Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: rGZpzCOOhaa/KSB/Fgubbb4gBpdpp3JWt/DVFTMYva4=
Subject key identifier: 8E:64:1D:C1:0A:B9:EF:8A:74:F6:21:95:F1:6B:5E:AF:AB:AF:EB:7D
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 018F4A8F792ABE9D8AEFD50D85887F9449FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 0CD0
Signing time: Sun 05 May 2024 21:01:07 +0000
Manifest this update: Sun 05 May 2024 21:01:07 +0000
Manifest next update: Mon 06 May 2024 21:01:07 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: aq7E/Y/8cPvVoXs2/5AW9ZUVg1adWE9rDPfCEjnHlBA=)
2: Jc4VWzoJw33vIu329THUgofK_IM.roa (hash: MOP2AiSIWkcLFcI1RG8RWITxOEFQCtSsoiNaYpP8jyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4a:8f:79:2a:be:9d:8a:ef:d5:0d:85:88:7f:94:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: May 5 21:01:07 2024 GMT
Not After : May 6 21:01:07 2024 GMT
Subject: CN=8e641dc10ab9ef8a74f62195f16b5eafabafeb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:3b:7b:59:54:25:6e:e0:10:b8:5a:d7:ee:
f3:89:19:51:c1:b2:42:46:49:c2:6d:b9:94:3b:5d:
a1:73:2a:fc:9b:de:ed:77:1b:4a:5e:e9:87:2c:4e:
2b:19:ae:3e:df:21:42:26:4b:ef:93:e0:6d:41:72:
c1:ef:56:37:9c:53:24:2a:10:29:1c:8b:0a:f5:b9:
f3:b5:7f:14:49:bd:5f:d9:4b:d4:97:57:42:09:b6:
9c:0a:76:58:e0:7e:a8:24:63:c7:e1:a5:ae:67:07:
c2:a1:58:8e:95:ac:22:bf:ca:4c:3b:34:da:b9:c5:
ee:61:a7:91:85:30:89:63:0a:30:f3:d4:5d:88:6b:
cc:b8:7c:96:72:1c:30:1a:f0:87:db:6d:6c:a9:ad:
ef:6a:e7:e6:55:0d:c0:a2:27:0c:d8:8c:1f:41:82:
d8:b7:1b:b6:78:40:7e:46:94:bf:ab:24:56:0b:6b:
e6:3a:1c:ed:5d:41:88:26:2f:51:58:ad:68:1e:43:
9b:5f:fa:a8:a0:f7:fc:a7:28:a9:34:0b:ef:27:1e:
ae:6a:06:19:db:1e:20:08:9b:38:4c:c7:6a:14:b3:
b8:22:cc:66:f3:6a:07:c1:b8:f1:51:cd:52:69:6f:
7b:66:fa:36:44:6d:fd:d9:b2:80:c6:87:54:b6:b5:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:64:1D:C1:0A:B9:EF:8A:74:F6:21:95:F1:6B:5E:AF:AB:AF:EB:7D
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b2:15:8c:aa:d8:c8:57:2e:69:68:d8:26:0b:25:9b:b5:01:
f2:d6:3f:d8:11:40:a1:35:f0:fe:a5:55:46:e8:b2:c1:d8:e5:
49:05:03:b2:83:0f:2e:f4:d5:95:6c:97:65:53:03:25:1c:6b:
74:71:82:84:61:9c:69:80:3e:10:46:f9:a5:c0:ca:c9:cc:e6:
46:eb:5e:a8:b1:e4:4e:c2:00:c5:eb:bd:98:96:45:9b:a4:67:
1f:44:93:a3:1e:53:99:ff:2a:01:87:8b:10:d3:e2:59:0e:f5:
92:19:5f:dd:c6:14:e9:1c:d1:1e:9f:a1:a9:e7:61:83:ad:88:
91:62:a8:40:ff:49:f2:a5:53:df:08:1b:5c:ba:4b:bf:ed:eb:
96:37:d6:02:1c:df:29:3d:e6:19:39:8d:f5:04:01:80:0b:24:
cf:f9:93:92:e8:c7:1d:f4:a1:63:39:dd:c9:b9:80:bb:84:5d:
fc:b6:dc:6b:7f:c1:8c:75:1c:fa:ea:32:dd:d4:42:20:6a:29:
0d:5c:33:00:15:d3:02:79:11:c3:36:b0:c2:56:05:d7:f3:b8:
82:ee:39:e0:05:a2:6b:a5:df:90:50:da:52:93:b5:10:ab:f5:
2f:73:a1:e4:08:07:6c:90:19:14:f3:19:8c:52:46:05:0f:6e:
24:35:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:40:56 2024 by rpki-client on console-ams.rpki-client.org