Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: CiLsnORyR43no0VX9mk9w5LhHEG4ovWLa2nbh3TNGNM=
Subject key identifier: 60:B9:1A:1F:55:F1:E9:F3:01:64:04:03:20:35:B2:3F:EE:FA:52:0B
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 019368C5F7140E8C930C5F101CEB6C363673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 14:00:24 +0000
Manifest this update: Tue 26 Nov 2024 14:00:24 +0000
Manifest next update: Wed 27 Nov 2024 14:00:24 +0000
Files and hashes: 1: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: m8P0vuDHNjc6VjIwRuyTlh8yeLLWc7ItITLawLn1s5k=)
2: r6KVKHwG7ZmmDdN6EMlWydalHCI.roa (hash: UQ/Ntt5n7b/D0x6E+3XPTTOLtzEIrhQQ+7PSQWqquUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c5:f7:14:0e:8c:93:0c:5f:10:1c:eb:6c:36:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Nov 26 14:00:24 2024 GMT
Not After : Nov 27 14:00:24 2024 GMT
Subject: CN=60b91a1f55f1e9f3016404032035b23feefa520b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:a7:30:61:53:62:26:06:4d:96:1c:0b:2b:
6d:82:48:f0:6f:b0:8c:9e:4f:e9:da:a2:3d:dd:d0:
34:1d:41:57:b7:14:4c:1b:e9:65:f6:23:42:dd:bd:
95:f8:fa:72:e2:92:af:86:db:d1:07:2a:62:aa:c0:
59:42:8f:75:8a:68:97:5a:87:34:1a:ba:47:e1:9e:
64:31:44:e4:89:84:c0:94:83:1e:36:62:80:35:4e:
48:e6:a5:c5:f6:ba:87:ed:8e:ee:c4:6f:f7:18:b4:
8a:b3:f1:92:d6:37:10:72:3d:c1:44:ed:00:66:b9:
eb:6f:68:ca:c9:cb:c1:71:4b:af:35:22:ef:73:33:
7f:43:f7:83:88:4b:78:c3:d8:f9:58:66:da:e2:00:
f1:c8:72:36:81:ef:c7:8f:cc:5c:2b:3e:bc:be:4c:
3f:86:20:5e:56:b2:ea:33:24:d9:ef:77:93:66:81:
e8:97:c5:fb:0a:f1:75:80:99:2c:72:92:a1:ec:f3:
f2:45:68:52:b4:e4:d6:87:6e:98:4e:81:39:b8:65:
aa:5f:84:67:da:b3:ea:dc:27:a6:d5:7f:83:f5:bc:
99:d6:d7:bc:de:ab:40:3a:00:b6:ec:fd:36:c7:3d:
5f:e7:6e:64:47:0e:cc:eb:70:29:1d:4d:f8:01:f0:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:1A:1F:55:F1:E9:F3:01:64:04:03:20:35:B2:3F:EE:FA:52:0B
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2b:99:a9:51:e4:1c:af:10:ef:2b:da:90:64:bb:07:e7:7c:
e0:c0:0c:6c:f7:9e:d2:38:bc:b4:9d:ea:8b:54:df:60:02:9c:
d2:b9:a7:cc:a7:1e:6c:f9:cb:3a:b8:95:a0:ca:1a:b3:54:30:
a1:dd:d2:a6:b7:24:26:04:91:69:10:24:44:21:10:79:e1:ed:
19:aa:9c:d8:95:93:6f:40:bc:d7:e9:69:20:5d:33:71:4b:fe:
fc:fe:98:db:67:26:c5:97:b6:1f:47:6b:ab:3e:a4:31:50:35:
64:86:97:16:0c:ac:69:7b:d1:60:8e:45:2e:59:47:cc:9f:fa:
d5:d4:97:00:c8:2f:aa:7e:5a:d1:91:15:12:3a:d5:75:e4:f4:
04:a9:fa:99:85:f0:b2:1f:6b:7a:57:e3:72:5a:ba:11:0d:67:
9c:e3:ed:bf:04:31:12:ba:aa:7a:8c:04:20:e8:e5:c5:1b:9f:
f3:a6:c7:d0:83:57:fc:e1:5b:c3:05:64:71:ad:cf:03:70:1b:
8c:36:28:f4:18:39:c4:7d:2a:8f:58:22:65:77:70:e6:f7:1e:
9a:6d:5b:c2:3b:bf:68:f7:bb:6d:85:d6:d0:a8:70:2a:7e:79:
1d:e2:8b:17:11:c4:e4:01:00:ad:c0:b8:5e:f4:3a:b5:d4:a7:
9a:da:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:56:32 2024 by rpki-client on console-ams.rpki-client.org