Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: W7SBEM8TzQdiTntNtg8s9cj0g8wFhSfCoJqYRSxu5ys=
Subject key identifier: C7:89:9F:D1:CB:0B:42:E7:0C:93:99:8F:AD:87:34:4E:DE:A4:3B:19
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 01936A7DE62A49CEF912BF11FC0C16ACAC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 0F74
Signing time: Tue 26 Nov 2024 22:00:55 +0000
Manifest this update: Tue 26 Nov 2024 22:00:55 +0000
Manifest next update: Wed 27 Nov 2024 22:00:55 +0000
Files and hashes: 1: 1I9Y2eT9qRfiaGCqOCKF4eR8zFg.roa (hash: QDKthJY/wQarLsZeuwPLcrhYvhcS1yGYjPVrqB2aceI=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: yM5ngQezX2v80o5MhydQyc0+D6uViOLs1zp5OPeN+Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:e6:2a:49:ce:f9:12:bf:11:fc:0c:16:ac:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Nov 26 22:00:55 2024 GMT
Not After : Nov 27 22:00:55 2024 GMT
Subject: CN=c7899fd1cb0b42e70c93998fad87344edea43b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:f7:ee:07:2d:bd:c2:82:f0:d9:42:43:7b:
44:43:76:49:38:ac:88:ba:84:7f:dd:3e:3d:dd:ae:
bc:d5:57:ba:06:ef:6d:5d:ed:f8:aa:0d:b0:6d:ab:
0b:56:55:8e:72:00:bb:73:77:3f:88:48:40:1b:07:
6a:cf:5e:20:98:ec:93:47:21:a2:fc:cf:af:44:5f:
d2:b3:95:31:47:06:a3:3d:07:0b:fc:2c:9b:3a:cb:
5a:31:cc:4a:6b:77:3a:50:6c:fb:22:34:ab:17:66:
7c:f4:ce:28:6b:cf:bb:4a:32:91:b2:3e:77:08:46:
68:7c:c4:a0:ad:a6:3e:cb:ef:69:55:b7:fe:53:6f:
61:55:5b:79:8d:92:26:20:25:48:b7:fd:8e:c1:ac:
c8:00:e2:61:41:42:f2:1f:5a:93:1c:07:84:4b:98:
d0:9d:52:08:f9:df:ac:59:41:d5:6c:8f:10:73:a5:
fb:90:5a:91:35:7f:e0:f5:28:2a:c7:98:0f:4a:81:
0c:47:da:32:9f:a1:84:78:31:d3:e2:db:b1:26:6c:
0c:59:f9:50:2c:a0:bf:7b:ec:a3:a5:e7:95:f0:fe:
54:64:79:98:9c:e9:9f:68:1c:b6:b5:af:4a:7b:84:
5b:f6:0a:fe:19:78:96:ca:f8:81:4d:6e:78:b3:23:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:9F:D1:CB:0B:42:E7:0C:93:99:8F:AD:87:34:4E:DE:A4:3B:19
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:ba:c8:51:64:99:ac:5d:d8:1d:59:36:b1:12:90:e0:6c:
9c:b8:59:03:53:f3:fc:8b:34:c3:1b:fd:96:7e:50:a0:9e:74:
ca:0f:5e:44:fa:88:b3:83:d5:fb:a3:d9:6f:e5:86:12:77:ed:
15:5c:db:4b:c6:2b:60:03:ec:0a:1d:f5:26:70:d1:02:7f:bc:
98:f4:c5:fe:fa:02:3c:d5:97:3d:0d:fa:28:26:1f:79:8c:ba:
eb:b4:9d:24:a4:99:bb:19:c0:f7:6d:7b:c0:99:ef:ec:ce:c5:
9f:69:8d:fa:11:4c:57:8c:2a:e7:da:08:ac:83:21:38:a4:db:
63:2a:a2:67:28:4e:b4:d0:2c:d3:06:18:ac:cf:92:bb:e1:69:
57:3b:f4:8c:2b:e7:a6:0d:db:ec:72:3c:e1:85:0f:30:4a:e8:
8c:90:bc:8e:2a:7b:fa:8c:b0:a0:69:d5:58:26:19:83:77:9b:
f7:ae:f9:cd:d9:4b:e1:86:19:1b:71:96:30:73:a8:b1:96:f4:
eb:07:5a:12:a9:5d:ee:12:c7:c6:70:57:34:b7:9b:ea:9c:c9:
b7:06:cf:a3:aa:ff:57:3b:5a:53:bd:cc:e6:8c:f6:d6:9d:09:
bb:eb:31:56:53:3a:bb:44:cb:60:48:e4:0c:96:0a:f9:86:d2:
37:fb:f6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:38 2024 by rpki-client on console-ams.rpki-client.org