Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: Z+XHB/Z00lU3+Qu6bEEYHoErnLZ2ykshHJhyW/0nosw=
Subject key identifier: FE:95:3D:76:88:F1:7D:99:2E:D5:12:68:AD:2C:B8:2D:21:10:55:7B
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01935878A859A1A6140FFD9C7A449C3C0CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1305
Signing time: Sat 23 Nov 2024 10:02:02 +0000
Manifest this update: Sat 23 Nov 2024 10:02:02 +0000
Manifest next update: Sun 24 Nov 2024 10:02:02 +0000
Files and hashes: 1: 1-ANmxg8oy_psJGEOt7au85eaFW8.roa (hash: VSnJwSK7kT4JW2ClusDAj/2VI978TSeBacoTecoMXfs=)
2: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: TuftWnn8IPtf1dq4sV34p5qfoeNMXoW5INDpu5GStew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:a8:59:a1:a6:14:0f:fd:9c:7a:44:9c:3c:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Nov 23 10:02:02 2024 GMT
Not After : Nov 24 10:02:02 2024 GMT
Subject: CN=fe953d7688f17d992ed51268ad2cb82d2110557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:5f:07:27:72:07:83:16:97:b7:48:03:2d:
a3:2e:b7:45:1d:69:f8:5a:cd:5d:84:51:6c:c5:07:
2f:b4:20:c2:14:aa:bb:bf:2b:80:d5:49:6e:f6:9e:
e4:a8:57:2f:4b:2e:36:15:5d:f1:f0:04:f4:4d:8d:
bd:8a:d2:45:f0:34:0e:67:e6:99:2d:b5:9a:3d:2a:
ce:fc:54:28:68:5c:0b:79:ab:e7:03:6f:95:8c:41:
e7:87:5a:f7:83:03:f7:fe:35:47:be:02:7a:61:27:
15:a6:9f:25:3b:22:55:61:a9:96:51:26:3e:44:fe:
21:30:af:19:fc:2c:7c:21:45:57:cb:f0:66:85:dc:
4f:30:ed:b8:dd:7e:8c:78:20:c6:9d:d0:39:bb:e4:
d0:15:23:a8:b4:ee:b8:8e:2c:9c:06:6b:00:62:d5:
b4:81:80:b8:eb:ce:ae:0c:00:ad:20:77:db:b8:42:
4f:18:e3:21:86:28:2e:63:50:39:df:d2:4d:bd:32:
b2:7e:f7:2c:cc:cc:11:09:d4:3c:f3:3d:02:bc:50:
cc:da:86:42:b5:aa:59:1e:70:8a:b3:5a:35:c1:7e:
af:2c:e1:5e:a9:88:92:3a:a2:60:dd:7e:08:f3:74:
51:04:1b:c6:28:19:67:d2:c0:d4:c1:3b:eb:f1:58:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:95:3D:76:88:F1:7D:99:2E:D5:12:68:AD:2C:B8:2D:21:10:55:7B
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9a:06:ea:f3:4e:6b:86:07:64:45:f4:6d:76:16:a4:63:13:
60:56:05:c5:14:2a:b6:c9:2d:e7:4c:a1:6f:79:21:62:f4:02:
ed:99:ef:52:ec:44:82:78:0a:12:56:a4:98:4e:a7:e2:f2:cd:
87:4a:e6:0b:0f:10:d8:31:d8:61:b7:7a:24:dd:c6:11:ed:68:
5c:1d:d4:a0:20:45:e5:36:e5:c3:61:ab:72:52:d0:79:0f:ba:
78:17:29:f7:ef:78:60:07:2d:b0:f8:5f:13:a4:c1:bb:9d:58:
45:af:20:0a:00:21:aa:cb:ca:23:98:4a:2b:6b:b8:a7:b8:ec:
c6:ea:d9:bf:47:5d:66:2a:c5:f4:f1:9b:a4:55:3a:77:f7:eb:
98:95:6c:fe:31:9d:e7:f5:92:ab:28:ab:81:19:4b:39:72:ad:
6c:a8:d5:02:93:f7:e2:54:80:90:d6:36:e3:fc:c4:af:ac:c8:
ee:38:06:54:a1:bc:ad:49:1f:b0:46:0d:16:de:b5:c7:1a:b3:
d1:32:23:ce:c6:f3:c3:9c:b7:b3:14:a7:23:e4:d3:fd:1b:9f:
63:18:b1:71:de:0b:97:dd:d9:80:31:2e:f1:48:57:90:e8:bd:
cc:e3:fe:f9:bf:64:1e:a3:0f:10:03:55:0c:a9:c2:f2:e7:51:
9a:8c:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:20 2024 by rpki-client on console-ams.rpki-client.org