Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: 9qDTL6gb7iHngXZaE0bcioiFF2CI0NSgTdq/huHSYg0=
Subject key identifier: B6:32:68:BC:27:BD:3C:D0:90:71:51:C8:BB:2D:26:8E:DE:65:C1:D1
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01936B228AC351EA20D6B7426D20C0A4AC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 03E6
Signing time: Wed 27 Nov 2024 01:00:45 +0000
Manifest this update: Wed 27 Nov 2024 01:00:45 +0000
Manifest next update: Thu 28 Nov 2024 01:00:45 +0000
Files and hashes: 1: 0yewOaJqgqatqN9M2utflrmg4zw.roa (hash: rd7h1tiWfX4/x8TQEg9lBAN/DL1GtOdn1D4ye3a+wbI=)
2: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: WGiUZNstgN31jbTVozSoFmi6kMhStmxpqy8IxtUHshs=)
3: n1xELLEjnOqpRvmzyzydj_mDhdk.roa (hash: UDBvxmuX1EpU/v1ci/xMUafvxTue/T3WrDpUvdrgQKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:8a:c3:51:ea:20:d6:b7:42:6d:20:c0:a4:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Nov 27 01:00:45 2024 GMT
Not After : Nov 28 01:00:45 2024 GMT
Subject: CN=b63268bc27bd3cd0907151c8bb2d268ede65c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:92:03:1d:46:67:08:53:ef:b1:b8:f5:91:
2d:7d:77:00:a0:cd:e8:56:64:38:4e:69:b4:2b:09:
50:d1:fe:3b:27:95:0e:d5:a9:3f:c8:6b:f8:34:a8:
dd:7a:ab:90:6b:57:ff:0b:48:8c:e1:ec:e1:c8:11:
6c:f3:4f:28:f9:32:72:9c:b0:33:d7:1e:86:08:32:
56:30:5b:e8:52:77:95:d2:36:ec:c9:04:0c:a3:5b:
9a:b1:8f:11:70:72:6b:cb:07:cc:f1:7e:61:34:5c:
91:71:11:cd:a9:4b:82:5e:1b:e7:fe:85:28:34:19:
ad:46:18:0c:58:7a:0d:9a:12:f1:18:a7:3b:3b:f5:
ba:57:a3:a8:08:17:50:76:82:72:79:56:6e:d8:96:
2d:ef:6f:61:7e:8e:67:a2:9a:d9:cc:a1:8b:fb:6d:
11:32:bd:aa:82:af:89:8e:f5:f3:b0:e1:a2:2f:92:
a2:54:3a:f6:c6:e0:1a:46:26:f1:28:b2:e9:f6:27:
6b:03:d7:9d:18:fa:5f:a5:97:e6:af:6a:42:78:4c:
63:b0:95:79:b3:62:1a:1b:10:b7:f0:ff:39:e3:66:
5c:6c:99:2b:8c:31:43:f8:fd:be:51:72:1a:64:5d:
85:d9:4b:52:26:13:b3:5b:b6:f4:69:1b:00:f1:54:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:68:BC:27:BD:3C:D0:90:71:51:C8:BB:2D:26:8E:DE:65:C1:D1
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:09:4c:23:50:6b:3b:29:f9:9d:db:36:67:50:4b:38:37:6b:
e3:ef:9e:20:21:70:eb:e8:5b:1a:fb:a8:ef:de:45:ea:ea:22:
01:cf:a8:d4:94:3d:10:2a:a6:e3:58:d6:ba:37:af:eb:7b:4c:
8f:6a:1b:79:48:15:05:b7:64:b2:b4:57:c4:a3:82:82:8e:26:
45:9f:bf:32:23:fa:84:be:43:1a:e8:85:8b:92:b7:0e:37:73:
a9:69:b4:9e:a2:ac:0f:95:21:52:2c:42:50:3a:58:f1:ae:22:
91:09:57:dd:71:8e:09:1a:6a:ba:5c:61:11:91:74:fc:90:74:
d3:54:46:e6:23:84:2a:43:f3:a7:76:e3:8a:07:b1:12:16:b3:
d2:e2:17:05:77:a1:f8:ea:03:7f:a2:c6:a8:a0:45:0a:a8:78:
69:41:28:4c:56:a7:92:d7:fa:f4:a4:3c:5c:d0:3b:5d:b2:3a:
d8:e8:a8:09:7c:16:6c:46:b0:83:9b:fb:2e:34:e3:39:c0:06:
f8:fe:0f:4f:22:6c:06:d3:47:ea:5d:b7:8b:11:15:3d:6d:bc:
22:15:d3:75:55:8e:4f:c8:df:fa:4c:52:dc:64:4f:bd:68:e5:
74:8c:97:32:62:32:e4:70:02:67:8c:74:c5:ec:4a:c8:ae:e4:
19:72:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:22 2024 by rpki-client on console-ams.rpki-client.org