Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: 3PHidZ7UynTWz/I6o3QBu1OvgE24S5FU7pMaL8+lLU4=
Subject key identifier: 67:A6:E7:6F:2E:BC:C1:EE:BB:27:4B:F3:AC:38:1C:31:BA:E8:01:5C
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 0193587814CACEC6B1445940FAF3078D4F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 1195
Signing time: Sat 23 Nov 2024 10:01:24 +0000
Manifest this update: Sat 23 Nov 2024 10:01:24 +0000
Manifest next update: Sun 24 Nov 2024 10:01:24 +0000
Files and hashes: 1: w18onR4sS7cvDcjHqLa2mNJhs-0.roa (hash: THWRDE75VK6bZg+/vca09jAWHLGwC9PkA/JxoaQG/tc=)
2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: TmEkdE4qdUuRzTKWYX//hHway56h+qVPeTs+qwEVK5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:14:ca:ce:c6:b1:44:59:40:fa:f3:07:8d:4f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Nov 23 10:01:24 2024 GMT
Not After : Nov 24 10:01:24 2024 GMT
Subject: CN=67a6e76f2ebcc1eebb274bf3ac381c31bae8015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:c2:2f:1a:ef:b2:bd:10:8d:03:42:40:a9:
dd:63:dd:0d:94:c4:47:db:1f:e0:30:5b:3c:cf:b9:
27:0e:1f:b8:d9:37:d7:9f:a5:c5:50:c6:67:91:86:
3b:e3:94:1b:0e:00:cb:75:47:e4:55:4d:3e:55:d9:
cf:2c:3a:e2:09:fd:69:bf:78:58:6c:29:56:2f:f2:
e6:ef:40:34:6a:1a:d5:6e:65:fe:51:aa:2b:ee:33:
f0:6b:21:6b:be:2a:d3:23:3e:cc:1d:d3:7a:65:2d:
ac:3e:c0:40:7e:00:b5:48:a8:24:9a:c9:92:20:35:
d7:1d:55:2c:9c:7d:0c:82:1c:32:ac:04:60:6c:6c:
a8:79:ba:a6:24:c6:aa:22:87:c4:a4:0e:90:b8:33:
df:b9:8d:44:24:2f:1c:69:86:0f:0b:bd:39:1a:a4:
dd:38:1f:6d:dd:9f:7b:f4:01:76:d3:4e:08:94:32:
ea:a3:ec:45:8b:5a:a1:90:cd:32:b1:a8:85:3d:8a:
3e:6c:44:7f:85:df:f2:25:c4:fa:26:62:10:c5:78:
29:de:0c:75:6e:56:2b:cf:68:ba:93:80:1c:dd:7e:
c5:c0:53:64:b7:cb:7d:81:33:ff:83:20:10:02:07:
8d:b9:4c:e4:83:8a:03:87:b6:08:45:dd:64:43:cb:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:E7:6F:2E:BC:C1:EE:BB:27:4B:F3:AC:38:1C:31:BA:E8:01:5C
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ca:72:47:e2:8d:1f:cd:13:12:67:24:09:4f:f2:9a:67:07:
ba:fd:30:0e:ec:fc:35:7e:72:b6:23:db:e3:6c:48:e0:33:3d:
9a:02:56:75:f3:33:c9:03:82:24:79:75:27:6b:3d:d2:95:c1:
21:19:3e:7d:9a:cd:7d:8f:e9:db:f6:4c:a4:e3:ee:87:ed:e6:
a3:4c:2d:82:7f:55:fb:de:b6:62:d9:e7:e0:ca:86:53:90:5e:
a2:f9:7d:e7:8a:a1:05:f5:75:f7:64:c1:3f:9e:56:6d:0a:87:
ac:10:9f:37:d1:17:b8:4a:a5:9a:e7:6d:0f:91:13:87:ac:91:
f7:a0:5c:f2:69:80:b5:87:1b:9d:59:5b:0f:1f:83:aa:68:7f:
be:30:40:d6:36:df:fa:71:41:a5:b4:60:f1:8d:8e:89:5c:3e:
18:33:47:53:a0:43:32:db:21:93:e6:82:16:b0:1e:0c:d1:8c:
86:2f:87:17:89:e4:c0:fe:cb:b7:63:b1:ec:76:0a:34:ad:8b:
a8:be:52:a4:66:1b:31:ab:aa:39:5b:52:de:81:1c:54:09:0a:
fe:6b:17:22:b7:11:1a:e2:aa:f2:6f:09:f6:65:a9:6b:29:8c:
ce:da:b3:89:00:5d:1b:c8:2a:11:53:eb:3c:a2:b3:41:e7:93:
0b:2c:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:24 2024 by rpki-client on console-fra.rpki-client.org