Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: CZvd+mvu+GNAr8mg/C7Tin+KM+NQt7U1hgPu2lXPDT0=
Subject key identifier: AF:48:35:0A:23:8F:75:CD:EF:AE:12:17:43:47:90:19:C6:22:CB:E9
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019350BFB319AE6FA1F63D276EE4443BD42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 137C
Signing time: Thu 21 Nov 2024 22:02:40 +0000
Manifest this update: Thu 21 Nov 2024 22:02:40 +0000
Manifest next update: Fri 22 Nov 2024 22:02:40 +0000
Files and hashes: 1: BbVA45-G3JaZ9aARBupwivZdtwc.roa (hash: Olst5gc6kfnLaRGa2S9NliQKizwEJoLwQTKdBrdZ2Z0=)
2: MKC-PwTuuMLdugPlxIzteNmxkWU.roa (hash: dpWBPHw1roNJPMJ4aeYo7B4udRj0hryl/1X0HcD6f3k=)
3: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: f9FwI40K0wudWm45btqYD3k4Ho5P5LPE6VloG0V2W8E=)
4: P66mpHo1-dmOLpuTK0e5B7uhOPs.roa (hash: a6iXRJHum+QdRJIxDkGuecL6Yk3tb3/R+aY/LBXo5xY=)
5: c8WrLVu_21_PKTbhCc7excuHkV8.roa (hash: 5qQ/9bSH4F/YykiMEHSAjGwjG3PSHqJlXb+t1DVhdbE=)
6: d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa (hash: X42kxnoM7gASFhqHQH9+TLpK7iibF2TM0Jfk0gkWaSQ=)
7: eWX5ufeAL_W1niX8HTHidwRee2w.roa (hash: 5FMrkC1e3v7Q4VryxY70BJPiGlqUtyjNNZ/xK1YAgks=)
8: j5a67ySjThAK3cSkis_vi5k3qec.roa (hash: lO7rtjk8uZKo1cQ2l937nOHr/2PqYKNfsJcWPSQ5c/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:b3:19:ae:6f:a1:f6:3d:27:6e:e4:44:3b:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Nov 21 22:02:40 2024 GMT
Not After : Nov 22 22:02:40 2024 GMT
Subject: CN=af48350a238f75cdefae121743479019c622cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:eb:0b:59:34:97:9e:8b:1f:f0:d6:a4:cb:
a6:ba:de:79:3c:e5:f0:95:84:48:26:c1:8c:88:c1:
b3:4e:15:77:19:9e:3c:11:db:7b:1e:22:c8:0f:7b:
6f:ca:51:90:e0:a7:c2:97:1d:41:25:23:35:33:5d:
57:67:0f:c6:33:0a:90:3a:15:de:5c:27:71:2d:b8:
b1:58:88:42:db:e4:45:6a:cc:96:6c:f1:96:8e:26:
63:1f:3a:fd:b7:77:5a:b7:cc:66:50:76:42:1e:e8:
5e:60:76:f9:bf:47:2f:6f:2f:dd:69:79:be:12:d3:
8b:63:8d:fd:49:94:05:ba:5a:e3:2c:5c:fc:90:e1:
64:75:f8:b7:14:09:4e:9f:c1:ae:3d:93:21:70:68:
47:f1:fe:f4:6e:cf:f0:2a:06:44:66:e2:95:62:77:
29:f6:c1:4c:00:5a:70:f4:96:f8:4e:15:5a:13:81:
c8:4d:be:a9:a1:72:e9:36:a1:ba:f7:09:ef:e0:83:
0c:68:11:b0:7b:6f:53:17:43:6f:3f:b8:40:6f:df:
8c:7f:8f:aa:c5:9c:6f:a4:5f:26:9e:5d:ba:eb:f6:
69:2a:cf:41:2f:20:a7:b9:76:4c:27:3a:9c:26:7b:
53:74:ee:da:16:c4:86:e5:c2:01:14:bd:d7:a5:48:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:35:0A:23:8F:75:CD:EF:AE:12:17:43:47:90:19:C6:22:CB:E9
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:42:c5:03:ee:0e:e2:18:d7:23:6d:dc:72:5d:a9:75:31:48:
88:d7:df:95:63:ed:29:9e:cc:65:8e:2b:e1:35:03:81:f5:ef:
09:99:59:14:c2:7a:5f:f5:a0:54:1a:d1:f2:6e:24:82:3b:db:
f9:f8:4b:1e:a0:7b:33:60:78:71:a7:5d:50:63:64:40:d7:52:
e0:43:99:3e:b0:f3:03:9a:15:2c:a0:46:62:d3:19:90:8c:e8:
ff:14:e4:ab:72:8d:46:cc:3d:3e:c3:c9:e4:ae:8d:61:36:1b:
55:0a:59:98:d9:dd:27:10:5d:29:01:88:04:99:8a:3c:3d:37:
d6:da:57:a7:45:4a:d4:6f:1c:9a:0e:d2:17:76:b4:ec:f2:66:
4b:c7:45:a2:e4:89:08:86:4a:89:ea:15:3c:a2:21:3d:9b:ac:
88:9e:43:50:fc:b2:36:1f:28:1c:e8:87:b1:a7:91:bf:de:27:
be:53:51:a8:0f:da:1f:aa:a7:38:ed:bf:51:8c:be:3a:b6:7a:
27:dd:b9:99:40:2d:a7:a0:47:69:3e:c5:6c:9c:0f:84:fb:71:
ac:df:0a:25:ae:6c:77:c6:ec:d7:37:14:0e:3a:31:01:51:22:
5f:dd:ee:85:a5:57:74:5d:77:ee:6c:07:42:aa:06:9f:13:5e:
ab:26:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:44 2024 by rpki-client on console-fra.rpki-client.org