Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: AOwDlv0qjF9dTNXB/pZBQDPw+TVm/LWGFr4uRpQlMaw=
Subject key identifier: E6:ED:D5:E9:F0:AD:99:3C:63:12:41:49:D2:06:9F:ED:92:0B:AC:73
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 01936AB4B147F305B06CBC9225040DAED9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 23:00:46 +0000
Manifest this update: Tue 26 Nov 2024 23:00:46 +0000
Manifest next update: Wed 27 Nov 2024 23:00:46 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: 8ixIqoIkvnjeha7dVTZOBMpjXhGnugOevb6gCocMmTk=)
2: qsfPF-0_LPJoWFRYcCoM8w1NqVU.roa (hash: OIACBeyU7yQSofD/DDxyap+1u8eHInqVBFeozOGV4s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b1:47:f3:05:b0:6c:bc:92:25:04:0d:ae:d9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Nov 26 23:00:46 2024 GMT
Not After : Nov 27 23:00:46 2024 GMT
Subject: CN=e6edd5e9f0ad993c63124149d2069fed920bac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:8e:79:a1:4e:b1:26:e4:7e:fd:cc:74:d1:
74:38:bd:4c:6c:5f:1c:27:14:f8:61:21:bd:d4:23:
95:24:cc:e4:76:34:3a:eb:2e:90:04:f8:d2:61:f3:
fa:04:3d:64:5e:de:35:ec:ab:f5:86:9e:c1:35:80:
00:77:83:58:46:26:c2:ff:21:b6:87:b4:3b:71:8f:
cb:d1:fe:86:75:18:69:0e:30:af:72:7b:53:e5:f2:
2a:ab:6c:cc:35:fd:74:b1:13:69:38:93:47:59:85:
d3:b3:d0:5c:78:e2:67:28:b7:90:1d:9c:44:01:cb:
1b:d5:c3:77:e9:dd:ca:38:f6:38:c1:0b:6e:42:ad:
fd:0e:50:c6:29:d3:02:e1:ac:a8:f4:83:2e:93:ed:
29:e9:f9:24:f6:4b:c1:6b:e1:90:e8:73:92:84:ea:
20:9d:72:6b:a1:ed:a8:d3:58:99:3c:3c:38:3b:a8:
46:b6:3e:11:fa:6a:92:bb:c0:8d:a0:5f:bd:8e:81:
34:d4:b6:01:66:d4:07:ea:20:76:da:37:b3:61:e1:
27:d2:ff:32:0c:91:6d:dc:64:0c:d6:da:bd:dc:3e:
50:51:e0:fe:19:f4:00:54:8b:81:a3:fe:53:a4:e8:
d0:78:c5:d8:47:2b:3e:7a:82:f2:a8:45:25:6a:0c:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:D5:E9:F0:AD:99:3C:63:12:41:49:D2:06:9F:ED:92:0B:AC:73
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:34:d4:22:2a:00:ff:b9:a4:de:1d:92:13:d7:21:4a:da:2c:
e7:be:b1:96:b2:a9:e3:3b:af:fc:e1:47:bb:db:ed:06:67:f6:
12:6a:95:02:3b:64:23:90:86:ef:0c:01:84:1c:ba:a5:dc:30:
74:8b:e2:a5:1c:11:f5:fa:74:84:a4:22:7f:cc:b2:ca:a4:26:
39:1c:17:3c:2e:03:1d:c6:5f:f9:fe:41:6b:3b:19:02:3f:0c:
e3:82:6c:d5:90:06:81:e9:7d:3f:d8:5f:57:2c:53:a5:e9:0e:
33:c8:ff:65:07:0c:13:d0:6e:e0:e6:c7:d4:a1:c6:c6:c7:5f:
26:17:39:b2:15:06:54:b6:88:30:2e:23:36:d6:d8:00:c7:f7:
8b:5b:f2:da:ab:8e:5f:f9:b2:b3:4f:89:66:bc:c3:59:6d:94:
a6:d9:ff:b0:93:cf:8e:f5:71:de:6b:17:e3:e4:0a:68:e1:e6:
d5:8a:b9:84:97:e0:2e:0a:7e:95:b4:20:90:a8:e3:d3:9c:09:
fd:8c:85:d9:94:98:1d:ea:c6:9e:96:de:7a:78:7e:91:b9:27:
d3:f7:84:77:dc:91:15:f2:38:27:d8:7e:80:3b:3e:f6:dc:92:
f9:af:cf:bc:88:4b:bd:e9:2e:1e:fb:59:a5:1d:64:8d:3a:c0:
a5:b1:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:39 2024 by rpki-client on console-fra.rpki-client.org