Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
File: ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft (raw, json)
Hash identifier: tXIsloQl+gNlDV2J85XjNPq4YFIuCWExxhHU0pgOyF0=
Subject key identifier: 8C:52:21:97:5A:01:F7:ED:BF:BD:9F:55:CB:C5:EE:CB:CE:8E:8C:D3
Authority key identifier: 7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
Certificate issuer: /CN=7a43253a368fc6475853971ba9235be0233d8b7c
Certificate serial: 01936C34B43CE6216FA896FA622025C6CC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
Manifest number: 0DF4
Signing time: Wed 27 Nov 2024 06:00:13 +0000
Manifest this update: Wed 27 Nov 2024 06:00:13 +0000
Manifest next update: Thu 28 Nov 2024 06:00:13 +0000
Files and hashes: 1: J2CB38y_eyxcZYdEV5eS4EKk9dU.roa (hash: LMByivdsUiDFBzmHetU97Vb8Iu209L/izK1DN2R2IyI=)
2: ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl (hash: vH++zvm6GmiHTdb/l00XlZf5LaQXS01i8f43gS0W/E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:34:b4:3c:e6:21:6f:a8:96:fa:62:20:25:c6:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a43253a368fc6475853971ba9235be0233d8b7c
Validity
Not Before: Nov 27 06:00:13 2024 GMT
Not After : Nov 28 06:00:13 2024 GMT
Subject: CN=8c5221975a01f7edbfbd9f55cbc5eecbce8e8cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:52:60:4e:d6:fb:07:cd:7d:ae:3e:81:6e:
a6:d1:e1:2f:d9:cc:71:b0:48:ad:5e:98:44:57:04:
96:48:b6:88:a0:65:20:46:0a:65:bd:0e:8a:e9:6b:
20:db:a0:fb:1b:3a:4a:53:08:db:95:6d:b5:4b:61:
c3:3f:6e:25:49:de:12:4a:54:4c:fd:55:ea:86:1f:
e5:92:89:0d:a9:27:81:87:ec:e5:0b:01:72:c2:dd:
08:36:06:08:01:90:f2:26:76:a7:df:b3:d7:e5:65:
92:d8:97:5e:32:cd:b7:f7:3f:90:90:95:f1:39:23:
e5:89:5e:b9:6e:4c:ae:41:08:f2:4c:24:cb:80:4a:
d4:03:c5:90:6d:52:01:cc:31:5c:38:8c:07:f3:52:
74:e1:89:3c:4f:3d:c1:a4:25:d7:c2:db:22:b8:34:
35:ff:11:e6:1e:f2:15:8c:55:9f:37:62:96:fb:ed:
14:a0:21:90:e1:13:20:5c:88:18:b7:d5:02:ee:dc:
e3:53:86:06:59:44:1d:9d:96:7c:2b:22:5f:4c:49:
86:10:a2:8a:c4:e1:18:96:a0:c2:ca:4f:4f:b8:34:
ba:1e:f2:19:e4:85:d8:17:90:25:81:12:9a:e0:2e:
0d:ce:6a:9e:e3:c1:b2:03:3c:8e:fa:50:0f:76:9b:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:21:97:5A:01:F7:ED:BF:BD:9F:55:CB:C5:EE:CB:CE:8E:8C:D3
X509v3 Authority Key Identifier:
keyid:7A:43:25:3A:36:8F:C6:47:58:53:97:1B:A9:23:5B:E0:23:3D:8B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekMlOjaPxkdYU5cbqSNb4CM9i3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bcae7d-9daa-4fc1-807b-7f6dea38e7aa/1/ekMlOjaPxkdYU5cbqSNb4CM9i3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:34:9c:7c:ba:0a:ae:28:3b:18:f0:26:59:96:46:a4:1f:
ae:f9:08:d5:34:ce:a3:ae:9a:d1:2e:1c:4f:48:be:1c:83:0f:
ff:10:8b:5a:ea:21:13:e8:e7:23:87:f2:b7:ea:b4:19:16:75:
70:20:fd:64:f6:a3:e5:d8:ae:c0:a1:58:6b:67:1b:99:fd:fa:
2c:e7:76:dc:7a:1a:04:9a:29:9a:d4:61:8d:c1:3f:b8:97:c3:
0a:b5:1d:c6:57:d4:3c:56:6d:d0:0b:6c:32:45:72:11:e7:30:
af:c8:9d:1b:4f:5f:67:4d:7c:dc:f0:f7:34:3f:7e:68:23:89:
da:ca:78:3c:6f:e0:85:ef:ab:64:88:8a:d7:fe:7f:4e:00:e0:
2c:d2:e4:ea:ad:fc:ef:71:41:76:b9:6a:a5:17:d3:9b:dc:58:
b6:10:25:81:28:52:ec:6a:7a:19:a8:83:a1:75:a0:df:d0:56:
ac:db:d0:a0:8f:1b:20:ab:72:3f:0c:1c:bf:19:f7:67:18:6d:
fd:48:e9:58:17:80:f0:3d:2c:2e:15:e7:0d:f4:0c:76:c2:4d:
0b:37:70:56:cd:dd:3d:1e:9d:65:60:e6:f5:3a:67:78:36:99:
b1:26:ec:14:bb:00:6a:58:e3:f6:5b:b7:22:68:5f:37:d2:f4:
23:cb:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 08:43:14 2024 by rpki-client on console-fra.rpki-client.org