Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: d1N/JAvF+/QFyPHH3cjXphzvMGx520rGBVnhv0EYqV0=
Subject key identifier: CA:17:F8:B6:7B:C6:F6:04:82:87:29:F0:2C:F2:C9:14:A1:95:23:AA
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 0192587AEEE5AA5CAC92E131DF55A61890CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0A6C
Signing time: Fri 04 Oct 2024 17:01:44 +0000
Manifest this update: Fri 04 Oct 2024 17:01:44 +0000
Manifest next update: Sat 05 Oct 2024 17:01:44 +0000
Files and hashes: 1: Ib8cF5Jom4NVuuNaPDdC0cG5uq4.roa (hash: a2awHEXwt9jgfUPahLgjToekzZgtBO3kpVx0RR8to60=)
2: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: cp+IaSHpv/J2QA3upSKcqBC2SXNtOcpbhuVp9P9lp7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Oct 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:58:7a:ee:e5:aa:5c:ac:92:e1:31:df:55:a6:18:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Oct 4 17:01:44 2024 GMT
Not After : Oct 5 17:01:44 2024 GMT
Subject: CN=ca17f8b67bc6f604828729f02cf2c914a19523aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:d2:84:ec:79:e1:9f:d7:c9:c3:98:c0:35:
9b:16:6c:db:7a:94:95:1a:01:c9:1a:ec:9c:02:6b:
6d:52:43:db:38:f7:1e:fd:77:62:bc:98:5f:35:52:
7c:0d:f8:40:dd:94:7d:d3:b8:e7:96:08:a0:33:80:
a0:f0:ee:6d:e4:38:64:0d:61:cc:b2:35:8f:a2:c7:
fc:f4:8d:f5:66:60:51:9b:df:03:b8:c6:10:37:a7:
22:72:f6:99:d0:fa:0b:45:92:9f:96:92:05:64:2a:
08:26:f8:d3:11:9f:01:77:ac:97:7a:34:8d:02:f3:
8c:f7:90:ff:8e:5e:29:6e:14:aa:aa:c5:39:98:2b:
d2:7b:01:cc:28:55:a7:42:06:a9:d9:1f:6b:e9:f0:
b3:5e:62:ca:77:84:a5:03:69:4b:f9:54:4c:52:59:
9c:ca:ae:e7:14:63:b5:8f:5a:24:35:63:cc:19:c4:
46:98:45:3c:71:91:62:30:7d:31:e8:ea:a5:56:f9:
a4:07:eb:59:62:06:13:8e:19:1b:7e:f8:dc:4f:89:
67:ec:17:53:73:d9:e4:8e:f6:dd:e4:4f:63:61:7e:
46:c5:c2:21:4c:28:76:9b:06:08:2b:e6:88:b6:64:
3c:3d:da:29:5b:ee:1c:39:cb:7d:4d:1b:a7:13:99:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:F8:B6:7B:C6:F6:04:82:87:29:F0:2C:F2:C9:14:A1:95:23:AA
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:22:b1:01:4b:21:85:d3:3d:47:23:5c:5b:21:bb:ef:67:92:
21:f8:19:64:c6:a0:57:32:37:6c:40:f0:66:8c:e6:1c:e9:5f:
f6:4a:71:ba:58:78:b7:f6:fc:df:a7:07:2b:06:8f:30:66:26:
a1:4b:54:01:2a:69:96:91:83:20:7b:79:48:e6:69:ae:94:b3:
d1:98:01:8e:56:a1:f1:14:ca:39:45:cc:df:14:a0:1e:88:01:
76:b0:89:c5:db:4b:e1:b6:f2:72:32:49:e6:88:cb:75:05:26:
d2:6d:89:05:42:67:16:8f:96:f8:e0:b9:1a:a2:06:01:3a:e0:
db:2e:e6:99:79:a1:b7:b9:5a:b1:e0:1b:02:f7:dc:e4:30:7a:
c1:e8:9e:0c:35:75:8d:fe:a4:72:38:94:fe:43:e5:ea:63:9c:
7f:06:09:a1:2b:28:58:99:03:37:04:9a:32:ca:bb:e6:5f:fb:
97:e1:fe:c4:ea:78:33:88:ca:b1:e9:52:73:ef:77:20:ef:ed:
d6:3c:fa:b4:70:fd:5f:48:ca:c8:74:ab:f7:23:e9:48:17:93:
cf:cf:68:50:43:7e:7e:91:eb:e1:90:20:b0:fb:31:d1:a7:cb:
5a:dc:f1:0f:5a:6f:25:d0:c3:06:ab:ee:fb:9f:8a:08:20:f3:
da:0f:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 23:52:23 2024 by rpki-client on console-fra.rpki-client.org