Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
File: Okj-BwTkrJXjpw6VvrhEJcMWua0.mft (raw, json)
Hash identifier: 764xB0I+/M4Mh2lXJsypDuTpNEW5yN87ZaN/f2aBcaQ=
Subject key identifier: 23:F6:BA:06:D0:4D:FD:EE:51:75:14:75:A3:14:3A:F3:BA:8F:0B:9B
Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Certificate serial: 0192395D1D450AEF7C4423B90B61DF03259D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
Manifest number: 0DF6
Signing time: Sat 28 Sep 2024 16:00:56 +0000
Manifest this update: Sat 28 Sep 2024 16:00:56 +0000
Manifest next update: Sun 29 Sep 2024 16:00:56 +0000
Files and hashes: 1: 1lBnXcM8cRna9SgePs0BZ9XyAbk.roa (hash: KLU5SbqQoBRe6FQzc6L0CFnSDQ0SxHWzP+oUbDvsBY4=)
2: DUB3U4Y6aRnZIOvYbbzAUn3P960.roa (hash: pEODyvNtePn+f56n1kr4WUPaYtFcf3T1olJgR6yWFfI=)
3: Okj-BwTkrJXjpw6VvrhEJcMWua0.crl (hash: h7llem1SdAD3XsCF515xbQQMmxHBEZjhFoUv9fUNqGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:5d:1d:45:0a:ef:7c:44:23:b9:0b:61:df:03:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad
Validity
Not Before: Sep 28 16:00:56 2024 GMT
Not After : Sep 29 16:00:56 2024 GMT
Subject: CN=23f6ba06d04dfdee51751475a3143af3ba8f0b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:4f:2a:2e:50:98:e0:6e:70:43:64:6b:37:
14:12:b5:b7:af:73:39:81:1c:3d:c3:8d:61:bb:c3:
c8:31:71:da:63:32:0a:9f:fe:7b:28:98:85:50:10:
76:de:cd:26:bf:9b:fd:17:26:ad:13:20:f9:33:5b:
f2:11:07:b1:ab:8d:fa:70:b9:1d:e0:2c:3d:92:d3:
23:e4:f5:7a:97:58:44:59:a1:74:9c:b1:2c:37:c2:
3d:d4:fd:bf:db:90:2e:58:c6:83:b5:d8:67:15:04:
40:7a:a8:68:1b:01:71:5e:aa:51:4e:56:0a:67:45:
7d:73:5a:e4:b2:2f:76:f7:64:b8:24:31:3c:8c:68:
43:4b:c0:34:8e:4b:dc:65:d6:df:35:91:a6:ec:75:
0a:92:b6:7a:01:3a:da:c9:22:22:3b:8b:ef:58:0a:
77:97:d3:e9:fb:a4:8e:20:da:16:b8:cf:ca:05:94:
b7:b5:9a:6e:36:aa:3e:cd:1c:e5:59:31:f5:df:6c:
96:6a:37:02:49:db:13:19:d9:64:7c:30:55:90:b1:
36:e5:ef:a7:9e:2a:a6:6c:4d:04:c7:a2:59:90:10:
b1:96:fb:4a:08:82:39:3b:23:1f:2b:43:4d:dd:8a:
be:c9:71:a7:89:41:5f:85:01:af:e8:f8:04:22:b2:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:BA:06:D0:4D:FD:EE:51:75:14:75:A3:14:3A:F3:BA:8F:0B:9B
X509v3 Authority Key Identifier:
keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b7:33:25:52:2d:a6:49:a7:c3:5b:7d:1d:ae:72:f7:cb:a9:
47:95:6b:a1:1a:42:e8:73:23:c7:58:83:12:78:47:33:ce:32:
4d:65:fb:67:dd:5d:b7:51:34:e4:4f:d7:5e:28:82:17:06:a7:
3b:a1:b7:9e:da:03:e2:47:5e:c4:a5:b1:e4:af:df:26:85:dd:
4f:0e:1b:5f:22:04:94:36:b0:2e:d1:75:7d:f2:b9:4e:74:9d:
40:b0:b5:85:d7:f4:0b:f8:c1:2c:a7:9c:6d:ff:eb:93:82:7d:
9a:fb:27:99:c4:69:83:9e:d4:19:de:13:7f:79:be:13:88:41:
ca:f6:22:ee:e9:34:46:48:13:2a:80:11:99:8b:08:17:4f:ed:
06:60:4f:a7:d7:91:ef:ae:2e:a0:99:55:96:b5:e3:c4:35:a6:
fc:c9:03:54:86:f3:64:69:11:b7:91:cf:57:9a:39:7b:46:a9:
55:d8:be:7b:eb:39:e4:57:7b:20:d4:d7:00:50:26:f5:1b:92:
99:d4:e5:13:5e:98:81:65:b6:42:5e:68:f4:b6:a0:54:5b:96:
95:d5:95:8f:4b:e5:3f:7e:3d:3c:80:05:b5:de:bc:62:f5:a5:
1d:37:61:5a:f2:0d:51:b3:c8:aa:dd:d0:40:a2:f3:ac:ed:56:
7b:99:fd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:33:23 2024 by rpki-client on console-fra.rpki-client.org