Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: 0u5TycjDkxq9WbiPTheN1TU83b3P9JWmnOCOiwW3rac=
Subject key identifier: A0:10:26:2F:25:C6:19:46:F5:20:75:8D:E8:15:1A:2E:BE:13:B0:3C
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019358E586E0721A5D9E682E78663F7DDA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0BDD
Signing time: Sat 23 Nov 2024 12:00:57 +0000
Manifest this update: Sat 23 Nov 2024 12:00:57 +0000
Manifest next update: Sun 24 Nov 2024 12:00:57 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: gsDb5O3zE5RKJUg+bgZZaAQR4q3obefj0SWmFTRdrqE=)
2: kujmdDs_f5kVIQLENTEinZ-X7OA.roa (hash: 8RODb5DeX0dSmAn+ZLi64sZU8aG11NgDnAULKs2Wcko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:86:e0:72:1a:5d:9e:68:2e:78:66:3f:7d:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Nov 23 12:00:57 2024 GMT
Not After : Nov 24 12:00:57 2024 GMT
Subject: CN=a010262f25c61946f520758de8151a2ebe13b03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:73:2b:66:9a:1e:8b:9a:c7:d2:18:a4:1f:
b0:58:b6:10:38:63:bb:ad:62:39:26:a7:10:c2:3e:
e1:c4:7b:7c:ce:32:cc:ca:4c:11:39:40:f9:b1:08:
d0:8b:c8:b8:00:b4:41:a1:ac:4b:a8:98:e4:01:04:
b5:78:2d:de:3f:90:aa:b9:0f:37:6a:fe:b2:9a:b6:
56:f3:2f:7b:21:95:79:fa:02:9c:13:fa:e8:f5:4a:
2e:0d:97:8c:ca:d9:32:53:69:55:15:29:34:35:ce:
a1:da:85:d5:b8:1e:02:c9:61:1b:e6:87:07:b2:c3:
76:4e:70:3c:a2:f6:9f:de:b9:ca:b1:7c:e0:6b:12:
19:29:8e:4f:10:cc:a5:57:2c:24:6f:0f:68:12:49:
b9:a1:4e:99:81:8a:bc:70:87:47:47:c4:b8:93:3e:
9c:30:05:78:74:2b:74:9d:d8:14:2f:1a:51:f4:94:
c6:0f:b9:69:a2:e1:ab:a5:a5:75:36:0c:d2:89:1c:
30:42:31:61:d8:44:3a:fb:23:20:ba:4e:45:c2:ab:
6c:b7:e0:86:35:af:d3:c5:42:03:af:59:d5:10:a9:
04:93:22:af:80:e7:ef:95:ab:9f:a3:a3:8d:df:e3:
4a:cd:47:81:14:03:82:60:08:e2:1e:34:28:de:3b:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:26:2F:25:C6:19:46:F5:20:75:8D:E8:15:1A:2E:BE:13:B0:3C
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:8b:a9:f6:00:1c:11:0a:67:bf:72:bf:c7:8b:1d:32:b1:
9b:fe:1a:8c:db:e0:f5:f0:98:b1:76:e7:e3:d6:bc:df:79:86:
40:14:4f:86:9e:16:ff:56:b8:de:36:c6:86:33:0d:a4:a5:fe:
d0:1e:43:07:31:cd:d2:c5:e1:8b:6c:89:33:45:01:28:b4:97:
80:d0:ec:d8:5b:e2:5f:81:91:39:7a:17:de:db:75:48:40:d1:
b5:80:ac:74:ea:f4:84:5e:45:0d:94:52:02:15:41:0c:c4:28:
29:c3:aa:dd:70:e5:b8:93:43:a0:f5:e8:42:59:89:20:4a:c9:
58:35:e4:65:31:be:3b:f9:64:fe:8c:7e:7e:f6:8f:9c:33:5b:
60:e1:bd:02:7e:65:5e:f0:47:eb:c7:d0:9f:ca:0c:52:ba:ef:
5e:15:d4:bd:10:ec:27:6a:29:84:ed:ce:41:ad:34:2a:d8:47:
b5:3a:a8:7d:fe:1c:bc:d2:c9:0b:74:23:fb:a4:c3:f5:58:b1:
69:dd:2d:fa:72:04:ad:8f:18:6b:79:5d:9b:1f:c9:bd:1f:1f:
ef:cd:52:2a:84:f0:1e:09:ed:18:d3:18:1f:cc:c4:38:8b:67:
a3:49:39:f2:8a:68:ae:fd:47:b2:a0:59:23:a4:77:98:b6:f7:
cd:6b:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:16:24 2024 by rpki-client on console-fra.rpki-client.org