Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: HIvlj91IL+GcKkP/6k0F+astMqT6spQegJUWy2udLhg=
Subject key identifier: 1F:54:52:E3:8F:B2:BA:E1:72:B0:BF:91:8D:1C:81:17:C0:64:BC:8B
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 019406471FE7444C10F3FFF7D03F0BFAEFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 13C9
Signing time: Fri 27 Dec 2024 04:01:51 +0000
Manifest this update: Fri 27 Dec 2024 04:01:51 +0000
Manifest next update: Sat 28 Dec 2024 04:01:51 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: i4DW3spSY/0JKFI/6aUsAp7FDqPt4H/G/znpofRqOaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:1f:e7:44:4c:10:f3:ff:f7:d0:3f:0b:fa:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Dec 27 04:01:51 2024 GMT
Not After : Dec 28 04:01:51 2024 GMT
Subject: CN=1f5452e38fb2bae172b0bf918d1c8117c064bc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:fc:56:66:5a:1b:ee:a8:66:bf:b5:19:b2:
44:0f:2e:7f:ec:53:32:5e:5f:a8:a7:ed:9b:ec:ed:
e1:f3:9e:f1:f1:b2:60:3d:c3:0f:0f:80:e2:42:dc:
ff:b5:17:a5:b7:bc:77:aa:64:79:c0:65:e5:23:27:
69:cb:25:ea:af:9e:33:40:de:30:2d:ff:41:ac:16:
90:85:79:92:9c:e9:d7:d7:80:a7:7b:fe:4c:51:bc:
cc:63:d1:3e:6a:82:90:85:41:da:60:3d:f9:59:61:
45:92:55:ed:12:66:53:7e:46:a0:ec:b1:cb:15:cf:
52:c1:8d:03:cb:56:29:db:52:c1:2a:f3:48:f4:e5:
3c:27:aa:3d:e7:2e:94:1f:d3:93:f1:f8:0b:b3:0d:
e6:93:a4:f8:b3:95:7c:02:e4:db:1a:66:5e:91:b6:
ad:a6:c9:38:94:c1:6c:fd:fe:cc:06:b3:e1:0c:f9:
eb:87:76:43:ee:ac:fc:33:7e:45:8d:6e:7a:7d:ef:
95:b6:df:14:15:84:4e:a2:ad:a2:82:06:48:14:94:
96:f3:ae:51:d8:68:ca:63:3f:c9:19:48:97:cf:b1:
89:ac:d4:9e:8f:c5:e1:7c:40:0a:5a:88:fb:9a:d2:
87:af:42:2e:3e:29:c1:41:2d:da:70:8e:05:29:58:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:54:52:E3:8F:B2:BA:E1:72:B0:BF:91:8D:1C:81:17:C0:64:BC:8B
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:77:32:d9:ea:24:10:59:7d:8d:16:91:1c:71:72:93:3d:9f:
0a:02:6b:69:e7:e4:fc:f9:9d:41:a1:58:d5:38:03:87:f3:cd:
d3:84:36:72:5d:79:a3:68:ee:98:b6:68:63:4e:22:d2:ca:9b:
d2:f2:d7:10:ac:01:b8:ca:92:c9:ff:97:45:fd:76:b8:b3:0f:
36:00:d4:3e:47:c6:88:8b:47:a4:ce:2b:cb:32:12:c6:05:8f:
b7:46:5a:31:0e:91:31:04:0e:91:07:80:60:ac:84:2d:88:89:
27:24:37:ac:83:a0:c3:69:ec:0f:b0:5e:82:0a:38:19:a5:68:
7f:67:cf:3d:cd:ba:1d:8e:22:d7:ff:53:81:27:02:61:65:ed:
1c:a4:3c:fe:ef:ad:37:ed:73:a4:07:9e:0f:d8:c2:9f:03:26:
47:1c:35:ea:c2:35:d2:33:1b:80:a7:12:c4:53:e5:39:01:a2:
70:57:63:49:ee:72:db:01:ac:84:5c:c3:f3:12:c8:36:d7:99:
cd:41:09:66:a4:a7:9c:d4:87:c1:2e:4f:38:2c:f7:9e:ed:b1:
e1:45:91:cc:69:3a:42:f0:d6:51:8a:5d:4f:0e:98:72:42:aa:
d3:86:43:83:d0:a3:18:5f:e0:a4:fe:d4:99:fe:ed:fd:4d:78:
66:65:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:17:19 2024 by rpki-client on console-ams.rpki-client.org