Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: /+KCnUggfyX1A5gW8tZsIZ3KMpX4m5i8d05EVvR3PhY=
Subject key identifier: F2:50:93:49:0C:B3:F5:F4:72:8B:42:F0:B3:56:FD:C4:8C:3C:72:15
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0193595313BE81ACA0E8CEE64D1947E66CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1382
Signing time: Sat 23 Nov 2024 14:00:36 +0000
Manifest this update: Sat 23 Nov 2024 14:00:36 +0000
Manifest next update: Sun 24 Nov 2024 14:00:36 +0000
Files and hashes: 1: 8BqVktcgcrdcVByLHfHU94YCx-U.roa (hash: jkmSRZhbRlApFwTesSrU4Y3ypwNlU8PrxqXbJ44jSXg=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: s5V7USyIQXgkEG33wfRnpliUlVXARHgejMHat3oUCLo=)
3: ZKVRPlgwHw6QDPlM3XmI5JDpfNA.roa (hash: ZWMDnd7dnXoF7KQWcpfDKxdKcDylTluZMMe0QF/3qjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:13:be:81:ac:a0:e8:ce:e6:4d:19:47:e6:6c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Nov 23 14:00:36 2024 GMT
Not After : Nov 24 14:00:36 2024 GMT
Subject: CN=f25093490cb3f5f4728b42f0b356fdc48c3c7215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:17:3f:f3:65:43:68:04:d4:79:16:d8:39:
b2:b5:a3:69:c6:fd:d0:b9:d7:52:6b:84:1d:c5:4d:
67:41:ba:ea:6a:35:70:cc:cd:33:78:d7:98:d5:94:
a0:cd:ff:03:02:ae:bc:5f:ef:81:7e:62:f4:d9:77:
f9:da:2e:67:1e:00:02:33:83:14:13:d5:f8:2c:99:
87:13:9c:65:7d:2b:96:f1:ac:70:3d:83:d4:2d:6d:
f3:32:5c:12:2a:0c:e7:1b:fe:7d:91:33:81:85:f3:
21:6b:98:dc:1a:fb:a0:c9:a8:5a:0e:67:e6:53:d4:
fa:88:4d:c7:de:71:3b:61:af:a7:9b:38:4e:14:4b:
d9:93:a3:43:ed:b9:a6:81:ed:03:5f:7c:21:de:d9:
4e:15:2b:37:56:bd:77:2e:80:1e:3d:51:3b:45:9c:
66:8e:2f:30:f6:23:65:ae:35:ac:a0:79:ac:ff:c6:
5a:e2:8e:41:b6:f2:46:ea:78:d6:3a:8b:de:ab:d5:
71:f3:5b:b3:fe:81:a5:f1:c0:31:63:48:de:26:47:
e9:96:ff:2a:f4:64:72:e5:d0:71:0c:e3:a4:5d:1e:
cc:69:6c:51:76:fb:e6:a1:70:08:00:80:31:b5:92:
8a:62:b7:4d:c5:22:63:ad:c7:26:fb:6e:fe:fd:a3:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:93:49:0C:B3:F5:F4:72:8B:42:F0:B3:56:FD:C4:8C:3C:72:15
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e4:e2:55:8d:87:01:ba:27:ca:37:1a:b7:25:a0:c8:55:c6:
45:90:b2:3d:e6:1a:56:02:31:e3:3e:e5:42:18:34:de:f6:37:
c6:8c:e6:e0:02:bb:6c:43:e3:b4:53:8b:52:d9:e6:73:97:74:
9a:a6:8a:25:fc:ee:a3:d5:7a:d2:06:a8:41:70:ab:d0:2f:e1:
c0:3d:84:72:9f:4d:ce:e2:1f:7f:19:de:38:ad:2a:61:5d:56:
a3:d6:47:5d:1f:c2:b2:ef:56:c1:22:31:44:cb:ff:28:a2:66:
00:81:3f:79:29:57:db:70:fb:cc:61:95:ca:bc:98:1c:e7:66:
6e:b8:a6:8b:30:6c:2e:1d:e6:a4:97:a4:0f:99:33:86:ab:6c:
3d:d2:96:ad:30:a0:59:db:d3:95:ef:c5:99:fa:df:ab:ba:fb:
37:f0:3c:79:c4:58:b9:2a:81:2f:14:0e:e7:bf:6c:2a:8f:d9:
e8:0d:f5:ef:f0:e7:59:62:17:cd:f7:16:9e:c0:bb:3e:43:5b:
57:10:f6:20:17:3c:96:57:44:e3:98:2e:53:19:a3:fb:0d:07:
ec:91:c4:18:86:a2:c6:27:1c:31:70:a3:51:68:4b:50:2b:43:
bd:ae:39:a1:a6:d7:43:af:3a:ca:14:9b:85:0c:6b:f9:a5:2b:
1e:e5:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:49 2024 by rpki-client on console-fra.rpki-client.org