Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: 96xhp6iIAXsP5iYBBcyPZTWKHR/RR5g36gQR2eA4KD0=
Subject key identifier: 9A:1F:81:1B:3D:3E:96:E4:60:1B:D7:41:E5:83:DC:AF:B3:03:CD:83
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019358787985C7170A4ABDA8A154B880F2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0B18
Signing time: Sat 23 Nov 2024 10:01:50 +0000
Manifest this update: Sat 23 Nov 2024 10:01:50 +0000
Manifest next update: Sun 24 Nov 2024 10:01:50 +0000
Files and hashes: 1: Zx7whMfxAFKB8otpZuhDxzwj8EY.roa (hash: 8uhDmEJO68Ua0M1IzL6ONGj0xoatnxLOF2u4S7qR6KY=)
2: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: yPf8Ec0JqSswi1jqC60BebCrFpFrtjzVp2OceV084+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:79:85:c7:17:0a:4a:bd:a8:a1:54:b8:80:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Nov 23 10:01:50 2024 GMT
Not After : Nov 24 10:01:50 2024 GMT
Subject: CN=9a1f811b3d3e96e4601bd741e583dcafb303cd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:40:9f:2b:25:67:82:41:34:a9:85:a6:a9:
18:2a:b4:6e:e4:6c:0d:7c:4f:16:80:87:cd:24:2c:
2c:c9:72:16:08:26:28:4e:a5:15:24:56:e3:9e:b0:
a6:7a:5f:05:3c:62:17:30:6c:35:ed:96:be:6b:47:
0c:21:e8:0c:48:71:92:c7:5e:75:48:36:16:37:4d:
fe:77:28:3c:3a:0f:ef:3f:c1:a5:b4:88:4a:6d:dc:
99:c1:01:18:47:a8:f2:5b:02:d1:bc:c7:e2:db:05:
f3:a4:d0:84:17:8b:37:c2:52:82:ac:dc:52:47:d9:
b3:e9:b3:c2:07:d5:e5:e1:e1:08:49:35:a1:74:48:
85:74:93:b4:0d:27:23:a3:91:9f:29:c6:c2:8c:1e:
92:71:08:f0:da:88:3f:7d:b7:35:c1:20:a8:25:fd:
27:79:6f:30:d7:14:9d:9c:af:28:5c:29:c3:2c:42:
46:6b:d7:1d:64:bd:bf:54:55:48:07:b7:b5:7a:99:
b6:63:a8:6f:9c:6a:ef:e8:95:03:e5:7c:85:24:ed:
dc:16:11:95:1e:35:93:d6:51:88:95:89:96:4c:d6:
46:75:41:f0:70:6d:07:85:e0:c7:16:f8:79:55:48:
65:52:00:ea:f8:d7:96:e3:7a:e8:06:35:42:7a:1e:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:81:1B:3D:3E:96:E4:60:1B:D7:41:E5:83:DC:AF:B3:03:CD:83
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:92:c9:4b:8d:0a:3c:f7:b8:e5:89:fb:72:59:35:c3:0c:59:
c3:5f:16:f3:e6:93:24:49:24:23:b1:3c:06:c0:62:6d:a1:00:
71:cf:5d:b2:e2:62:2c:70:21:26:46:fa:ff:eb:ba:a5:96:e3:
eb:50:99:0e:98:60:cd:f1:a0:8a:d1:75:b0:3a:4e:4e:67:9e:
f8:b5:45:2e:94:5b:64:96:f7:7d:aa:0e:5f:fc:88:40:38:70:
c4:4f:19:d9:8f:07:55:2e:c1:43:aa:45:ad:5a:27:bc:be:b9:
45:c8:f2:74:e8:56:66:81:9b:58:f7:8e:c5:7c:fc:25:3c:50:
f6:04:74:ab:2f:49:85:b0:46:5f:77:de:9e:99:d3:18:0f:9d:
ec:73:5c:8c:f5:e8:87:02:09:ce:cf:c0:a5:10:88:27:ca:de:
25:14:31:b0:d9:4c:7c:44:a6:ec:38:d6:90:be:f7:13:46:dc:
30:9a:9a:af:2d:f5:20:95:68:91:0d:0e:2a:2a:91:a7:2b:7c:
18:9d:5f:7f:0e:40:c5:b3:94:bd:f2:f6:eb:ce:3f:89:8c:1d:
ba:4e:65:22:0b:51:68:e9:a8:f5:74:6d:40:3f:48:09:a1:f8:
34:73:33:82:e6:d1:07:07:3d:72:83:f0:af:0d:52:b9:75:96:
7a:5d:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:46 2024 by rpki-client on console-fra.rpki-client.org