Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: ofwFGblE837KN+QgIICSnf+ve/MoZEmGs3wQf+PoOo8=
Subject key identifier: 84:89:22:83:FF:24:96:E6:DF:58:5E:3D:26:E5:47:24:C8:08:6A:0D
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 0193549A6DD74118230C727A0E22AC2BE964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 1356
Signing time: Fri 22 Nov 2024 16:00:26 +0000
Manifest this update: Fri 22 Nov 2024 16:00:26 +0000
Manifest next update: Sat 23 Nov 2024 16:00:26 +0000
Files and hashes: 1: 0prO6k1FOkBfkBm5RFwAImgnFHM.roa (hash: ZsWIhgk9dnGggVTLXmWY1asPPUmd4CoLiU55eEkiiqc=)
2: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: aZr+9IZuxHM+CVD0A2OSigLUvhfCCajCwJuuCoGbm0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:6d:d7:41:18:23:0c:72:7a:0e:22:ac:2b:e9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Nov 22 16:00:26 2024 GMT
Not After : Nov 23 16:00:26 2024 GMT
Subject: CN=84892283ff2496e6df585e3d26e54724c8086a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:eb:10:67:8a:2a:3e:a5:2a:9b:bb:ac:77:
3d:61:29:94:f0:bd:55:d4:93:16:d7:9f:02:c5:b8:
ac:50:b8:c7:db:43:1b:e3:80:f7:20:61:c6:8f:d0:
95:ab:a4:81:9c:86:ff:61:17:b7:35:00:74:9d:07:
eb:a0:cc:a1:0f:07:de:54:e3:e9:a4:65:75:11:f0:
5d:9f:0d:c3:f5:30:db:2c:67:b1:c5:46:a3:56:23:
d3:f8:4d:65:87:24:03:b4:32:e0:3b:42:53:e4:ee:
5b:22:24:a8:4c:22:88:7e:8e:1d:8d:d2:79:6b:7a:
48:49:11:d7:c9:d1:b8:e6:f0:68:8b:2b:e5:b0:2b:
0c:54:84:77:22:8c:06:ee:85:a7:72:58:fb:82:f4:
82:b5:52:35:2b:72:91:a3:f8:78:10:f4:93:43:ea:
10:b3:61:5e:4b:4a:42:11:13:f8:9c:23:4b:d6:1e:
01:7c:bf:5c:5a:68:65:60:b5:d7:03:3f:34:5d:3c:
cd:9a:85:c0:ac:fb:d0:40:6b:58:1a:f4:a6:89:cf:
ad:ad:80:e3:5b:2d:96:22:27:3e:cb:bf:17:22:e4:
54:ac:4a:ab:77:da:8e:bd:6a:9d:8b:a7:ed:29:91:
5e:a0:96:47:2e:3b:68:99:98:54:5b:26:47:f0:a9:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:22:83:FF:24:96:E6:DF:58:5E:3D:26:E5:47:24:C8:08:6A:0D
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6f:ef:6b:e6:0c:20:f3:f8:9a:1b:a3:9f:3c:1f:09:19:fa:
16:77:9e:b6:72:e5:a1:26:0d:a6:81:b0:d6:c5:1b:4f:39:2f:
f7:50:97:51:2c:7b:d4:4f:9f:55:b5:38:a6:21:aa:6d:35:75:
12:bf:ae:1a:5a:d3:67:bc:e8:5f:a3:c5:50:c1:ce:b8:ef:c1:
ca:df:ad:af:c5:36:64:1d:e6:1a:df:04:02:91:7b:ea:e6:e7:
75:35:07:e3:bb:a0:5c:c0:d5:b0:df:54:f5:2b:bb:40:9f:62:
a5:0b:9f:95:45:46:e5:7a:c5:e8:12:c4:41:99:64:04:41:84:
fc:88:75:31:62:73:06:f8:ce:ce:a7:14:81:05:dd:5c:f5:a3:
a7:93:21:ce:3e:fe:e3:6e:fe:31:11:9c:b2:77:8f:89:9f:d0:
64:b4:ad:7e:2f:e8:47:b1:22:ec:b5:4b:2e:7c:8f:ba:ba:e7:
21:9b:f5:ac:b3:07:39:d9:2c:8b:a2:35:e4:15:ca:ba:94:d2:
e3:9d:d7:94:23:0b:36:48:93:9d:7e:d6:e2:76:71:b4:26:58:
00:78:25:24:76:1d:e6:65:71:85:7b:72:2a:43:eb:3a:b1:cd:
8d:e0:93:d9:49:9e:05:b4:c9:98:67:d2:84:81:ff:87:85:b5:
af:95:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:21 2024 by rpki-client on console-fra.rpki-client.org