc:69:fa:9e:f7:23:93:c8:27:61:e6:db:bf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Nov 22 16:00:47 2024 GMT
Not After : Nov 23 16:00:47 2024 GMT
Subject: CN=037891f911db47926e2518ed986840f5b5f9c2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:86:2b:9a:b3:cb:87:0c:3d:1c:d9:40:51:
74:b6:1a:ad:33:c2:77:67:3b:52:78:eb:73:53:2d:
0b:80:8b:92:2b:7d:c6:bc:4b:37:84:9f:16:ee:d0:
8c:af:3d:8f:43:48:6a:4c:0e:d8:b4:7b:84:d8:8f:
f6:83:1c:4d:ac:a0:1c:51:33:c5:c2:0f:dd:74:f4:
41:36:ae:7b:a1:a1:1a:04:a7:81:05:c6:b1:89:71:
bf:95:52:4b:16:76:8e:9e:4e:ba:e3:8f:d7:76:28:
0e:ed:b6:14:86:2b:8b:19:f7:c8:3d:59:7f:1c:c8:
12:b8:85:ec:8b:85:44:5a:c3:ed:a0:e3:9c:50:61:
1a:8d:37:7c:03:02:b9:6f:48:93:d8:6d:cd:bb:57:
c2:45:20:f5:1f:0d:c4:c8:17:d5:4b:ba:c9:6c:d6:
e1:dc:b5:0e:c8:5f:43:36:dc:34:7b:4c:a2:a0:8f:
40:94:26:91:99:3b:17:fb:d5:c1:43:30:68:90:56:
d0:3d:1a:d3:8e:d3:51:15:ed:68:7f:f1:0b:4c:9c:
e5:cb:1c:98:dd:80:a3:5b:23:b5:00:d4:d8:d6:88:
63:a2:5f:83:ad:3f:1b:34:e6:9f:18:a6:33:26:98:
16:dc:ff:d9:cf:6b:1a:0e:fc:f1:7f:7d:f1:c2:1a:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:91:F9:11:DB:47:92:6E:25:18:ED:98:68:40:F5:B5:F9:C2:EB
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:df:3b:1d:85:41:49:cf:cc:72:f7:4f:0a:c7:0a:b4:19:
1a:eb:0e:da:3d:5c:9b:20:13:c9:53:86:61:b5:04:ef:41:01:
6d:83:f6:f4:b9:5c:d0:1e:3d:9e:ca:81:49:11:9d:2b:47:ad:
7f:86:29:bc:be:28:ad:0f:83:80:8f:c0:da:9b:36:78:6a:42:
b1:c3:0d:3e:bc:b9:f7:e7:fe:c4:a2:6b:7c:c0:3d:46:bd:f2:
cb:a1:fe:12:89:90:6e:47:01:7e:d7:c2:8d:cd:20:c3:27:68:
23:4e:e6:31:0a:54:ab:a8:d2:76:d7:66:a0:c1:ac:e5:56:d1:
df:2d:24:e6:94:33:9b:f3:db:92:36:af:f7:fd:26:0a:4c:5d:
f7:e1:21:cd:90:34:65:59:94:11:37:76:c4:8e:0d:ab:1c:6a:
77:f4:f3:56:86:03:0d:23:98:0a:47:20:66:ca:11:21:7e:92:
1d:6b:7f:1a:43:3c:da:47:1a:13:cb:1c:0a:b6:42:78:67:48:
43:e9:bc:6a:b2:fa:25:03:c8:19:76:d5:b2:8e:54:9d:e1:99:
07:3b:8d:fd:94:c9:b9:c8:72:2e:0a:5e:80:78:88:b8:69:bf:
75:48:ec:50:df:c2:f3:36:6e:f1:b4:12:68:b4:20:9b:85:9d:
e7:00:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:10:35 2024 by rpki-client on console-ams.rpki-client.org