Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: PjeHbm66/4ZlESIDEustWMZ4tXQCV5xnuGUfw9FCXPM=
Subject key identifier: 40:68:44:28:6D:BE:E3:8B:D4:A6:D4:8C:D9:1D:E7:21:E8:10:D3:7E
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 01936557662462F9DAF6F93F389052D37555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 0D1B
Signing time: Mon 25 Nov 2024 22:00:46 +0000
Manifest this update: Mon 25 Nov 2024 22:00:46 +0000
Manifest next update: Tue 26 Nov 2024 22:00:46 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: KplUDMJfmkEBm+HXQcoiP+Kcitycaha1I3sf3DNaQwc=)
2: uKpm5yR6HAw0eVXr_rA_x8eBsWc.roa (hash: eypRa8+0zlAG7k3t6ZXH28Z/8C2IvGWJ3oMOGDL8yuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:57:66:24:62:f9:da:f6:f9:3f:38:90:52:d3:75:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Nov 25 22:00:46 2024 GMT
Not After : Nov 26 22:00:46 2024 GMT
Subject: CN=406844286dbee38bd4a6d48cd91de721e810d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:62:74:56:15:6f:c1:01:e6:97:dc:81:1e:
e9:17:e4:56:39:72:50:96:48:1b:f2:c4:e1:b4:61:
76:55:94:d4:51:0e:0e:43:0a:be:81:c7:a4:90:33:
12:ca:6a:4f:62:4a:86:21:e1:3f:99:91:6f:41:b3:
95:ad:7b:db:aa:0f:47:cf:22:c5:6f:de:90:b0:d7:
1e:41:06:4a:e1:ff:d1:86:34:db:4f:b3:ef:60:31:
89:c0:59:17:09:cd:38:c2:fe:25:bd:ee:7b:cb:88:
e4:be:b1:cf:8f:ab:28:d8:2c:8e:bb:de:c6:dd:c8:
59:84:d8:ba:94:d6:cc:ac:20:38:6a:fa:83:71:77:
f3:e3:ea:dd:9d:41:8b:7f:87:ff:e4:fc:4a:33:a9:
b1:cf:b9:46:11:40:6a:04:31:8b:51:f5:e3:8d:91:
90:12:ff:2d:1a:db:c6:ea:fd:d4:68:37:95:31:36:
98:0c:81:ea:51:df:9d:f8:a8:0b:d9:ef:d9:9c:27:
ff:ed:84:4f:0a:38:5c:a6:d8:50:5e:ab:1b:59:0d:
6e:03:f8:a7:fc:2f:7a:ed:df:98:de:d9:16:e0:b4:
8f:48:99:20:4e:09:b2:2f:cf:b9:7e:d9:2e:99:fc:
ce:15:bd:ae:98:ec:08:d3:5a:d7:5b:8b:10:c8:bd:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:44:28:6D:BE:E3:8B:D4:A6:D4:8C:D9:1D:E7:21:E8:10:D3:7E
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3b:3a:db:c4:19:25:7c:29:00:be:62:f2:81:38:98:d6:dc:
48:8c:27:fc:89:9e:db:21:b0:5e:72:c7:db:0e:d6:39:bb:e5:
c3:ac:74:6b:4d:eb:c0:f6:f4:d0:d8:df:25:eb:8e:5c:a9:58:
4a:be:e5:96:61:0e:45:85:4d:a7:01:84:12:08:f8:b6:c2:ca:
d8:de:1a:86:4d:54:3b:ef:73:44:8c:8b:27:77:03:63:8f:46:
a4:7d:2a:e1:2d:92:6c:30:ef:06:30:44:bf:7c:ed:ff:b5:a8:
13:f9:64:70:87:c8:d1:69:04:80:a3:bf:c0:ff:31:54:58:40:
7c:38:b0:69:7a:ff:f0:9a:31:39:78:fe:a6:08:1e:33:bc:7c:
eb:d1:75:a0:25:e1:91:b1:40:54:59:1a:3c:12:95:11:68:15:
9e:58:59:e1:5c:94:06:97:91:61:74:fa:d0:44:98:67:d2:fc:
e7:9a:35:d7:f3:0c:7b:9c:50:2a:fe:da:79:c2:44:9e:4b:66:
61:f3:c2:40:7a:6c:3e:3e:f9:72:44:05:72:13:0c:3f:74:02:
2c:3a:e5:0c:5d:49:70:71:85:ab:ad:4a:25:4b:f4:db:71:fe:
4e:57:26:0b:d4:b2:e4:ff:69:40:b8:8f:5c:d2:0b:a8:cf:32:
62:5d:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:02:08 2024 by rpki-client on console-fra.rpki-client.org