Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: HDwvnmMugKKLifz3i8VKWx4+BIgfhjS4BfofvZG10dc=
Subject key identifier: 52:A4:3B:F6:E8:4F:94:00:04:1C:5D:26:0E:B0:09:8F:58:5B:0B:2A
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 01935688F26EBFE7DC1BF955C196AADC979E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 0134
Signing time: Sat 23 Nov 2024 01:00:35 +0000
Manifest this update: Sat 23 Nov 2024 01:00:35 +0000
Manifest next update: Sun 24 Nov 2024 01:00:35 +0000
Files and hashes: 1: BzfxKszNEFKXzGmZCuwaCyQEd4s.roa (hash: 5Gk/RsaGdLFpMNKHdYQfXDBPahLxDhNiHUVU6T2iFg4=)
2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 0c98S7hMSLTg6VmujDQoImLu6hSnEJpisaHn8tFtNws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:f2:6e:bf:e7:dc:1b:f9:55:c1:96:aa:dc:97:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Nov 23 01:00:35 2024 GMT
Not After : Nov 24 01:00:35 2024 GMT
Subject: CN=52a43bf6e84f9400041c5d260eb0098f585b0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:4c:42:e0:b0:45:ee:31:8d:73:09:ee:05:
05:fa:54:4c:b8:aa:51:75:6e:61:33:ed:b2:b8:25:
25:94:d2:da:97:0c:c1:bf:33:a1:82:f0:fe:30:d7:
ad:0e:70:4d:15:04:72:f6:68:ed:9e:93:4f:ec:ac:
7c:8b:61:91:f1:d2:d5:08:50:62:58:2a:13:9c:a0:
b7:fb:4e:1a:53:7d:6d:c6:13:69:f7:25:b7:ca:27:
4a:5e:05:12:bf:99:68:d5:b5:1a:a6:76:54:83:f9:
1b:2a:f3:bb:3c:fb:4b:4c:d7:7a:a1:ca:95:78:ad:
32:43:de:c9:88:a9:3e:1f:32:02:b7:b7:1d:25:72:
f3:db:9a:91:1d:d9:27:6f:9e:b5:f5:d0:06:96:5e:
1b:da:32:f6:1c:8d:7d:61:6b:a5:84:2a:cb:ae:12:
36:f6:c3:8d:7d:c1:7e:59:59:97:c5:a1:b4:a4:26:
11:f5:d3:38:47:52:cb:c8:a2:3a:6a:d9:95:a4:56:
13:1d:78:93:99:73:77:a2:8e:c6:24:03:98:ae:3e:
b1:1f:02:7e:eb:9a:55:97:73:20:ed:4d:41:a3:8e:
41:ca:d1:27:05:b4:c9:fd:f1:b1:20:ed:91:ea:63:
25:15:59:97:83:c7:2e:79:11:d3:93:35:cd:3a:18:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:3B:F6:E8:4F:94:00:04:1C:5D:26:0E:B0:09:8F:58:5B:0B:2A
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:e7:f0:30:fd:fe:6f:db:fb:81:c2:de:3e:aa:b9:4a:32:
9a:64:4a:5b:56:af:f0:e4:84:21:1e:d9:ee:ef:aa:c7:a0:3a:
e4:19:96:be:97:26:47:17:9a:36:48:84:8d:a2:f3:3d:39:36:
fb:af:a9:7d:68:6d:f5:b4:22:3b:cd:3f:a0:99:2f:e3:f8:32:
ee:c1:be:37:1d:0b:ce:f3:c8:ea:45:24:4a:fa:89:d2:4b:14:
fd:64:17:e8:a0:ce:84:1a:85:fa:77:22:bd:1a:65:8d:5c:cc:
10:85:76:fe:2f:e0:67:53:10:cc:9c:2c:f1:df:3e:3d:9d:33:
3b:9c:0f:79:c6:46:24:a5:43:65:4f:92:32:c7:0f:ce:ab:37:
91:a2:26:d5:5c:d2:23:58:74:e7:00:c2:78:b4:04:a6:2f:32:
3e:e2:8e:51:dc:01:5b:8f:9e:b4:e3:15:7d:c4:b3:91:c5:f4:
46:b1:01:bd:78:37:99:e3:0c:a3:79:6a:7e:c9:03:0c:ef:dd:
54:d5:99:dc:a4:0f:c1:43:11:91:db:a1:84:45:47:8a:c1:8b:
1b:17:5b:82:c1:c7:3b:14:f7:ca:bd:52:cb:c0:8f:3a:67:34:
e1:8c:fb:8a:0b:c9:25:0f:7d:18:cf:79:90:48:4c:80:35:89:
27:e3:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:05 2024 by rpki-client on console-fra.rpki-client.org