Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json)
Hash identifier: bKGRcTws5KEJkQfQ/KHA0A2CbV1e774Lp38a1U5Vj28=
Subject key identifier: 63:60:FD:66:A3:B2:EF:28:18:DA:23:46:A0:F3:51:69:DF:31:03:AD
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 019350BF5DDB100945C59F342415059D8CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
Manifest number: 10AC
Signing time: Thu 21 Nov 2024 22:02:18 +0000
Manifest this update: Thu 21 Nov 2024 22:02:18 +0000
Manifest next update: Fri 22 Nov 2024 22:02:18 +0000
Files and hashes: 1: ILr1oUS3WNj7lOx0gKWDmljoDf8.roa (hash: PKekSe9QALXUlXaAV5gd7ksF6Z+PSDBu0pg9bSLZBPw=)
2: NhBL06__L5XcxYEuIn0L50pwRjs.roa (hash: 5qZg8m9fpfGtH9610pRHgy/a0NvK/XOxWYxBGjD6bxQ=)
3: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: uwJJzsa1XVafpNqG2rIt6VlMP+3+EqB2+Y74T2CK0bY=)
4: RFfxaapS_vQyrkmmZQLFY15hv-g.roa (hash: DEUr0gAJ4rUsedletVyiNORU5Ow9A+cqDNsw8cJq7hY=)
5: ToG5SVaIe1aMNp1IJXqgYZl232E.roa (hash: 0CeH91XVh/wzRFcfzDhJZGcGpZ5aH+DyYm8Cy3Q/U1U=)
6: ZswLuE8xTpFjijEr7xnHMRmSDMI.roa (hash: xUP+inzdG1b7ZVqSQchmBhn+msiwJGSTVm7CuEHdxRA=)
7: _X37XPVHrFdw0mtv0RQAlO4LtYM.roa (hash: ca79JAfZ7oYzU13U+tH0I92+070ANgbKjpP/sYWJrmQ=)
8: r3Gy4wn92iIuLWmFRST98ph4FBQ.roa (hash: XPtgB2bTCBVH2+NgaKPj81KKkDUwMcuVeUBBDW+9YYc=)
9: sLMQOTgw6SPhburE63WoUY1c5Ew.roa (hash: 5bMThNgvoPfq7tvfVDiOPkA7In8Zy3dY8BYZ429DBaw=)
10: somf2MEdk4WC7d2Lke415mkyIog.roa (hash: eXCtaed9S0OHHEeDrs0crR1KqAF3HD7TCyy4cWsSCFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:5d:db:10:09:45:c5:9f:34:24:15:05:9d:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Nov 21 22:02:18 2024 GMT
Not After : Nov 22 22:02:18 2024 GMT
Subject: CN=6360fd66a3b2ef2818da2346a0f35169df3103ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:87:26:41:3b:b5:b9:a2:05:a4:d1:c9:fb:
91:74:86:02:99:7e:21:a6:25:0a:90:9e:84:a9:77:
59:d3:d6:6b:9b:83:7f:36:d4:6c:4b:f9:b7:30:34:
d3:06:64:3d:39:ad:66:03:f4:28:d2:e4:50:66:d8:
9d:94:9e:e2:d0:dc:b7:b2:8a:bc:39:fc:ca:2a:d6:
64:4a:79:dc:12:b6:a4:40:78:9e:45:31:32:e8:d0:
b1:4b:76:fa:25:cd:c0:b0:13:6b:f6:28:c2:4e:94:
a8:99:04:f5:c7:e9:b6:9d:57:6f:97:df:f0:46:8a:
04:7e:3e:7e:46:8b:08:2c:7e:d1:d8:39:f1:5e:b5:
3b:c7:28:ca:cf:84:f6:7c:7c:a0:7f:f0:10:91:68:
6c:60:4a:53:c8:a2:44:4d:0a:e3:e2:50:8f:a1:a2:
ac:31:8e:e4:ac:b3:8c:f0:80:f4:14:1b:22:79:dc:
1f:1b:c3:04:32:d2:81:44:7e:1c:f9:df:2e:3c:08:
44:88:78:56:11:76:51:ff:8e:b6:9b:e6:1a:62:59:
98:3e:8d:00:fa:18:20:93:6d:7f:b4:89:97:71:47:
61:ca:4b:18:12:3e:8a:94:73:5c:cc:10:5e:c7:44:
f1:b7:a1:0d:47:83:51:b6:bd:01:e2:20:ef:c6:85:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:FD:66:A3:B2:EF:28:18:DA:23:46:A0:F3:51:69:DF:31:03:AD
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:0b:96:f2:5b:53:ad:90:84:f7:b1:3d:ec:bf:2b:48:f7:
28:24:44:b6:ed:6d:e3:49:45:6b:cb:12:69:37:06:87:85:2d:
25:3c:bb:e1:e1:2c:41:04:48:00:35:17:81:f8:01:83:3e:00:
41:b1:8d:39:3d:b0:13:75:64:b5:d2:80:af:f7:95:ae:56:44:
6b:46:5c:a2:03:f6:25:30:22:7c:30:ee:f4:ac:e9:e2:c4:e3:
c8:6f:86:d4:f4:3a:f2:89:15:81:e8:da:a5:21:56:f9:3e:eb:
f5:16:4f:ae:a5:62:30:10:92:33:b0:02:d3:8d:65:86:a8:f9:
ee:0b:1d:80:bb:43:8f:50:0f:23:59:b2:ef:41:df:05:54:e8:
7e:d8:85:d8:46:62:0a:d1:dd:3a:81:b7:ad:ec:82:c7:7e:6f:
e2:74:6a:f4:cb:86:c8:98:40:33:0f:03:77:a8:fc:86:fc:d2:
1e:7a:84:5a:4a:0e:ad:06:5e:a6:cc:f3:7a:26:d2:83:c3:69:
fa:f6:9e:95:3f:c9:ec:5b:ca:de:e1:6b:22:53:6b:d1:b2:bc:
3f:59:ea:8a:f1:9b:b6:1c:b2:3e:17:98:c6:ce:51:d8:23:58:
82:fe:f0:78:a8:73:44:54:aa:16:a1:ec:ea:e9:10:12:92:14:
b1:5a:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:16:28 2024 by rpki-client on console-ams.rpki-client.org