Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: lxgs1o6+2/F4WczyfPpTXPMZwQWEpP5BbgTE4jJnnLg=
Subject key identifier: 4A:2C:1C:6C:5B:C0:60:EC:BC:FF:AB:C4:35:DA:00:EA:B4:C3:9E:5F
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0193568A6085FC9D58CD0C3CFE7B990215C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 05F5
Signing time: Sat 23 Nov 2024 01:02:09 +0000
Manifest this update: Sat 23 Nov 2024 01:02:09 +0000
Manifest next update: Sun 24 Nov 2024 01:02:09 +0000
Files and hashes: 1: cMoBDPKLMdi3419NSAc7Udti2q0.roa (hash: bOdk7CgxXeU7+NHvS2lfkjdHi17OUR3Tbm84Oi8GDOQ=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: 9wm7yLLZ/1Bfq0WZmuhLoy5mD5qTclfeFArSPaL17jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:60:85:fc:9d:58:cd:0c:3c:fe:7b:99:02:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Nov 23 01:02:09 2024 GMT
Not After : Nov 24 01:02:09 2024 GMT
Subject: CN=4a2c1c6c5bc060ecbcffabc435da00eab4c39e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:e0:ec:fa:81:a1:55:18:7a:5c:92:62:65:
6c:04:fc:2d:9a:1f:35:c4:c8:dd:dd:c6:ec:42:69:
de:e4:93:2d:fd:81:8b:21:a1:c7:7b:0e:0d:52:19:
aa:4c:36:4d:6b:0e:66:26:7a:fd:68:26:fe:d0:0c:
ac:92:c7:d7:a6:b1:a0:92:fe:5b:c4:74:0b:4a:17:
5c:1c:13:7b:a5:03:a5:f8:4a:e0:b6:ab:0c:f6:59:
bb:2f:d3:0b:2c:8d:d0:22:25:0e:c2:09:44:d4:87:
70:a9:ba:cc:6c:ef:55:ed:85:04:9d:c8:2c:37:fa:
3c:eb:77:25:5c:24:3e:d9:76:74:cc:74:b5:84:e8:
88:b6:2b:05:8b:57:8c:55:47:10:67:9f:18:5a:d7:
92:fe:66:08:74:a4:98:8f:69:56:69:41:07:ef:59:
78:0e:e3:aa:22:94:ac:bb:ba:7d:18:9b:17:bb:bc:
cc:28:d2:60:0b:53:98:b7:0b:e6:ea:78:3f:8b:fb:
2e:bb:71:1e:91:a3:6e:f0:5f:4d:25:4c:00:da:e6:
df:04:cc:85:73:96:11:ed:ec:46:85:83:94:1f:5c:
48:10:15:68:79:6e:49:24:50:fd:21:3e:99:88:bd:
b4:b4:42:09:02:c3:94:c4:b5:42:96:f5:4e:ad:22:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:1C:6C:5B:C0:60:EC:BC:FF:AB:C4:35:DA:00:EA:B4:C3:9E:5F
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0e:9e:03:5e:74:1c:ff:67:69:dd:bb:0e:e5:14:63:4b:b9:
63:5f:db:0b:28:94:e2:df:8a:90:40:11:c3:88:c2:8f:f9:23:
24:78:17:6a:6e:05:b1:e9:b9:b4:97:3e:4b:fa:3b:fd:0a:6b:
e7:c5:cf:e1:c5:b5:a6:88:67:e2:08:da:06:e2:7f:43:db:68:
6a:eb:6f:c9:28:b5:f8:3e:de:f9:c8:d6:fe:4f:61:07:4f:c1:
ab:69:f9:32:74:09:07:d9:43:47:96:e4:fa:17:b0:72:c0:94:
e1:6c:29:17:81:cf:ef:7d:74:0a:1e:24:a7:54:ea:b4:eb:00:
8e:26:97:04:8b:c8:1a:1b:24:56:e0:37:22:45:21:37:80:cd:
ca:ed:96:be:d9:bd:49:e2:cf:26:b4:99:8b:f4:3c:af:db:4b:
39:47:19:b3:45:ad:dd:15:53:7d:33:5c:8f:56:89:21:d8:3b:
71:d8:8f:dd:91:ed:0e:fc:aa:ee:c3:3c:cc:2e:ec:ce:e9:ac:
12:da:c1:bf:b8:75:56:c5:86:d9:fb:a8:14:ec:8b:44:ec:1b:
dc:84:85:2b:71:13:44:ad:f8:16:15:07:44:60:ac:70:e4:24:
fb:d2:2f:f1:88:9e:03:05:b2:fc:5e:2a:01:1a:3c:d0:61:49:
2a:d7:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:12 2024 by rpki-client on console-fra.rpki-client.org