Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: CZ1hIZMIb1p7SqfzBVraxGsjBYH/3RE2H2xlG/Mm9YA=
Subject key identifier: CB:B8:82:82:9F:6F:EC:25:73:A7:6D:36:99:8E:B1:BF:C9:BE:77:52
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 0193572D7805C285B83B3BD7CA817B8E6395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0D3D
Signing time: Sat 23 Nov 2024 04:00:17 +0000
Manifest this update: Sat 23 Nov 2024 04:00:17 +0000
Manifest next update: Sun 24 Nov 2024 04:00:17 +0000
Files and hashes: 1: M6RW6idGBD-evnGI7BOk-W5wwL0.roa (hash: Qm+zY0nmlZ9X2kDEDIFWigH5Lc7wJTA9+p++GBa+yRA=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: qlF6a3W55524hJjlJlJIwQb/+uJTbsbrt5R4dGGWeUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:78:05:c2:85:b8:3b:3b:d7:ca:81:7b:8e:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Nov 23 04:00:17 2024 GMT
Not After : Nov 24 04:00:17 2024 GMT
Subject: CN=cbb882829f6fec2573a76d36998eb1bfc9be7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:ea:78:6c:2f:a0:b6:44:86:89:cc:ea:6c:
68:3e:ce:96:6f:8c:cc:e3:a8:99:f2:97:08:8e:38:
e0:b9:86:48:6e:09:44:37:18:b1:67:36:d8:eb:bd:
a6:96:60:b4:1e:5c:e4:d9:be:5d:c1:78:50:b3:29:
d4:c9:fc:7f:14:c0:a0:d3:51:fb:6b:a8:8f:e3:ef:
d6:71:31:c2:db:5a:cf:4f:53:4c:63:a9:16:5c:73:
5d:09:4f:03:f0:e7:ef:38:0c:93:70:62:a7:74:e3:
b5:39:35:3d:bb:ab:cd:5a:82:58:6b:db:da:81:3e:
f4:db:23:62:d6:0a:42:40:67:25:ed:10:98:a0:dd:
b6:5f:ab:3a:c1:16:82:aa:b9:11:9a:cd:fe:d2:83:
e4:8c:84:08:52:84:71:ae:ca:ff:14:98:a4:c6:6e:
11:69:57:ca:46:84:d7:91:16:c3:aa:fb:f7:49:9b:
cb:ae:24:2e:ad:af:30:71:15:3e:cb:37:16:00:cc:
95:99:d6:b6:34:74:bb:23:1b:6c:24:d0:44:73:f3:
35:af:80:37:ba:6a:53:fc:e3:dc:f4:78:59:f3:5a:
47:1c:a0:20:6f:d4:2c:f1:6e:38:e5:66:da:23:5c:
35:77:d5:8b:73:1d:fa:17:4d:87:f3:b2:4a:bc:ea:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:82:82:9F:6F:EC:25:73:A7:6D:36:99:8E:B1:BF:C9:BE:77:52
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:37:d4:7e:b8:e5:13:d6:f7:21:e3:14:0f:bc:9c:54:3d:95:
5a:43:f6:f2:f2:c6:57:7f:27:17:24:26:7e:74:c6:e5:b8:70:
5a:58:45:76:5f:6f:5a:f7:a9:57:39:cf:89:bf:87:a4:ad:c1:
40:16:d3:9f:e2:86:6d:09:11:4b:d8:9f:f5:e6:bb:0e:e7:27:
83:03:a1:76:23:f9:67:d9:b1:71:37:da:a4:99:fb:c2:65:fb:
57:ac:3c:ee:cd:4e:ea:69:08:d4:55:fd:05:80:db:a3:96:24:
1c:28:d7:81:38:df:84:76:42:97:e3:8f:57:67:92:90:6b:01:
f7:c8:3a:99:6b:c0:4b:b7:bc:f4:0a:70:d7:03:67:5f:64:f8:
ec:fe:2a:79:97:4f:d1:1b:3c:7c:c7:d3:0a:04:b8:3d:bc:b0:
6a:06:8c:1a:b7:b9:a7:4a:ed:79:5a:cb:14:8d:b3:9e:74:4b:
7b:48:db:27:ad:13:b6:ef:f6:08:1d:78:df:31:13:1d:59:1a:
1e:e7:27:d5:79:38:f8:03:97:49:19:f9:59:32:d5:81:a7:cb:
d4:08:12:d1:03:df:c0:37:76:da:40:84:cc:90:9c:a0:ac:ca:
0c:e5:83:1c:01:cb:ae:05:e3:f1:b2:0c:4d:d7:d4:c6:91:aa:
70:4d:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:06 2024 by rpki-client on console-fra.rpki-client.org