Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: +wquZRzILA8dseDReSvjCja30PEum3RjhwwP+TA25FY=
Subject key identifier: BF:73:F4:A8:E2:D4:4B:FB:41:77:13:74:0B:C5:3B:60:BD:00:1B:49
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 0193523E3267431171C4B75BBD24E688D012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0AFE
Signing time: Fri 22 Nov 2024 05:00:27 +0000
Manifest this update: Fri 22 Nov 2024 05:00:27 +0000
Manifest next update: Sat 23 Nov 2024 05:00:27 +0000
Files and hashes: 1: LHCsJFt6g2SJOgvMF31Fho8RdcA.roa (hash: CeGsaq5bNd09dWeMuFA3rgnt9YBu0RkcxN0HKdYTN7g=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: EIvcybuoj/F39x4YV+FvMvjPg14RD45pocSluKcEaBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:32:67:43:11:71:c4:b7:5b:bd:24:e6:88:d0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Nov 22 05:00:27 2024 GMT
Not After : Nov 23 05:00:27 2024 GMT
Subject: CN=bf73f4a8e2d44bfb417713740bc53b60bd001b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:d7:4e:6e:3c:fe:64:d6:d7:c1:91:c8:06:
86:76:cd:f6:05:bb:a2:a3:08:6a:d7:aa:0f:6b:2b:
7b:7b:b4:ca:77:c2:f8:e7:62:0b:30:10:b3:64:a6:
d3:42:17:8d:b6:6c:5b:68:25:05:c1:b0:6d:aa:de:
f0:d7:58:a7:0e:ba:0b:06:e0:34:be:4d:3e:97:5e:
3f:79:07:4c:cb:ba:2c:38:8f:c2:0e:59:a9:3e:e8:
23:c1:4f:5e:66:ae:9c:8c:7b:f0:7d:ee:f1:bb:52:
e1:18:a4:cf:77:f2:10:be:7b:20:aa:e6:b1:ff:c7:
4f:3f:2f:d9:12:8a:c5:6b:e5:ba:12:c0:43:c4:62:
1a:42:76:29:07:96:cf:4a:8e:68:7e:0b:6a:70:49:
31:d5:ef:fe:b5:c9:24:f4:e8:ac:7e:22:a1:71:f2:
6f:78:c6:a9:7a:b0:84:d2:f0:18:32:9f:79:47:69:
8d:9d:8a:f8:70:10:57:36:90:d1:4c:04:66:25:b1:
83:30:e1:33:77:7e:dd:4b:93:42:6c:af:a1:9b:0a:
61:17:cd:b7:b9:fc:9d:3b:7c:a9:4d:89:25:65:08:
8c:b5:02:67:53:87:04:8d:c4:3e:56:17:2d:aa:e9:
57:de:0d:7b:9f:8c:32:9b:91:1b:60:c2:67:6d:7b:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:F4:A8:E2:D4:4B:FB:41:77:13:74:0B:C5:3B:60:BD:00:1B:49
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:51:83:ae:67:22:c4:5a:15:14:e2:9e:50:7a:13:fc:ce:
7d:8a:5d:f0:6d:aa:80:10:00:9b:e4:cf:49:c6:e3:55:33:e2:
f8:6a:19:54:09:a0:84:d3:c2:0e:d2:0d:3a:e4:86:8a:df:4e:
af:13:45:a5:1b:04:28:38:7d:92:4c:9d:0c:80:8d:e7:9e:18:
a9:5f:27:40:72:2b:82:f3:00:06:37:f2:8c:80:e2:a2:24:11:
e4:1c:15:c2:f0:55:c0:6e:41:5a:f1:a8:d7:a5:1b:f1:a4:0e:
1c:24:1f:cb:6b:98:c3:9d:a5:69:eb:15:cf:73:74:5b:97:b4:
f4:88:a4:de:72:f2:36:49:d9:d6:1f:2d:ba:db:46:e8:e9:27:
fd:7e:1a:02:76:24:90:9f:6d:b6:aa:4d:9a:f7:00:a8:66:cc:
5e:a1:b1:fd:20:9b:af:ee:59:49:1c:c9:1c:a9:6d:d6:3f:14:
15:68:af:64:72:24:ba:b9:5d:37:db:98:2c:78:fd:9c:30:95:
3c:e7:51:e4:e0:ac:44:75:0a:a0:7c:54:2e:75:88:46:d4:f4:
2d:07:6d:f7:92:07:d3:9e:cb:7a:0a:96:be:81:e7:9d:81:02:
88:91:fc:36:6a:e5:75:00:d3:0a:f0:a9:a9:f5:26:44:0f:6c:
fe:e6:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:11:31 2024 by rpki-client on console-fra.rpki-client.org