Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: +SBpcEPBRkL4heL5eovrhGjpRyiQjjqcL4/XYwdeF4E=
Subject key identifier: D4:1A:9B:4E:36:1E:F5:D8:0D:9A:F2:BC:EF:F0:E7:16:DD:31:E8:7C
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 01936A7D4EF163A56533C1BD71C4DF4A8337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 127D
Signing time: Tue 26 Nov 2024 22:00:17 +0000
Manifest this update: Tue 26 Nov 2024 22:00:17 +0000
Manifest next update: Wed 27 Nov 2024 22:00:17 +0000
Files and hashes: 1: IrOeHv6mp14uU2xGtodR5VBHIkY.roa (hash: i0wVnb1O4jZBN1hYv7rYtDDiwjeDu6m7/BnVXTzXWs0=)
2: QkydehNPVYKnQtfj7bL9xnKq67E.roa (hash: 0R+3Ibh+YHdvGaQCjfbBuhF1XOFo0uaxO5oDDn0D88E=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: 5P1L2H4LlSlHVrhJDGoKnPMC5goN3pM62EzXfVaOdqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:4e:f1:63:a5:65:33:c1:bd:71:c4:df:4a:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Nov 26 22:00:17 2024 GMT
Not After : Nov 27 22:00:17 2024 GMT
Subject: CN=d41a9b4e361ef5d80d9af2bceff0e716dd31e87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:32:52:69:2c:ac:de:8d:a8:ea:e3:9c:01:
a3:df:4c:ab:4e:e8:e4:40:9f:a4:5b:46:61:5f:ac:
36:cd:84:00:6c:77:fd:10:b0:f4:b4:2b:9b:9c:e5:
9a:3a:d3:9f:2c:5d:aa:23:af:d6:54:25:da:53:24:
28:a6:c5:c7:dd:fd:d0:ee:3a:f2:92:c2:52:ec:1c:
c5:ec:29:9f:be:65:2d:7d:55:48:9a:2f:2b:dd:ab:
c1:55:f6:58:18:23:2c:80:62:33:02:cc:34:65:c4:
cf:40:15:88:58:e2:91:87:6f:0b:d6:9b:c2:af:fa:
0b:5d:b7:26:cb:43:4a:2d:23:b9:dd:03:90:85:d7:
e5:3a:14:f9:01:ef:e4:1c:75:99:85:41:11:a6:82:
2b:08:34:37:7d:75:de:23:af:18:5a:6c:9c:de:cb:
ef:94:f7:72:42:7e:25:3d:af:02:10:14:0a:0b:a2:
54:07:66:db:bd:51:c1:c9:7c:20:11:16:f1:b0:ab:
3d:38:49:fe:7e:9f:76:b5:50:4f:2e:04:e2:54:e6:
9b:1d:0b:1c:ec:85:b9:55:7f:49:a5:a0:67:ca:8e:
60:55:e1:15:a9:43:8c:9a:f3:40:c2:97:18:ac:62:
aa:ac:fc:c8:94:4d:a1:99:8e:cc:bd:1e:0b:32:8a:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1A:9B:4E:36:1E:F5:D8:0D:9A:F2:BC:EF:F0:E7:16:DD:31:E8:7C
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8e:6d:5a:aa:a9:bf:81:72:e3:c8:2e:89:fe:4b:a5:d0:2e:
eb:73:62:40:e6:b9:a3:8e:29:21:01:91:9e:6a:0b:f6:28:57:
02:fd:23:d2:5c:f6:df:fe:7d:67:c7:0d:2b:0c:bc:4e:55:3a:
9a:3b:76:a8:51:c8:52:64:5c:c8:48:40:9f:4a:b0:94:96:f6:
7e:41:dc:09:0a:3a:5a:4d:9b:48:20:0d:20:87:5a:76:e2:d4:
32:99:7f:47:aa:b0:da:84:67:7b:ee:85:02:38:b5:ad:a7:8a:
01:4e:fd:b3:eb:3a:08:6a:ce:c9:bc:08:43:d5:dd:cd:2a:e4:
c2:e8:be:8d:a8:19:65:77:11:a5:6f:bb:c8:8e:06:b9:f5:b9:
b4:ee:91:b2:7f:7f:15:0c:d8:a2:42:e1:20:bb:a6:aa:55:90:
56:fa:aa:16:6c:b0:38:b2:36:ab:e4:0e:34:e5:c1:fe:71:fc:
60:d6:d9:1b:10:39:85:2e:ef:1e:04:32:6e:fd:8b:d2:58:21:
69:2a:99:72:d0:5a:b1:8e:51:27:42:86:b7:9d:5a:70:fd:38:
18:4b:49:68:43:7b:04:25:0b:3f:32:e5:cb:dc:51:22:7f:25:
36:c3:43:e0:e3:55:a6:37:8b:f8:bc:7f:8c:84:de:13:b6:99:
e6:89:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:46 2024 by rpki-client on console-fra.rpki-client.org