Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: k8V0pYEJVk0WvwFv3AsHpZzd96hlGCV9jDl6cpa4wco=
Subject key identifier: 04:FB:58:E9:79:3A:EA:40:70:BB:96:B5:C1:63:E4:79:73:43:83:00
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 01938EF82659AB3FB1C950BA84E6E3ABBA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 05EA
Signing time: Wed 04 Dec 2024 00:00:47 +0000
Manifest this update: Wed 04 Dec 2024 00:00:47 +0000
Manifest next update: Thu 05 Dec 2024 00:00:47 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: 1WNOceBvrAHAyTg4/jyfpxRg8sO0p6epMdP3phKaqcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8e:f8:26:59:ab:3f:b1:c9:50:ba:84:e6:e3:ab:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Dec 4 00:00:47 2024 GMT
Not After : Dec 5 00:00:47 2024 GMT
Subject: CN=04fb58e9793aea4070bb96b5c163e47973438300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:30:4c:e5:ce:d4:06:2c:fe:2d:41:53:95:
e0:4b:ed:fc:22:bf:ba:8d:7d:e5:0a:c8:83:31:58:
59:53:3c:1e:53:f7:f3:7d:3a:a5:bd:cd:64:86:f8:
8f:ca:f8:64:5a:57:a2:c4:88:15:d3:e6:6a:d5:ec:
d9:bf:63:5d:5a:69:d9:32:65:d7:69:3d:14:ef:60:
53:62:c7:c1:d2:21:96:64:c8:a4:09:0c:4b:4c:0f:
48:7b:da:1f:a1:c4:4a:01:6d:c4:9e:a9:5d:b2:09:
8b:1d:fb:79:99:13:82:7f:af:aa:ea:21:e7:74:2e:
08:71:39:d7:88:02:44:c0:d3:d0:86:7e:25:40:3e:
0a:0c:c4:8d:9d:df:87:66:94:f6:4c:29:7b:5a:97:
63:02:2f:d7:39:3a:6e:25:b6:0d:ab:82:55:2c:05:
de:d7:60:5e:40:00:f8:da:33:15:be:cf:82:4e:23:
74:ee:c1:c2:c0:61:da:88:16:06:6c:b8:4c:ac:0b:
9a:0d:ee:94:0b:39:89:43:9a:7b:10:5b:64:4b:7d:
32:e8:fe:fe:4f:40:7f:0c:c7:15:1e:78:fa:12:45:
8d:65:e9:d3:e4:0c:1f:13:0e:bd:8c:fe:32:6d:b1:
a1:7e:14:71:f7:7e:da:00:69:48:4b:93:d0:71:3e:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:58:E9:79:3A:EA:40:70:BB:96:B5:C1:63:E4:79:73:43:83:00
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2e:a8:1c:cc:d4:90:de:d2:d3:00:9d:ed:bb:15:f0:30:27:
89:b8:0e:02:8d:d5:c9:c4:46:68:75:d9:59:d2:b5:17:b6:28:
7e:3b:d7:e3:dd:53:6c:26:93:cb:c7:78:75:56:3f:fa:09:27:
af:f2:ac:c8:8f:53:1e:f8:1a:96:94:d6:03:40:53:fe:4b:47:
65:93:8e:7d:69:1b:21:f8:53:12:48:b0:d9:b4:59:10:7b:0e:
f0:19:df:95:8b:d6:92:9d:b7:1f:a6:e6:11:ba:51:c8:a0:11:
86:16:02:ed:96:6f:00:eb:5d:a2:07:2b:04:07:d6:3b:6b:b6:
d7:17:bf:b8:5f:a9:1a:8a:9b:36:82:bc:fc:db:3a:77:a7:f1:
bc:29:e0:3a:c3:ec:dd:7e:1e:60:5a:00:14:6a:cc:a9:1c:30:
70:0b:fe:ec:ed:77:04:bb:9c:07:56:45:f4:9c:3f:70:f6:1e:
dd:2e:fa:f4:7b:58:9f:7e:3e:9a:7b:59:78:dc:ae:9b:c0:85:
cf:6c:0f:3d:37:f8:f4:8c:16:12:fa:85:b6:e2:4f:b6:7c:d0:
94:44:82:86:3d:47:cd:3a:6d:4f:15:95:61:53:67:63:ff:37:
7f:90:b9:99:1d:63:5e:ff:70:3d:b8:75:4f:37:5d:8d:2d:9b:
c8:71:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:39:57 2024 by rpki-client on console-fra.rpki-client.org