Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: VXzF576pOWokcNkVkMH4W6xOhgHBYl6O6MnLwLWtDP4=
Subject key identifier: B3:D1:63:66:91:48:B2:CB:7E:43:E6:2E:5C:B3:29:E3:D5:CC:5B:A8
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 01936AB4DB02E3F63DEFDF8B26F495F64876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 026D
Signing time: Tue 26 Nov 2024 23:00:57 +0000
Manifest this update: Tue 26 Nov 2024 23:00:57 +0000
Manifest next update: Wed 27 Nov 2024 23:00:57 +0000
Files and hashes: 1: 2caCX9PqpEMBnB1XZFJgo_p6dU0.roa (hash: Q+TyYE8mBkHy1SKNEBeaNq2/cwOJN3NzCh22FK/aebs=)
2: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 3y8vrB5JdQhh7IuU3XkPAus6OWhEj7J+U58DoK4PFrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:db:02:e3:f6:3d:ef:df:8b:26:f4:95:f6:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Nov 26 23:00:57 2024 GMT
Not After : Nov 27 23:00:57 2024 GMT
Subject: CN=b3d163669148b2cb7e43e62e5cb329e3d5cc5ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:c7:c1:38:cc:0e:d6:3a:c8:2b:d6:2c:f7:
d3:2f:f4:98:a0:9e:0e:6f:0e:a2:bf:7a:1c:46:64:
c5:ef:43:d9:4c:61:01:65:5f:03:56:f3:d4:34:41:
96:98:74:92:07:d9:b8:2b:3a:26:95:ec:28:43:64:
14:0b:39:84:94:62:02:f2:ee:24:80:a1:e5:e9:f9:
eb:9a:60:d2:0e:38:9a:1d:89:85:37:1e:05:28:2a:
db:9e:4a:f8:dc:df:ba:d5:8e:bc:72:3f:d6:04:25:
5a:fe:26:f4:0e:29:2e:8c:3e:2b:1f:c1:9f:97:90:
80:7c:b3:a7:d9:8b:c0:52:e2:fe:f1:45:53:28:74:
d1:f7:57:22:7d:e1:2e:48:82:58:5c:f2:2c:88:f0:
0f:d1:6d:d6:1d:84:32:30:fc:f2:db:69:41:19:b3:
a7:0a:84:2b:a7:66:03:7f:16:89:34:2d:94:6a:b3:
15:70:5c:5f:f2:7d:4f:8c:f7:d1:a6:57:62:4f:c4:
0f:ca:21:28:55:7a:a5:fe:46:15:36:27:4f:23:8e:
e5:da:71:61:26:73:0d:e0:51:9f:39:b8:a2:81:ce:
f7:8e:05:fa:06:8c:52:81:fb:aa:04:3d:e5:2a:ea:
e8:12:4f:80:c9:a0:ef:ea:a9:be:62:ab:0b:0e:92:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:63:66:91:48:B2:CB:7E:43:E6:2E:5C:B3:29:E3:D5:CC:5B:A8
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fc:3c:54:59:64:f2:4c:c1:ba:87:90:fa:cb:6e:d9:45:26:
4f:74:f2:40:1d:04:80:95:50:a8:35:9c:45:3e:62:45:85:ba:
64:18:e0:61:1e:76:7f:55:05:6c:90:c7:55:8c:55:27:d0:c5:
bb:90:52:7c:4f:7e:f1:4d:25:a1:d2:d1:57:9c:bb:26:87:08:
84:de:40:1f:08:8d:8a:04:1a:15:60:5f:e1:eb:45:5b:54:e7:
b7:46:1d:c5:81:9f:ee:52:6e:75:dd:aa:1a:f3:06:14:7a:b8:
94:3a:e8:a5:10:b2:e3:4b:fe:f7:dc:c7:d7:39:ed:92:de:ba:
c4:93:d8:63:97:3f:c9:d0:06:24:0d:72:fe:d4:3d:86:f6:f5:
36:d2:13:22:bd:63:7a:e6:fd:c7:83:d7:08:21:87:64:22:cf:
8a:a5:b2:13:e8:0a:14:32:34:3a:68:83:43:c4:28:30:cb:2f:
43:25:7c:56:22:4a:00:8e:00:71:3c:a8:4a:dd:4a:d9:21:f8:
ff:2b:f4:0a:c1:82:db:59:94:53:67:cc:26:2c:c6:47:8f:c6:
6c:52:1c:f7:13:cd:e3:d6:16:c4:26:c0:e0:88:04:52:19:d1:
ce:b6:97:58:4c:e6:a8:b0:8e:34:cb:53:bf:74:a7:ab:1a:4b:
98:06:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:05 2024 by rpki-client on console-ams.rpki-client.org