Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: 1GKxLGrtBQaHlt09/avnAT5ZgiyqlXm75Grs/1WgHEk=
Subject key identifier: 2F:96:84:79:89:AA:14:28:81:D5:65:0D:18:F4:1A:4D:2F:F9:FE:3A
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019357D2B0FF3A8FD9F5336493D152240C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:45 +0000
Manifest this update: Sat 23 Nov 2024 07:00:45 +0000
Manifest next update: Sun 24 Nov 2024 07:00:45 +0000
Files and hashes: 1: 9jFRvc9cWxFkibjPG_VE_ajs5rY.roa (hash: Dmd3paqWfxaZ/oBNBvhDXeBblh8Ensu4M+zoITznxo0=)
2: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: Orbs0S0Eap/hZkP4vunaxPmFHgNNGUJIjIZg402LMl0=)
3: vX5101xnxHIx1jeLVj591XJ8Ikc.roa (hash: 4IZEZMSx26KemhJQGF99gigndqt+5CkwjlPeZas5QAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:b0:ff:3a:8f:d9:f5:33:64:93:d1:52:24:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Nov 23 07:00:45 2024 GMT
Not After : Nov 24 07:00:45 2024 GMT
Subject: CN=2f96847989aa142881d5650d18f41a4d2ff9fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:d0:f2:be:42:c2:a7:8f:d8:27:03:3b:4a:
df:d2:10:a4:09:6b:96:a3:16:76:ff:e5:30:26:bb:
4e:c2:bf:75:8c:fe:94:6e:bc:f0:db:b7:63:c5:3a:
d6:30:bb:dd:a1:80:3e:2a:09:8e:42:c1:ad:94:31:
fa:cc:ec:c8:9f:6d:86:28:6c:51:da:77:c6:80:ce:
b6:28:a4:86:84:a7:1f:10:30:e8:40:5d:2c:13:7e:
2c:41:23:a0:3e:74:10:f9:be:23:b0:2e:73:22:c9:
c7:00:d6:f5:75:fb:66:4d:dd:a8:94:c6:1e:fd:11:
77:fb:7a:37:46:9d:1f:e3:09:37:03:37:4a:6f:bf:
17:eb:76:b6:44:2b:91:73:0d:52:02:a4:53:20:15:
19:78:3a:a9:0d:af:ab:d4:c7:4d:bd:b1:41:11:8e:
e1:e3:64:10:9e:27:01:95:ee:12:45:80:6e:15:c7:
43:b5:bd:0c:f4:03:a3:c0:b9:3a:40:ee:76:7b:d6:
22:49:df:f0:36:54:5a:2b:4c:56:32:8a:73:1d:dd:
26:84:ad:d9:0e:b2:98:f2:bc:a3:5e:fc:4c:4a:a6:
68:e5:34:c8:28:22:d2:31:59:59:fe:01:e5:6f:de:
c1:af:c4:fe:af:0c:66:d7:c7:a8:e9:30:a0:c2:ef:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:84:79:89:AA:14:28:81:D5:65:0D:18:F4:1A:4D:2F:F9:FE:3A
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1b:83:cc:53:09:6d:0c:b3:00:ad:05:6d:d6:b9:b9:b1:b6:
13:f5:42:15:5f:67:fa:4f:c7:80:8e:f4:c1:39:98:f9:87:e7:
bb:41:74:01:dc:9e:ed:fe:eb:b9:d9:a0:5a:05:e1:09:fb:5d:
f7:7e:df:16:98:1a:67:1d:4e:02:4e:75:b7:45:2e:86:c1:11:
66:51:5e:72:08:f5:10:d1:37:67:6b:94:d5:d1:ec:4f:3a:3a:
41:0d:45:2d:8c:f1:b9:3a:de:e8:eb:09:7d:cc:41:d0:8c:15:
f5:a3:7f:2a:b6:c0:05:45:af:25:30:f7:35:c1:90:e9:69:e3:
4c:c6:d3:a8:32:30:eb:1f:9f:9b:0d:7a:62:45:24:aa:13:ab:
e7:91:13:84:f7:36:8c:0b:c9:bc:44:a9:63:9f:50:6e:6a:77:
17:f8:4a:5d:58:47:38:3e:3e:86:4e:9a:48:0d:16:3e:a7:a7:
53:23:e1:6d:0e:bf:76:be:d3:08:59:52:28:b3:b5:56:6c:d4:
6c:f4:9f:1e:60:d0:d9:a0:9c:a9:ed:97:3f:af:d1:3c:56:c9:
0a:5d:0e:6a:26:7d:71:50:7a:85:b5:f6:05:37:e5:1d:df:0b:
11:2b:d6:32:15:1b:2c:8f:23:04:38:02:ff:58:72:e4:8a:50:
96:ad:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:50 2024 by rpki-client on console-ams.rpki-client.org