Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: RVYn8X3iRF9lUbPa0UyfZTIsy1yzn8VXXPKpyoFoRqQ=
Subject key identifier: B3:4F:B6:BB:6F:31:0E:F7:BA:B8:91:05:A7:C4:B7:E5:F5:2B:B5:D6
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 0193572E173CA6E00592A49740C41ADB1B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 0F2F
Signing time: Sat 23 Nov 2024 04:00:58 +0000
Manifest this update: Sat 23 Nov 2024 04:00:58 +0000
Manifest next update: Sun 24 Nov 2024 04:00:58 +0000
Files and hashes: 1: 2ECn95bqZfzbT4pZYsOi0zbFQig.roa (hash: wuIkePzrIdK0F4KB+oQWr9nxnJKW9olLgkczKwILb+s=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: lJyiXz6v7fvHYcSfssVVveyC05rYWaOlY3p3pGQeYhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:17:3c:a6:e0:05:92:a4:97:40:c4:1a:db:1b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Nov 23 04:00:58 2024 GMT
Not After : Nov 24 04:00:58 2024 GMT
Subject: CN=b34fb6bb6f310ef7bab89105a7c4b7e5f52bb5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:33:c8:11:14:9d:97:01:cd:21:da:62:9b:
3e:99:af:a2:61:2e:dd:80:a9:d5:e1:cf:66:bd:d3:
f1:cf:81:98:c7:ae:5e:2a:7d:f2:73:94:83:e2:31:
82:ea:e4:93:98:c5:21:63:4b:e3:fd:c6:d3:74:8b:
5e:01:d4:69:4c:28:db:28:9a:11:7b:2e:b3:23:2e:
ff:05:98:79:c6:95:a7:45:de:07:42:c2:79:f0:c5:
fc:2a:a6:b0:f9:6d:f9:be:cd:37:95:10:d1:4b:e6:
81:74:79:35:e4:3d:00:49:78:13:57:c1:30:d8:c7:
62:27:f4:5b:50:ed:e7:13:f9:b0:7f:b1:59:0c:1c:
69:29:c9:4b:0c:79:d8:73:d2:09:11:1d:79:a7:52:
da:ec:18:96:e3:4d:3a:88:6c:13:89:1e:3e:e3:7e:
6a:a6:47:2a:cb:7b:76:11:d5:6f:83:9f:4f:58:62:
b5:89:1c:14:d8:0e:30:92:da:d9:c0:22:a0:fc:4d:
9e:a7:42:0e:05:cf:cd:00:92:a0:9b:31:c4:66:39:
f1:04:c5:e4:dc:ec:42:dd:4b:d5:b5:07:fc:7d:45:
59:59:41:98:b1:dc:ec:89:42:73:ab:a9:5a:5f:0c:
de:bc:3d:3a:98:64:d6:71:ad:8c:72:65:7a:e4:1b:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:B6:BB:6F:31:0E:F7:BA:B8:91:05:A7:C4:B7:E5:F5:2B:B5:D6
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:bc:a6:9e:22:ab:f3:b7:c3:30:7a:e3:a9:c2:6c:cd:e1:
9d:19:09:81:cc:93:04:d1:44:0a:24:3c:45:43:2c:dd:de:34:
71:e2:4e:6c:0b:77:b4:d9:da:a7:c0:77:21:aa:cb:f3:a9:be:
e0:34:79:cc:b9:d0:cf:a0:af:49:33:05:75:b5:f6:56:f3:cd:
d4:09:4d:bf:9f:cf:bd:6d:73:40:d2:d0:a6:6e:e1:fb:fc:26:
75:cb:41:b3:50:61:bb:28:2b:d0:ca:09:5d:68:43:5c:21:d9:
00:79:cc:d4:5e:02:68:d9:a8:93:a8:b2:91:86:34:7f:61:bd:
18:09:6e:6d:27:f1:8d:f6:c2:2f:ca:4d:f4:2d:8d:3a:d5:f9:
96:af:46:19:6b:8b:ce:4c:c8:18:98:5a:ad:fe:37:6a:48:14:
bf:5e:8d:09:b1:4e:bf:98:a2:3c:05:49:f6:2a:35:bc:ea:f6:
36:4f:c1:f9:fe:45:51:54:15:96:38:f8:0d:75:b6:2b:09:d7:
00:3c:2d:55:a0:a2:47:62:60:9c:50:89:df:31:5b:ee:30:f0:
ff:ab:ad:cb:98:f0:1c:89:03:4d:68:9f:cb:46:f3:53:37:49:
71:61:94:7e:0e:aa:6b:47:03:2b:ea:0f:78:45:a7:50:da:70:
78:7f:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:17 2024 by rpki-client on console-fra.rpki-client.org