Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.mft
File: FIoMQGfKM6x2Vz_IbP11t-zSAP8.mft (raw, json)
Hash identifier: uVtsQ9H8cdmIWmVsBh87VDMLxO1l522amJHo4G2gfyg=
Subject key identifier: 6F:D4:86:4C:59:CA:6D:A2:E8:D9:29:A1:1D:EB:42:A3:8A:38:69:2C
Authority key identifier: 14:8A:0C:40:67:CA:33:AC:76:57:3F:C8:6C:FD:75:B7:EC:D2:00:FF
Certificate issuer: /CN=148a0c4067ca33ac76573fc86cfd75b7ecd200ff
Certificate serial: 019236C9D7673EEA73B961392F61A2BB3AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIoMQGfKM6x2Vz_IbP11t-zSAP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.mft
Manifest number: 12DA
Signing time: Sat 28 Sep 2024 04:00:50 +0000
Manifest this update: Sat 28 Sep 2024 04:00:50 +0000
Manifest next update: Sun 29 Sep 2024 04:00:50 +0000
Files and hashes: 1: FIoMQGfKM6x2Vz_IbP11t-zSAP8.crl (hash: 8tV0wsTd7k8d/kE9Up7nbCwQ9YRvNmO639kBKW7NTP0=)
2: giQyqryYqFNPvoXG0DutU6vOxxg.roa (hash: 42+oZJZf6sqHGIo8owN1ZZZKQFvoNmO629sY7pNFWM8=)
3: yGimX1U5_Eg-6o9DZzKVBJcDdwo.roa (hash: wm+qvuiwmVITD3kUVjkj/0A5dLUEaJsJixrzsJLHWzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIoMQGfKM6x2Vz_IbP11t-zSAP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:c9:d7:67:3e:ea:73:b9:61:39:2f:61:a2:bb:3a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=148a0c4067ca33ac76573fc86cfd75b7ecd200ff
Validity
Not Before: Sep 28 04:00:50 2024 GMT
Not After : Sep 29 04:00:50 2024 GMT
Subject: CN=6fd4864c59ca6da2e8d929a11deb42a38a38692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:a8:1d:03:d5:11:56:dc:8e:a8:54:88:7a:
a6:3a:ba:01:92:00:c1:17:f9:e9:2a:b3:00:25:4d:
78:8e:01:fb:c9:79:f3:dd:97:5b:d9:f1:46:49:95:
ec:e6:18:5b:61:33:d7:01:a6:d3:69:55:95:25:21:
f9:dd:70:f0:98:b5:8f:36:2d:c7:db:ad:ef:04:ad:
54:c4:de:37:10:d9:4f:8c:81:e8:79:30:2c:3d:7a:
f6:95:4f:ab:7e:06:62:65:33:ae:3c:db:fc:11:43:
96:5c:9f:8b:b3:ee:0b:15:54:6f:51:05:a2:f6:75:
3e:1a:ed:42:86:55:e4:9b:4f:21:06:6c:86:5f:dd:
e3:c2:ea:c7:c9:f8:04:ef:74:2f:f7:bb:2d:a3:5f:
a5:6d:0a:de:16:19:e7:9e:83:b8:aa:df:81:a6:0a:
1c:a9:d1:e3:0f:9b:48:50:69:40:a8:88:01:ae:9b:
a7:dd:8c:f1:d6:40:74:7f:24:aa:6b:4a:d0:c5:47:
d3:0b:76:97:cd:01:a4:23:ca:24:03:17:36:2f:ca:
50:7a:8c:7f:f8:45:5b:09:9d:92:ed:67:bb:04:15:
d3:be:4f:49:35:15:cb:cd:54:92:4a:95:19:9a:0c:
bf:c1:8d:f1:e8:3f:4b:4d:ec:3d:f0:1f:ee:df:a0:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:86:4C:59:CA:6D:A2:E8:D9:29:A1:1D:EB:42:A3:8A:38:69:2C
X509v3 Authority Key Identifier:
keyid:14:8A:0C:40:67:CA:33:AC:76:57:3F:C8:6C:FD:75:B7:EC:D2:00:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIoMQGfKM6x2Vz_IbP11t-zSAP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/009fb7-9ed0-44ff-b7db-9e07b56b57b8/1/FIoMQGfKM6x2Vz_IbP11t-zSAP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:ae:93:0e:b3:93:51:40:d3:32:f3:5f:01:2e:b4:17:17:
92:e0:fc:54:5c:1a:8f:12:f3:be:9c:ad:5e:e7:77:bb:14:f0:
4d:a4:f4:3b:9b:68:bb:c0:92:65:5f:bb:60:ca:56:ec:05:94:
76:b8:1c:4b:19:7c:33:f6:cc:ed:af:f5:56:c8:b6:5e:1c:43:
a9:3c:b2:54:de:4c:87:0e:19:63:2f:a2:4f:ac:7f:e5:72:e4:
15:47:2a:e6:08:f0:68:ef:ca:69:4a:b6:b1:0d:b3:80:99:e4:
45:5b:2b:94:e3:8f:7c:34:e7:f7:32:9e:15:d8:3d:6f:6d:b0:
de:d9:0b:aa:10:68:30:11:82:43:c7:df:62:7b:38:53:bb:70:
b6:95:1c:4b:c8:20:98:57:25:af:42:4a:51:7e:4a:28:74:71:
db:bd:ee:a5:c0:85:b4:d9:95:c8:aa:bf:b2:9b:df:46:b3:ce:
46:2e:4e:52:64:47:48:66:3e:ba:c9:16:67:94:cd:47:a4:10:
98:1e:de:6d:39:e1:ef:26:2c:1b:fd:36:4c:6a:0f:01:c2:67:
32:ed:0c:a5:1d:44:38:d5:38:6f:a2:67:e3:6e:b7:e1:0f:7f:
44:e8:3d:2b:44:4a:06:54:a5:10:9b:e0:13:b9:83:14:d2:0c:
ba:dc:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:51:26 2024 by rpki-client on console-ams.rpki-client.org