Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: lPrU1TxK5rtuqegHsmXVnief8BUAjVhoOQnz/QHgs+I=
Subject key identifier: 70:F6:32:80:2C:EC:ED:08:B0:1B:A3:33:D2:55:77:FF:23:6A:C8:3F
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0193670EBD99FA6B3C0D8A0C40020C9AB132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0D4C
Signing time: Tue 26 Nov 2024 06:00:39 +0000
Manifest this update: Tue 26 Nov 2024 06:00:39 +0000
Manifest next update: Wed 27 Nov 2024 06:00:39 +0000
Files and hashes: 1: 2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa (hash: bqrQ96sJiDgJy+ElrxvSTwuD5rccsD8EZd4pRvClx9E=)
2: 8wVrcMQ4U3Ab3FuuG-hQ5jkFBzM.roa (hash: it0xYF0sMu0jeFSfrzIezUku55q8XLdRL3yUtrgWAlg=)
3: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: DAS0CuTGnCAvHTzXUlH261H69YO4dqbloy+JITO1Kso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:0e:bd:99:fa:6b:3c:0d:8a:0c:40:02:0c:9a:b1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Nov 26 06:00:39 2024 GMT
Not After : Nov 27 06:00:39 2024 GMT
Subject: CN=70f632802ceced08b01ba333d25577ff236ac83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:24:cb:9c:7a:ca:6e:61:95:90:fa:bb:84:
04:44:b2:7f:51:30:5b:e9:0a:2e:c5:b8:0b:21:f3:
17:77:06:49:43:a9:25:10:f9:bc:4f:c0:22:d0:f1:
d8:3c:b0:bb:b9:3a:cc:92:f2:77:3a:91:eb:56:ca:
2f:2f:27:c5:15:44:97:81:35:7e:91:41:a2:85:48:
9c:04:23:9d:34:91:9c:ea:b2:79:d0:8e:4d:d2:14:
0f:05:ac:ed:48:41:78:a6:38:8b:d7:17:06:1f:b6:
5a:69:e0:34:97:68:cd:14:a0:bb:af:23:69:69:1d:
93:b0:e2:e7:9f:ef:e3:29:86:e1:3f:3b:0e:7c:a8:
75:39:39:8c:9d:7a:ae:1c:3f:40:c5:f8:e8:5a:15:
ce:47:f9:06:e4:c5:05:3b:67:0d:d5:b9:58:42:64:
7b:22:0a:e6:3e:f4:6b:f5:61:aa:2f:a4:49:90:78:
aa:6f:bd:03:0b:7b:7e:57:57:2b:e7:a0:e3:9b:a7:
f6:2b:97:52:c4:53:c5:86:c0:0b:8f:68:e1:4c:5d:
7a:6c:52:04:c0:5e:25:37:aa:ff:80:84:85:f3:98:
d2:eb:4f:d3:71:5f:39:86:14:0e:9e:35:73:ec:91:
bd:7a:8c:1c:26:d5:ca:95:db:0b:e7:fd:36:d6:88:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:32:80:2C:EC:ED:08:B0:1B:A3:33:D2:55:77:FF:23:6A:C8:3F
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:71:5c:c5:34:a5:65:12:ec:28:80:91:4b:ce:78:11:8f:ed:
ae:d6:13:1a:93:b6:35:10:6d:6c:19:1e:ec:58:e7:44:af:42:
97:27:e3:a0:28:f5:40:b9:0e:d5:f3:5a:c2:d4:27:b6:61:07:
0c:e9:94:d2:87:1b:cf:d9:eb:30:6a:36:47:54:55:49:1a:21:
c7:af:c3:89:2e:a7:7a:e3:26:28:fa:d9:a7:05:c2:f0:b2:10:
47:db:90:a8:87:92:50:49:f1:01:cb:43:8d:62:05:77:7d:e0:
8c:a7:0b:23:b1:0b:b6:15:88:56:20:f2:42:04:03:5a:95:36:
05:3a:f0:51:5c:02:5e:cf:fd:f1:56:22:3e:d8:3d:bc:3a:c7:
5a:40:62:a8:93:2f:e5:a2:52:f9:d4:63:5e:40:6e:e1:7e:dd:
69:f0:cd:75:4f:1e:cb:b3:ae:cc:9a:e7:6d:c8:88:90:0c:1a:
a2:c6:03:12:d8:6b:41:52:b2:5c:3b:54:24:f4:70:8c:b1:1f:
de:aa:9e:20:5e:dd:34:d2:35:c2:33:fc:e6:93:52:4f:05:54:
d8:92:84:e9:90:b9:6c:2c:b8:6e:29:c9:d6:0c:09:d4:66:a8:
d6:a4:50:64:33:7c:fd:f7:ab:89:9e:9c:e1:95:01:52:26:5a:
90:bb:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:11:01 2024 by rpki-client on console-ams.rpki-client.org