Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: ALCEg0+oxccF+jA0a+Bos01XmT5/YZkfbW/0SJagI0A=
Subject key identifier: F3:72:32:8A:8B:60:B2:C6:C6:BF:25:7C:75:57:B8:EA:A2:82:14:09
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01935351430111EB767E25623FDD9B24AA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 0572
Signing time: Fri 22 Nov 2024 10:00:54 +0000
Manifest this update: Fri 22 Nov 2024 10:00:54 +0000
Manifest next update: Sat 23 Nov 2024 10:00:54 +0000
Files and hashes: 1: C256pPN_PsZtU4myaou2sHMt5RQ.roa (hash: pdTYgA7UYsEE1ZgAJuKGbyNH0+gnfw4uHVivZPfS/4M=)
2: GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa (hash: VJgwDzyWeEp30L2NHlJkINmAnvvMlGHrUGh+V6TsGcA=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: w9slyqo7MgWSWZGCVzkJhPh3r2ujJmAcRf6bJREJgXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:51:43:01:11:eb:76:7e:25:62:3f:dd:9b:24:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Nov 22 10:00:54 2024 GMT
Not After : Nov 23 10:00:54 2024 GMT
Subject: CN=f372328a8b60b2c6c6bf257c7557b8eaa2821409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:b4:21:c8:78:f9:0a:66:d0:61:29:a3:92:
ac:fd:9c:55:18:eb:1b:94:a9:60:7b:68:5e:46:75:
97:37:d0:d0:10:01:44:cf:3d:de:a3:a5:2b:18:d5:
6f:7b:50:f0:e5:37:c4:5a:f7:e2:9e:db:04:05:61:
53:7d:bd:b8:47:27:aa:fb:fe:35:49:24:87:61:12:
78:a6:a3:31:b9:74:44:b6:1a:5b:b0:b2:39:3b:18:
08:c3:02:d5:2d:7d:89:9e:49:6c:ca:07:57:2f:5e:
94:a0:71:ca:06:6c:2b:c6:40:f0:bf:cc:5e:66:e2:
18:8e:4a:a4:42:fd:6e:96:01:ac:f0:37:ee:70:d7:
23:9b:9f:59:8a:4f:9b:83:b1:89:b1:63:7c:9a:5b:
d7:5d:28:69:0f:05:74:b7:49:6d:03:9f:4c:05:79:
91:91:58:eb:1a:61:76:48:9d:55:52:3a:7f:20:b2:
a4:9d:bd:0c:70:75:4d:d8:22:5f:09:7d:6a:c6:ce:
81:7d:e4:7f:75:22:9e:78:f0:25:b2:10:c2:fd:4c:
b2:22:1f:50:80:35:0d:7b:b9:02:cd:af:96:fb:e5:
b5:0e:5d:1b:c6:63:ca:78:95:1c:35:85:cb:d3:ac:
09:ec:37:25:7c:62:95:95:3e:83:6d:be:40:c2:23:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:32:8A:8B:60:B2:C6:C6:BF:25:7C:75:57:B8:EA:A2:82:14:09
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:bc:37:2b:84:13:7a:09:15:26:9c:bd:ef:a9:6b:28:d5:
68:dd:c4:8a:62:41:43:12:be:f2:47:70:3a:55:34:bb:7b:29:
a3:a0:bd:f4:91:57:a6:86:f0:f4:83:c6:2b:95:cb:dc:bc:75:
cd:4b:65:1c:66:7d:cd:9c:38:77:dd:73:99:d7:6d:52:9e:ea:
5d:49:b3:bf:5a:3a:3c:e9:ae:3e:e4:0a:85:e2:93:5d:c5:ad:
92:24:2f:0c:78:35:b8:83:ac:72:d6:2c:33:a6:88:da:60:f5:
e4:56:69:68:a6:85:e4:62:83:0d:1d:a1:71:a3:29:25:ea:b4:
a9:70:53:78:71:f6:7a:6f:88:7e:6f:45:1e:73:00:f6:c1:92:
06:f1:27:7e:3c:e4:00:9f:2d:d3:cf:e1:8e:40:55:c4:9f:0b:
2d:da:6d:d9:06:34:bb:01:a7:03:90:2d:5d:ad:33:b4:20:72:
ee:3f:2a:64:20:86:17:55:8e:34:2e:e0:8f:7c:72:d5:7f:66:
39:37:5c:aa:77:d9:94:d6:40:c2:d8:ec:b8:af:54:fe:16:82:
ae:30:b7:dd:9f:72:ab:34:a7:9a:8b:af:e7:80:4e:2f:39:73:
d4:d5:8c:5b:d6:ee:54:5e:fd:f9:be:5e:60:79:fb:41:6e:2a:
97:f9:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:43 2024 by rpki-client on console-ams.rpki-client.org