Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: EdWdRqHD/Gkjz7arJ1fHAIkUcP3AI3CCCtT1k5+PBuo=
Subject key identifier: 10:31:74:41:F7:C2:E2:C7:8C:A5:06:BF:66:0E:32:71:95:07:CD:05
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 01920EE0F6653D196A3267D9F74A10F618B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 04CA
Signing time: Fri 20 Sep 2024 10:01:17 +0000
Manifest this update: Fri 20 Sep 2024 10:01:17 +0000
Manifest next update: Sat 21 Sep 2024 10:01:17 +0000
Files and hashes: 1: C256pPN_PsZtU4myaou2sHMt5RQ.roa (hash: pdTYgA7UYsEE1ZgAJuKGbyNH0+gnfw4uHVivZPfS/4M=)
2: GLOuJbP4WwuhIeT7vQRSpSNbrO4.roa (hash: VJgwDzyWeEp30L2NHlJkINmAnvvMlGHrUGh+V6TsGcA=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: xuli0TwJQRU2tofqoIKzJlKo8eDpqXXzxl5di8PQ70k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:e0:f6:65:3d:19:6a:32:67:d9:f7:4a:10:f6:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Sep 20 10:01:17 2024 GMT
Not After : Sep 21 10:01:17 2024 GMT
Subject: CN=10317441f7c2e2c78ca506bf660e32719507cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:29:e1:4f:15:e0:df:7f:e8:88:6b:cc:95:
8d:9a:35:44:eb:7f:c3:6f:9f:e7:1c:a4:28:5e:78:
7b:f9:88:a5:11:1a:91:30:a5:fb:23:ba:23:e7:25:
ef:d8:7e:7d:ca:69:bd:31:4e:ad:4c:2f:c0:fe:00:
da:d1:a2:88:9c:87:36:95:b6:d4:11:f0:7e:2f:ea:
8c:0f:01:7a:6e:1a:d4:b3:fd:f0:9c:53:c3:23:53:
e0:cc:f5:9f:82:e3:46:14:ab:df:8c:2e:fc:03:13:
10:66:6c:7d:cb:0d:7e:5b:c0:2c:a7:54:2d:40:46:
51:28:b1:f3:4e:d6:33:92:d2:89:9a:77:11:39:50:
67:89:12:92:05:a6:90:b1:d2:c6:7e:48:f3:03:a6:
42:c8:57:0e:53:cb:40:3a:85:fd:67:c1:9f:eb:7b:
58:02:16:f1:d3:6c:23:65:7f:b6:17:7c:cf:45:14:
af:05:c9:66:a3:3b:fa:a0:5f:aa:b4:c9:27:64:c3:
ee:ce:47:42:8e:84:be:1c:6f:1a:18:78:ce:cb:02:
aa:3b:c5:24:97:ef:37:e2:1f:68:53:9e:ec:ab:4b:
7d:b1:9f:11:3a:ec:29:75:cd:e2:6b:51:b3:dd:ec:
6e:2d:13:ce:ac:0d:7d:23:b1:7e:03:25:32:c9:d1:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:74:41:F7:C2:E2:C7:8C:A5:06:BF:66:0E:32:71:95:07:CD:05
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:3e:79:4c:57:47:5c:1c:f0:00:00:38:42:aa:24:5e:3e:
b2:54:d6:40:6a:df:1d:82:6c:e5:35:75:79:68:9f:82:44:98:
e9:72:a4:b3:ae:d9:34:ae:a3:69:ba:d4:3a:29:ae:3d:78:54:
f6:d0:4b:83:22:29:c6:54:c5:26:8b:f0:87:36:52:6a:06:d2:
b4:52:fa:6c:65:6c:d9:6a:8b:6d:de:e1:f3:d1:92:73:56:b6:
a8:1c:30:13:74:53:1c:04:15:21:6f:a2:0b:52:f7:e3:77:87:
40:d9:19:47:de:6b:54:d5:4d:bd:87:a8:b5:51:b8:c6:33:17:
eb:ef:a7:ec:81:58:60:cf:4c:c6:04:1f:dc:9e:95:8c:89:7b:
32:b7:41:c3:fe:8d:0e:c7:62:c7:1f:3e:d3:14:71:ea:4f:fb:
29:9c:5f:dd:18:55:60:9a:30:00:d2:fa:e7:f6:8a:1f:28:fc:
c5:c4:3e:aa:fe:3b:c3:5c:e7:00:f0:fb:41:f6:0e:cb:d3:cb:
5b:dd:f5:4f:ca:92:91:59:53:16:76:22:05:fe:80:53:84:5d:
ee:57:fc:6b:39:16:f6:a1:1a:32:00:eb:eb:a9:a2:21:36:3f:
e3:fd:a8:36:e5:21:7a:87:c8:2b:4e:dc:91:cb:b7:43:4b:4c:
3a:c1:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:26:40 2024 by rpki-client on console-fra.rpki-client.org