Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: l+KKfW4HqSwN6lL3LtcFSgsCeBS4TwLUglg8+1iLtDM=
Subject key identifier: 4D:B0:09:A1:76:0E:0F:2C:6B:AC:86:65:4B:A7:B0:FD:B8:E2:AA:27
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 018F2C865418E4EE2C9FE117205D9C89AD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 112F
Signing time: Tue 30 Apr 2024 01:02:31 +0000
Manifest this update: Tue 30 Apr 2024 01:02:31 +0000
Manifest next update: Wed 01 May 2024 01:02:31 +0000
Files and hashes: 1: 0prO6k1FOkBfkBm5RFwAImgnFHM.roa (hash: ZsWIhgk9dnGggVTLXmWY1asPPUmd4CoLiU55eEkiiqc=)
2: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: wceGg/GfrWZ3bK1/hYDeZ5f0iFDEKBh9h02hFa5j9sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:86:54:18:e4:ee:2c:9f:e1:17:20:5d:9c:89:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Apr 30 01:02:31 2024 GMT
Not After : May 1 01:02:31 2024 GMT
Subject: CN=4db009a1760e0f2c6bac86654ba7b0fdb8e2aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:19:35:29:01:f4:e0:6e:cc:50:70:bf:ce:
e0:3e:41:56:c9:e7:65:89:2d:99:c9:d3:e3:28:ee:
54:83:c4:33:03:96:38:fe:fe:8e:28:50:06:45:03:
b5:64:72:42:40:d4:b6:78:86:51:eb:fb:22:fd:67:
61:14:31:31:e4:c8:d4:05:48:a5:1c:09:83:9e:e6:
6d:e0:72:6d:f2:de:a8:a6:0f:1f:b6:50:5a:02:3f:
bb:c7:1b:bd:ff:0f:f5:12:79:27:cf:e3:40:68:00:
d5:fe:fd:d0:ad:d7:b7:e7:34:d7:0e:bb:de:6d:e4:
b9:e8:3d:a0:2f:52:fe:79:08:81:1e:ad:5d:2c:c8:
43:e0:18:df:2b:c6:17:56:4d:4c:93:d8:12:45:91:
43:81:a1:59:00:36:f4:b7:cb:40:f1:67:2e:62:18:
96:71:1e:8d:a5:cb:03:ef:1f:93:f0:37:03:5c:a5:
93:9b:19:9c:63:88:af:bf:17:58:40:43:08:45:5c:
38:8e:0f:5f:62:b4:9a:58:cb:22:e7:7d:31:e8:d2:
e5:0a:55:14:d1:e6:1d:2d:6e:da:d6:d0:2f:d1:8f:
e6:5d:69:88:03:d0:44:4e:2d:22:01:09:ed:3f:37:
18:30:17:e5:22:09:53:11:b5:10:92:b6:c7:8e:88:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:09:A1:76:0E:0F:2C:6B:AC:86:65:4B:A7:B0:FD:B8:E2:AA:27
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e0:76:3f:5a:18:9c:b1:e9:33:d6:6b:33:29:a1:6b:d4:10:
bc:eb:80:40:40:5c:84:c0:a7:23:67:1b:fe:65:70:5f:a2:a2:
30:2f:33:f5:70:f4:5a:bd:dc:bb:0c:c8:b0:87:33:08:61:8e:
16:7d:73:a0:4d:bb:82:c8:75:79:b2:00:56:ce:36:80:cc:05:
ac:b1:b0:5d:fa:46:08:95:48:96:e3:5e:9c:9c:4c:05:b0:30:
38:5c:79:67:a1:99:67:ae:ac:ab:5a:48:93:a6:e8:7f:19:f3:
dc:57:a7:7c:13:be:12:11:29:98:2b:cb:a8:72:d4:c9:4f:00:
dc:54:50:45:7b:cc:d8:88:15:24:94:ca:44:d3:82:e3:a0:53:
16:5e:5d:0c:07:dd:12:53:f2:f0:e3:9c:df:e3:d7:10:1f:4f:
65:6e:60:63:a3:a7:06:10:06:91:1f:18:57:b0:45:ee:fc:c3:
db:5d:96:ec:2a:a2:ed:76:74:bf:34:cd:d8:6a:42:e4:0d:4e:
ca:f2:d1:ca:fc:bc:ba:b3:5c:99:6b:fe:00:44:81:e9:82:7f:
d3:42:5d:0b:41:75:63:d3:dd:45:3f:ea:57:e3:76:b5:a0:fb:
cb:4c:be:2c:af:8f:96:1e:44:8a:54:57:00:fa:7c:f2:bd:1d:
7d:31:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 08:15:02 2024 by rpki-client on console-fra.rpki-client.org