Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: HVIdYkcIXXjB+BylG2t6iySdJQ1uzLl71Dk06N3FOC4=
Subject key identifier: 1D:4D:7C:45:19:98:6B:EF:74:17:01:E6:FF:17:A7:0E:A0:AC:60:5B
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01920B03F773CF126B110586426B314E08C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 12CA
Signing time: Thu 19 Sep 2024 16:01:02 +0000
Manifest this update: Thu 19 Sep 2024 16:01:02 +0000
Manifest next update: Fri 20 Sep 2024 16:01:02 +0000
Files and hashes: 1: H2u9v_Wlm4baQe7oBsap1t4B_Ds.roa (hash: t5hsIT/w7nqGec3K7bge1ielZyr3+fK2x6nkJZiYoL4=)
2: YOmuU1mNiJt93-i_otSLQSPWq9A.roa (hash: dNZN4VrB8b5CkKfB+HeCKpTO/O3GiDZqIRQePdbOP/w=)
3: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: cJGPXLgGH3zqeJe/t8T1dzNRdml1gSJMtjvX0WdwlFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:03:f7:73:cf:12:6b:11:05:86:42:6b:31:4e:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Sep 19 16:01:02 2024 GMT
Not After : Sep 20 16:01:02 2024 GMT
Subject: CN=1d4d7c4519986bef741701e6ff17a70ea0ac605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:b8:a0:59:d6:60:5e:fc:03:2f:3a:84:fb:
21:a8:28:27:65:2e:cd:a8:b6:e2:ab:dc:0c:df:c7:
13:b0:ad:b0:53:03:79:32:6c:eb:fd:f7:2a:66:a3:
29:cd:ed:57:3b:c2:8e:89:7e:a4:d3:46:a1:39:a1:
ac:73:69:13:59:5f:e4:00:72:fb:3e:42:62:52:f9:
44:e5:96:49:bb:03:f9:99:49:e1:4c:88:c6:33:30:
9b:0a:a2:77:7b:5a:09:ba:75:5a:2a:5a:11:7b:06:
07:ef:05:89:5d:72:02:5f:8b:0b:a1:24:c9:70:84:
b0:50:20:81:f5:f8:b3:1c:77:b9:9d:ba:18:c4:79:
75:9c:67:14:f5:6b:db:6d:1e:64:22:93:ef:65:7c:
c1:8e:36:2c:dd:5b:2d:74:06:67:aa:28:99:28:8f:
cb:d8:9c:13:b8:3a:ce:2d:fe:b7:43:68:4d:d9:6e:
35:b3:14:e5:8a:bc:50:82:ac:42:19:85:f3:1b:14:
19:d7:02:da:91:66:1c:e0:e2:8c:ea:24:ec:74:7f:
5e:0e:7d:a4:43:84:b8:e9:5a:51:42:01:55:d1:ed:
b8:19:6b:1b:cb:f4:21:d9:a5:86:43:6f:62:39:25:
b5:4e:51:00:e3:26:3b:a9:62:e7:80:e1:67:d7:32:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:7C:45:19:98:6B:EF:74:17:01:E6:FF:17:A7:0E:A0:AC:60:5B
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:85:ed:3b:8c:6c:bf:7b:29:13:25:87:24:a0:d5:11:ba:
cd:ac:d0:a8:23:ed:4b:89:09:7c:2e:f5:04:2e:fd:3c:0d:98:
05:00:5f:d1:9f:f5:93:cf:fe:67:a6:b2:e3:b3:b5:ea:a8:e5:
d4:6f:5a:a3:2a:eb:56:f4:60:3e:3c:a9:f8:66:29:77:be:5d:
08:41:b6:ec:48:50:36:22:0a:ac:10:48:76:56:04:00:07:3c:
26:24:d5:0c:a6:18:7d:46:41:f7:f5:18:40:bd:02:2d:7a:ee:
9b:bd:05:93:b9:d3:bd:6f:ca:6a:20:35:62:7a:48:7b:c4:25:
f4:63:37:46:ed:f6:ea:53:86:c3:f4:d9:b6:e1:89:f1:d0:0e:
e4:be:8f:eb:37:31:89:58:64:2b:af:ad:8a:aa:bf:47:54:1b:
d0:d3:06:60:2f:73:13:f8:a7:66:7f:23:37:73:3e:23:fd:8b:
fc:cb:f7:72:ca:5f:94:b3:eb:a7:01:3d:eb:01:c4:d2:f6:22:
36:19:00:40:8c:9a:0a:1b:bf:d4:f0:ba:57:94:66:f1:67:03:
ac:b0:ad:da:b9:61:70:46:88:3b:c6:1b:c6:85:b6:8a:a8:40:
28:76:23:bb:96:99:48:dc:2f:c9:c8:84:52:2b:18:29:05:4e:
7a:33:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:55:01 2024 by rpki-client on console-fra.rpki-client.org