Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: +b1Sj3/F7911wWsNVkUCzh64Numt7cizyj/V/TTMu4I=
Subject key identifier: 16:6A:6B:57:00:99:E8:30:02:FC:71:E7:33:FA:20:2C:0A:3B:BD:EC
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 01923AA902639AD3CCBFA49E15B6CFAB3F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0CBA
Signing time: Sat 28 Sep 2024 22:03:27 +0000
Manifest this update: Sat 28 Sep 2024 22:03:27 +0000
Manifest next update: Sun 29 Sep 2024 22:03:27 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: jnlEMbv+qB4+esm4/pBGx4ug7OQalps3PQsxbyQK4qk=)
2: rG9cvCTt1xak6gebuKHQfVNbYYo.roa (hash: WczdZQF4gzZSDGGx6UFjSjfQ7Z6TMvg8Fsj9/gLdr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a9:02:63:9a:d3:cc:bf:a4:9e:15:b6:cf:ab:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Sep 28 22:03:27 2024 GMT
Not After : Sep 29 22:03:27 2024 GMT
Subject: CN=166a6b570099e83002fc71e733fa202c0a3bbdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:50:0d:97:5f:c4:fa:1b:4d:5f:16:c3:c0:
2e:5a:d2:33:cb:4c:4b:29:2d:62:a9:0f:cb:de:ec:
53:d3:f9:e8:91:38:6a:ac:df:23:4b:91:0d:92:f9:
0f:2f:f5:cf:58:77:37:15:6d:fe:a4:d0:3f:69:9d:
5c:74:19:3e:71:5d:93:c6:7c:37:d9:30:c6:96:aa:
b7:fe:c6:d9:b9:eb:0d:d9:7b:f9:1f:66:ce:b4:50:
ee:03:e5:20:88:14:52:2d:bb:58:95:3a:2c:1f:36:
94:97:fd:02:b1:84:16:d7:4b:f3:c8:c6:b3:2b:e3:
44:38:43:36:1e:af:7e:18:34:58:9b:7e:20:0e:c8:
28:5b:89:3c:a4:6c:69:d2:b6:94:5a:38:1c:66:38:
96:7b:ef:16:47:a8:f4:b7:af:83:eb:37:57:56:9e:
1a:41:db:59:45:a6:d2:24:d4:84:ad:7e:4b:39:44:
d1:fd:7f:73:5b:c8:f7:8c:1e:06:3e:bc:09:34:22:
aa:b9:46:ca:96:4a:9f:50:cd:62:1d:c1:ce:ed:33:
58:45:3d:2c:b7:fc:8d:9d:7a:4d:af:31:70:e8:13:
fd:c0:50:88:65:35:ab:7b:b0:f6:78:4e:52:3e:f1:
26:37:d6:78:e5:89:fd:56:e5:08:7f:5a:64:29:61:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:6B:57:00:99:E8:30:02:FC:71:E7:33:FA:20:2C:0A:3B:BD:EC
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:86:2c:31:6c:83:5d:ef:e7:d5:08:56:4f:be:35:a2:29:
7b:40:97:3d:de:b8:6c:ca:2f:63:4e:c6:ea:4b:20:e1:72:c8:
d5:fe:02:31:e2:7a:58:a7:7b:14:44:1c:3b:4a:27:6d:0e:0b:
22:ba:43:0a:56:c2:f7:6e:c1:a7:dc:cf:8b:e0:b1:6e:84:6b:
b3:9f:95:24:57:3b:78:10:57:9b:40:ed:fe:19:09:ab:11:b9:
31:aa:f3:26:81:9c:ea:2d:df:d4:c6:67:99:f3:b9:65:6b:d1:
34:0b:1e:45:b3:6f:ec:47:4c:1c:4c:d4:1c:37:68:77:4b:a8:
ce:c5:df:97:bd:9f:01:e3:7d:de:7b:7a:e2:32:13:2c:91:9c:
c6:9a:55:52:76:08:e0:49:c2:ef:62:de:af:c2:3e:05:11:21:
0d:71:f7:7a:64:fc:87:1a:93:83:56:19:dd:18:c1:90:31:c1:
a4:65:7c:61:1d:19:ee:3b:b2:85:e6:4b:b2:bf:9a:d2:ef:4e:
01:4e:75:c1:87:10:c5:8c:e6:96:ef:1b:27:f9:79:8c:c0:6b:
ec:e8:14:c8:d5:43:8c:0d:8c:5e:fb:0a:f0:71:45:e7:9b:25:
12:de:42:92:a8:15:d5:a7:e0:8a:38:94:96:b3:ff:88:86:da:
e4:02:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:54 2024 by rpki-client on console-fra.rpki-client.org