Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File: v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier: OBkRXrLmi6OPR7bAsspxvl/x7HmF69gTMzkzdDI76JI=
Subject key identifier: 28:22:69:05:33:9D:A3:4F:5D:B1:44:7E:F1:4F:94:E6:87:C2:70:BF
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer: /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial: 01935162AEB4F7DE1B3AA3102C9CB4A15959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number: 0EF2
Signing time: Fri 22 Nov 2024 01:00:41 +0000
Manifest this update: Fri 22 Nov 2024 01:00:41 +0000
Manifest next update: Sat 23 Nov 2024 01:00:41 +0000
Files and hashes: 1: O0GMXCvPwXn7yZ-omoz5CEJJOJI.roa (hash: 9rbQo/j8z/hSiVtLB3ewZxciIEUCPX/udsD5hoZDAQI=)
2: nIVJ0OGN-0OdPCKW3kjOtCvQ3VQ.roa (hash: 0T2YBWBb5+mCS6xVHckEjXBiM0tHc/Wdf5Bc3SQZwNM=)
3: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: zAWV6mUfp+q9JUauCCDSdS1SLzaDP6LpfzwHfeRbbA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:ae:b4:f7:de:1b:3a:a3:10:2c:9c:b4:a1:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Validity
Not Before: Nov 22 01:00:41 2024 GMT
Not After : Nov 23 01:00:41 2024 GMT
Subject: CN=28226905339da34f5db1447ef14f94e687c270bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:31:b8:3b:c4:7f:08:bf:7e:fe:db:24:f3:
46:3e:ae:d1:ac:0f:83:1d:bc:88:cd:aa:57:5d:9c:
50:7b:fc:f3:6b:a7:2c:cc:b9:09:e0:77:13:d6:07:
cb:bc:58:54:4e:5c:dd:80:51:ad:ad:6d:1a:82:d2:
c7:17:3d:a6:e7:16:fa:b4:d5:a7:27:46:32:64:38:
34:40:e8:b0:e2:46:cd:f1:4e:50:0f:11:af:f4:14:
2c:3c:d9:fd:06:72:f2:23:94:4f:59:e2:bb:09:26:
28:50:65:6b:f2:c6:21:74:16:6a:69:48:8a:66:49:
0b:0e:79:8c:ae:99:8b:96:8d:d8:0e:96:68:ff:04:
54:11:f3:3a:35:0d:73:0e:b6:df:da:15:c0:a0:16:
c1:64:31:e3:dc:79:cb:14:33:c5:fa:13:8e:1f:86:
3c:5c:5c:da:db:bc:25:13:ef:a8:0d:02:ef:b7:9a:
8f:41:93:36:93:95:42:be:99:9a:6b:01:b7:2e:ae:
e0:74:0c:c1:e4:3d:d5:da:a4:e7:87:04:51:a9:b2:
0c:8c:56:f5:70:f0:6f:92:1a:19:db:e3:7f:4e:94:
59:33:ce:04:d2:74:5b:e9:df:90:cd:86:ae:47:af:
2b:62:ba:fa:7f:26:7f:55:8e:06:8e:ff:e1:70:a1:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:69:05:33:9D:A3:4F:5D:B1:44:7E:F1:4F:94:E6:87:C2:70:BF
X509v3 Authority Key Identifier:
keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6e:1b:12:8e:75:88:a3:e5:08:de:ff:06:95:e2:16:78:a7:
59:17:03:05:31:39:f1:39:83:83:39:02:c6:64:58:b2:e0:3b:
d4:12:c0:7e:8c:50:6a:65:26:1e:be:0b:2a:47:8c:54:65:01:
8f:2f:17:ac:ac:b3:a0:44:2b:91:cc:6e:5a:40:57:55:13:cb:
75:ff:fc:51:c5:61:30:08:ee:2f:b4:23:a8:ff:01:ff:87:31:
f7:d9:9a:78:c3:6f:5d:e3:ca:fa:a5:5e:1f:67:98:60:4c:05:
29:0d:0c:fb:26:42:9c:d2:57:47:15:26:2d:c5:73:d1:76:34:
88:ee:7b:d7:fb:73:2d:c8:13:05:78:18:71:b8:1c:b7:97:49:
fb:8d:48:3f:e6:dc:ec:4d:0a:27:e1:be:0a:a7:2f:69:87:cb:
2e:fe:7f:cc:6b:1d:78:25:0c:4e:89:18:81:49:ba:59:54:65:
45:59:61:c7:1f:c9:32:08:61:be:1d:7c:4e:7f:63:4c:54:6f:
80:78:06:0d:02:ff:49:b4:55:09:57:67:93:b7:53:24:cc:c9:
d5:dd:2c:7a:92:f6:be:6e:ea:ab:f6:86:1d:3a:74:50:64:13:
7b:a8:04:f7:94:c6:ae:cd:bc:53:85:5a:51:b9:99:92:fa:99:
3f:0c:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:19 2024 by rpki-client on console-fra.rpki-client.org