Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: w6Q31hokuYP2YVSTuKpEPr0HF4//1etUkTiWrj+qJLE=
Subject key identifier: E6:71:C2:13:C2:5D:E8:B1:9D:27:3A:DB:18:58:7E:F3:BF:B3:7B:EC
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0193568B580BA761C59BF029B265D749A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 06A3
Signing time: Sat 23 Nov 2024 01:03:12 +0000
Manifest this update: Sat 23 Nov 2024 01:03:12 +0000
Manifest next update: Sun 24 Nov 2024 01:03:12 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 1UTs+v6kkIudOumQBaUB/bmchSnbGqcjl05NKI2AErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:58:0b:a7:61:c5:9b:f0:29:b2:65:d7:49:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Nov 23 01:03:12 2024 GMT
Not After : Nov 24 01:03:12 2024 GMT
Subject: CN=e671c213c25de8b19d273adb18587ef3bfb37bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:71:b2:de:13:60:1f:55:7f:cf:99:28:95:58:
07:32:42:f5:ff:a5:a4:83:7c:52:fd:67:fe:c3:f3:
73:b4:0b:9d:18:67:74:fb:00:fc:2e:83:30:58:c7:
63:d0:cc:31:4f:42:5b:1c:82:55:d3:66:0f:dd:55:
be:7e:b1:1c:fd:aa:78:01:b2:e5:f3:99:25:a5:9c:
00:bd:9a:ec:a9:f0:ce:61:76:51:59:aa:c7:11:f1:
15:aa:16:37:d0:71:9a:6c:26:15:01:da:83:a3:f9:
c5:e0:e2:2b:dc:d7:10:a1:d7:69:e9:f2:06:1f:1d:
8c:40:7c:2e:76:3d:58:eb:40:c9:23:81:c4:77:7a:
6c:93:d5:ae:6e:ac:32:fe:ed:83:04:d1:1b:01:e0:
21:0f:90:54:7f:ec:0e:10:a6:38:ae:9f:5a:43:88:
0f:3c:07:da:11:41:53:56:c2:75:1a:ef:55:b1:b5:
32:c8:c7:0b:db:65:28:59:cd:80:85:ce:2c:57:ca:
77:1c:98:74:a0:50:4c:09:c2:48:c5:2f:c2:6e:1c:
9a:02:54:ed:90:9d:e3:aa:ef:88:2f:96:31:cc:84:
70:75:11:f7:ea:82:25:db:4d:87:48:29:b2:29:30:
fe:c4:56:5d:77:b1:ae:3c:63:57:aa:e8:b7:bf:5f:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:71:C2:13:C2:5D:E8:B1:9D:27:3A:DB:18:58:7E:F3:BF:B3:7B:EC
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1c:69:fc:27:b1:c7:1b:f2:45:1e:27:6f:1a:9b:f9:a3:eb:
2a:98:0f:90:08:33:e3:99:bb:6c:83:5d:88:2d:81:3f:14:cf:
7a:43:69:a3:b2:ea:70:bc:6c:37:1b:6c:9c:cd:28:79:84:52:
fe:40:85:a4:ab:b3:0b:0d:d4:4b:cb:a6:5c:e3:b8:29:87:1c:
21:ef:36:c4:a3:87:37:bf:23:49:05:53:1f:06:fb:a4:3e:5e:
69:d6:31:f5:b2:44:93:c0:81:fb:c6:45:84:3e:3b:0e:28:a8:
9d:27:6c:14:a0:cb:79:c1:f7:43:5c:e9:33:bc:35:40:15:57:
1d:f1:1b:23:2b:da:c3:a6:12:09:6a:b5:38:73:c8:8d:3a:6c:
d0:82:36:d0:17:1c:f2:90:dc:b0:1a:15:3a:71:2e:08:59:7f:
91:71:bf:00:bc:0c:12:03:78:e4:cb:f1:13:d4:20:28:ba:4c:
b3:2e:82:a6:b2:a4:23:8b:33:72:a1:37:55:73:eb:31:70:ba:
43:ba:ab:15:c3:5c:1b:d6:37:24:7b:b4:84:c5:77:33:84:5b:
a5:45:06:40:5b:f5:b2:f0:0b:a8:7e:ec:cc:61:c1:03:1c:40:
b2:bb:6f:40:88:4b:84:af:eb:28:f2:bc:93:b6:32:c4:b4:26:
82:ae:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:02 2024 by rpki-client on console-fra.rpki-client.org