Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: Y7GAmM8HJIMQG4PmlB3mM/5bIJQLYcKwjWKAPQq0yS8=
Subject key identifier: 06:97:8B:A5:19:BA:84:38:6E:7F:BE:60:8B:03:45:00:0D:3D:7B:18
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0193568A830AC9B8BEDDEFCCB9FFE6215899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0D09
Signing time: Sat 23 Nov 2024 01:02:18 +0000
Manifest this update: Sat 23 Nov 2024 01:02:18 +0000
Manifest next update: Sun 24 Nov 2024 01:02:18 +0000
Files and hashes: 1: UkHvGiUCKcbdQEIeao5vbFNxNgY.roa (hash: 8kCoRMMYxnUg9T0df7b1WKpN1HXbwSgrEQ5QM9y2NRA=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: 6ufhQP5j8vWtx5WJlElhS4Vl01pMMR0rkSzd993QL/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:83:0a:c9:b8:be:dd:ef:cc:b9:ff:e6:21:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Nov 23 01:02:18 2024 GMT
Not After : Nov 24 01:02:18 2024 GMT
Subject: CN=06978ba519ba84386e7fbe608b0345000d3d7b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:d5:ca:e1:7c:07:6b:91:d8:5e:0c:36:28:
fe:f0:63:8f:4d:96:9e:01:1c:97:e1:72:43:88:d2:
15:9e:91:31:27:b4:88:a9:1d:01:78:c5:36:cb:ce:
2b:3c:3f:91:93:13:cc:99:97:bc:84:f5:54:12:d1:
2a:5d:13:c3:e1:66:09:a3:20:41:55:0e:8e:d7:42:
13:78:2b:84:12:8d:44:fc:c1:4b:93:61:2d:62:64:
13:42:f8:98:aa:4c:e3:96:d4:a0:7a:39:6c:08:70:
04:7c:62:87:68:1b:0d:20:5b:92:5a:a0:45:b8:f6:
f6:0e:22:d5:ae:af:2e:a2:c3:7c:b6:37:58:16:b3:
91:ff:0a:4b:b6:5d:0b:35:8e:da:3b:c8:87:ab:31:
c5:ec:7e:c4:d1:f4:06:dc:ad:02:b0:91:75:63:cd:
45:17:de:a8:08:c6:32:6e:08:06:21:5d:c4:b2:2f:
40:74:cc:d3:8d:68:2c:f3:ac:77:28:4c:f0:8a:80:
c4:9d:d9:8a:90:3f:ec:27:fa:91:d5:9f:45:25:a5:
bd:9e:aa:78:d3:cb:a6:0d:90:f9:b9:ae:da:c1:25:
52:87:01:50:0d:9a:b6:eb:7b:2d:10:87:89:72:08:
a0:86:7a:9e:03:6c:96:93:b6:91:71:d5:6c:0e:7f:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:8B:A5:19:BA:84:38:6E:7F:BE:60:8B:03:45:00:0D:3D:7B:18
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:48:80:d3:90:29:70:89:98:00:92:8b:c8:2e:a6:74:57:6c:
f9:80:3d:a2:09:12:b5:4a:67:49:96:a2:c6:4c:be:ee:d0:da:
9e:3a:89:40:c1:3a:b9:82:22:e9:99:03:56:ce:04:a3:bd:fc:
8b:ce:61:b5:aa:2e:f2:48:91:ab:e6:82:c9:67:32:50:14:9b:
c2:df:aa:88:e4:fb:0b:66:fe:20:00:bd:e1:69:ab:32:76:c2:
7a:87:61:33:10:f3:94:a4:ae:0c:dc:dc:07:d3:68:71:22:5a:
b7:98:1e:be:0b:cb:69:85:82:85:e1:63:e6:a1:1c:c9:ac:0e:
ff:55:0b:6b:12:8c:9a:63:01:2f:cd:a9:de:6a:5e:58:53:d2:
41:48:5c:da:39:11:6c:85:ca:66:28:c0:5e:6f:3f:32:86:c9:
25:56:20:ab:54:a0:1f:6d:38:11:fe:f7:29:a7:5f:8d:fd:fc:
fe:fb:03:48:cf:c9:3d:17:e2:1d:43:40:18:ad:5b:d1:e3:ce:
12:26:0b:a0:1d:2f:d5:cd:04:4d:cc:61:02:b7:66:96:fd:95:
61:a1:89:79:f5:a4:cf:fe:15:0d:df:9f:c2:8a:c7:dd:fb:d5:
80:f0:5e:42:24:ae:3b:c3:6c:14:b0:5c:37:6b:7f:5d:c5:fd:
78:86:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:24 2024 by rpki-client on console-ams.rpki-client.org