Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: uwp/6pAdx/SpL2OU6I2V7RrAYFwunn39fbrtBLS71V0=
Subject key identifier: 3D:BA:9F:A9:62:7A:96:FF:85:BC:64:C8:EA:36:74:4F:12:7F:84:DA
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 019368FD0DD07E24CF0AB3A2BBA827FFA139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 014A
Signing time: Tue 26 Nov 2024 15:00:34 +0000
Manifest this update: Tue 26 Nov 2024 15:00:34 +0000
Manifest next update: Wed 27 Nov 2024 15:00:34 +0000
Files and hashes: 1: CIDnbPy9QTNAe9tykiHEGKEG6Cs.roa (hash: BduNMg0Fi17B9lctb6qJGai7nuzOhXM5ycK+PeyY/vk=)
2: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: ZvKATCDPyzsvp1PEZ7zf4h5wEqkloUL5HR6sLxV8ixI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fd:0d:d0:7e:24:cf:0a:b3:a2:bb:a8:27:ff:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Nov 26 15:00:34 2024 GMT
Not After : Nov 27 15:00:34 2024 GMT
Subject: CN=3dba9fa9627a96ff85bc64c8ea36744f127f84da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:b9:e1:0a:a0:de:bf:d1:ec:4b:c0:4c:cc:
72:88:0d:8a:c5:d4:ae:18:e6:c9:ac:57:0c:42:d7:
e6:5c:72:8a:2b:2e:c4:13:f5:70:92:49:df:9f:f5:
c9:09:5c:17:64:aa:b0:d5:1c:52:68:0b:b4:08:f0:
e7:79:72:a9:1d:f2:ca:70:11:7a:21:61:ed:46:7b:
a3:9c:55:1f:1e:a5:35:0e:13:c7:96:6b:8d:68:9d:
d7:c8:25:9b:98:a2:64:70:e8:c1:8a:f2:6d:14:27:
aa:37:8a:7b:4a:77:83:31:06:e0:23:2c:2c:11:96:
29:2a:58:9d:c9:dd:98:10:a8:56:da:e1:b9:32:b0:
e4:3d:7d:10:39:42:73:5f:8f:92:80:11:0c:8a:4c:
c9:d0:e3:a3:12:7e:77:43:bc:7b:70:05:4c:34:48:
59:84:e5:1a:ba:71:a9:02:19:4d:af:15:81:00:f6:
85:61:74:c2:3f:6e:82:2a:b0:ff:f5:15:09:87:33:
7c:30:e4:60:b5:06:75:a9:1c:b9:86:b0:42:64:5a:
9a:52:17:86:ae:07:73:23:da:78:2f:5a:45:96:5a:
8b:3e:6b:e1:a7:25:68:37:48:8e:f6:9b:60:11:e8:
44:03:02:04:0b:6b:e5:ad:4e:87:13:ab:1c:0b:16:
3c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:9F:A9:62:7A:96:FF:85:BC:64:C8:EA:36:74:4F:12:7F:84:DA
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:0b:d3:95:2f:f4:29:8d:a1:f9:d7:f8:aa:1a:40:09:a0:
e7:57:85:3f:aa:fd:c7:4f:fb:f2:8d:bd:da:c3:26:7c:ee:5c:
63:ed:07:50:6e:e6:4a:44:e1:50:c5:64:8e:ef:5b:fd:e8:e3:
c4:3d:19:d1:b9:08:4f:21:61:dc:66:1e:de:48:95:29:f5:d5:
8a:4f:49:74:91:26:14:d5:bc:9b:b5:6d:be:7d:6b:24:2a:e8:
b3:b1:2e:9d:26:9e:bf:5b:fa:7e:a8:37:ed:2a:a2:5d:e1:ae:
74:0b:7b:2a:84:11:08:81:d8:b4:0e:c4:59:e0:fb:3e:d1:0f:
f1:ec:8d:4c:2a:8c:49:43:27:f7:52:c3:d6:6b:32:c5:ba:fd:
af:73:a0:04:ce:f1:2c:25:5c:aa:31:05:9d:2a:94:96:65:57:
39:46:66:65:f6:ba:f6:b4:7a:47:3c:2a:67:17:aa:7c:85:90:
9b:a8:77:bd:8c:b5:ba:58:78:bf:fc:ab:28:e1:94:fb:c7:4b:
ea:f7:f8:b3:9f:f6:f7:91:dc:1a:8c:67:b3:dc:62:d0:4f:0c:
b7:57:2d:ef:49:ca:65:7c:29:fd:23:46:63:f6:9b:2b:b2:d1:
61:0a:9a:79:2f:12:ba:87:3c:33:b6:d0:30:a4:84:fd:b3:21:
16:4d:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:53 2024 by rpki-client on console-fra.rpki-client.org