Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: muq2aFkPehWLtKLBbjqmeYscbC55QqsqG3XAGK9ix8s=
Subject key identifier: 41:82:E8:1E:01:75:25:55:83:25:5E:F7:18:72:9F:92:BB:4A:4B:01
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 0193579BD49119719CE3553DBDB12CEB7059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 06:00:50 +0000
Manifest this update: Sat 23 Nov 2024 06:00:50 +0000
Manifest next update: Sun 24 Nov 2024 06:00:50 +0000
Files and hashes: 1: OhwAiRNpDTCkNFwuIs2CxbC9kGI.roa (hash: 7+2unKH4JNpun1PsR/SQn7Cw+z/tN0QBXMC+wqFgm9U=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: ctwh6uHetFMKCCb46fdSRH9pN/wKAHJx/yXTdXbjbDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d4:91:19:71:9c:e3:55:3d:bd:b1:2c:eb:70:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Nov 23 06:00:50 2024 GMT
Not After : Nov 24 06:00:50 2024 GMT
Subject: CN=4182e81e0175255583255ef718729f92bb4a4b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:2c:b3:82:81:11:6e:02:c9:35:3d:36:9b:
44:dc:6f:f8:2e:ef:e3:ba:ee:6b:ea:79:5a:25:e3:
64:a3:df:79:45:3c:da:18:7c:81:ea:4a:a9:e3:e1:
5a:bb:83:bc:2a:e4:82:32:1b:00:f0:28:81:c5:19:
ae:bc:d7:77:02:1f:e4:1a:e6:20:44:3e:14:c9:9a:
4f:e7:e4:dc:be:f4:99:e4:7a:c1:27:ce:86:a0:31:
67:12:53:84:53:95:8d:87:0b:9a:c9:38:98:01:f0:
2c:44:d5:c4:a8:ae:03:7d:6b:95:29:99:19:c7:76:
5d:7d:6c:b0:d3:8d:82:2f:b1:95:5d:f4:47:f5:e1:
6d:c0:1b:9d:f5:d9:e8:f5:25:46:78:f6:61:70:b7:
d1:35:29:0c:56:85:28:41:3a:3c:b2:6e:fa:59:02:
ed:aa:df:7a:8e:0e:38:9e:dd:15:a6:89:f1:e8:56:
61:00:5c:47:36:9c:7c:20:c9:bc:b6:73:8b:80:25:
24:76:3f:5a:ed:32:3c:01:ea:3e:f5:94:7e:f7:3b:
c0:88:bc:1f:ab:04:0c:3c:f7:0c:64:6f:56:09:5c:
c0:3f:8b:02:d8:9b:1c:f4:fb:6b:19:ef:83:59:49:
90:05:6f:4c:6e:d2:d5:f8:01:75:63:cb:bc:1d:c1:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:E8:1E:01:75:25:55:83:25:5E:F7:18:72:9F:92:BB:4A:4B:01
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:56:5b:cd:c9:cd:77:cb:b9:da:c4:cf:e4:e3:79:5e:e4:36:
80:3f:56:88:7c:3f:53:e2:e1:11:18:da:7e:89:a6:c9:8b:d5:
fd:af:31:52:1d:b9:86:23:1f:77:f7:8e:95:a1:45:f3:70:fd:
ff:c4:e8:36:44:7d:0a:ca:ca:ec:17:89:a1:69:e8:7c:c9:6a:
15:0c:26:59:ff:3d:1e:8a:53:c5:33:fa:77:6c:40:ce:06:25:
29:02:85:50:ff:e4:f2:20:e8:a7:b7:45:e3:ad:8c:bc:c1:7f:
00:13:46:2b:87:39:6a:5c:29:e5:ad:2e:c2:2b:72:dc:77:da:
18:3e:c5:7f:56:42:62:34:6c:34:b2:47:91:c2:85:ff:ee:71:
64:85:16:2e:25:67:51:9a:e1:61:bb:20:92:41:94:4d:be:b2:
40:85:5b:e9:75:86:c6:cb:bf:b5:67:53:33:95:c7:cc:f6:0a:
d1:f4:02:b9:b7:6c:08:ef:5a:c0:04:90:fd:ce:0d:f6:cb:11:
10:1d:c9:7a:52:fb:de:8c:0b:8d:1d:18:33:b3:0d:86:72:a0:
d2:39:85:fc:40:20:8d:cf:27:bb:c8:66:71:88:9a:cc:19:5b:
77:2c:47:5c:d8:fd:4f:c6:82:9e:0e:77:fa:60:66:48:cc:7b:
93:b0:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:48 2024 by rpki-client on console-fra.rpki-client.org