Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: FL+lvPko2LRhk7xE3WHzjslGqmkU72BOTv59QcNeVCo=
Subject key identifier: 4D:6E:FC:4D:07:F4:0C:F4:7E:1D:1E:17:28:F0:34:2A:B3:98:DA:D1
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019369DA8FAE6B9E8D97F159B1628AD356D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 19:02:31 +0000
Manifest this update: Tue 26 Nov 2024 19:02:31 +0000
Manifest next update: Wed 27 Nov 2024 19:02:31 +0000
Files and hashes: 1: KbO55pMVi3ln2AmELQ--smGicNo.roa (hash: WC2APzBd8ApDC5KLsT3q2SvEBpOnPIT2+TdGskGzdMQ=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: O7cZm0WeLLWerPL++7V1f1QPFHQD0m23OirZrcKrFRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:8f:ae:6b:9e:8d:97:f1:59:b1:62:8a:d3:56:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Nov 26 19:02:31 2024 GMT
Not After : Nov 27 19:02:31 2024 GMT
Subject: CN=4d6efc4d07f40cf47e1d1e1728f0342ab398dad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:79:f0:ac:b2:37:90:6c:09:1f:98:74:0d:49:
0b:59:c0:16:fb:9f:1d:05:9c:61:c2:76:3c:f4:b2:
2d:37:f4:13:44:6b:41:cc:cc:ea:8c:57:a2:8e:f3:
d7:5c:d4:57:6b:95:11:eb:15:ba:41:f5:1d:26:10:
df:0a:10:30:11:58:90:de:45:c4:bb:e3:be:89:0a:
da:9d:7d:41:c5:51:0d:9f:6a:62:cf:bf:00:aa:65:
b3:a1:3e:2f:7c:92:45:a5:0b:22:f0:db:b2:57:51:
9c:c0:c6:28:65:bb:7f:45:b3:f3:73:3e:36:78:89:
04:16:8d:c0:eb:c7:13:8c:ab:ed:3a:ab:b3:9b:83:
c3:f9:55:9a:09:7b:2a:f5:06:b5:ad:9f:73:a1:c0:
44:8d:3b:28:fb:69:b0:c7:b9:c3:c3:a4:79:59:b2:
1d:ff:7b:fc:87:dd:8b:8f:b8:4a:7a:3d:56:89:18:
b5:72:3a:97:ee:fc:a8:64:f7:98:e4:2f:15:98:29:
cf:18:01:3a:7a:2b:24:a2:c3:6d:17:77:f6:09:47:
f2:ad:62:c8:2e:a9:0a:d9:5b:58:ba:80:89:ae:87:
b7:db:21:e2:2d:0b:f9:d6:1e:82:d7:98:10:07:aa:
c9:f0:7b:0d:0a:6e:ab:5f:ec:c9:33:e0:fe:84:ab:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6E:FC:4D:07:F4:0C:F4:7E:1D:1E:17:28:F0:34:2A:B3:98:DA:D1
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8f:1e:fb:e5:a8:35:a3:42:87:7e:b4:53:70:0f:a2:2a:1d:
c9:3b:31:28:ee:a6:1f:8e:0e:ab:26:e1:ba:54:aa:0e:98:9d:
44:12:e3:6a:3a:6f:50:13:0f:7a:3c:b1:6a:72:b4:c4:41:fe:
f2:3e:d8:c0:cf:ea:73:aa:43:16:bf:0e:f4:f2:dd:fd:01:c3:
be:5c:80:32:38:51:39:19:c7:24:b2:0b:c2:44:aa:e0:cd:d6:
6e:93:ff:8c:a9:d0:ed:7b:4b:83:66:e8:cb:f4:48:9b:b4:0d:
12:14:38:39:80:9c:4c:96:80:37:9b:03:77:db:92:61:f7:77:
c3:75:2b:a3:a9:7e:66:9e:bd:5f:5a:f0:1a:6c:e3:82:54:14:
70:5e:d7:28:87:46:71:85:a3:71:76:bf:bf:67:87:ad:8f:28:
70:1e:e4:ca:09:74:9c:42:76:34:45:84:4d:be:23:1e:e3:42:
31:77:d4:bd:e2:57:50:1b:e1:a6:45:b3:16:dd:13:52:17:e7:
97:cc:df:fc:1a:31:9f:f7:0c:1b:b2:8f:cb:51:db:9a:44:bc:
e6:04:29:b7:a1:20:c4:5d:8e:dc:df:43:29:52:77:72:dc:01:
32:99:32:16:1f:a4:b5:9a:33:a3:56:11:38:11:68:1f:9f:7c:
fe:60:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:26 2024 by rpki-client on console-ams.rpki-client.org