Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
File: w5JjfwbbxBhtlQKakrKbMOn0lA0.mft (raw, json)
Hash identifier: jkt40UqhA8+Iqfy0hM53GuY89UrHkUdj69AIUu4MqbQ=
Subject key identifier: A9:DD:94:D4:33:97:70:E6:C4:31:8A:71:1D:FB:AC:F9:C4:CF:A7:D0
Authority key identifier: C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
Certificate issuer: /CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Certificate serial: 01936D476658DBBEC932037429FC5FF73846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
Manifest number: F5
Signing time: Wed 27 Nov 2024 11:00:15 +0000
Manifest this update: Wed 27 Nov 2024 11:00:15 +0000
Manifest next update: Thu 28 Nov 2024 11:00:15 +0000
Files and hashes: 1: w5JjfwbbxBhtlQKakrKbMOn0lA0.crl (hash: y+X1CFlQdUiqjcbcMZeLT8uCeXcaL10F2kutlSs7K5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:47:66:58:db:be:c9:32:03:74:29:fc:5f:f7:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Validity
Not Before: Nov 27 11:00:15 2024 GMT
Not After : Nov 28 11:00:15 2024 GMT
Subject: CN=a9dd94d4339770e6c4318a711dfbacf9c4cfa7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:00:e0:4c:9b:05:49:19:e3:cc:04:00:74:
b9:92:be:84:f8:0e:17:b2:68:e5:76:69:3c:67:77:
5a:41:d8:64:ef:c3:77:64:10:cc:63:e1:7d:9f:0d:
54:9d:d1:ac:89:4d:53:ce:00:79:90:68:8e:84:5d:
a1:20:25:96:04:2a:47:59:e1:6e:60:85:24:43:2d:
cc:30:47:ba:1c:95:71:0e:6d:24:a5:a7:71:e2:c8:
b9:2b:64:da:97:4b:95:51:1b:bf:35:1a:e8:08:fb:
09:c6:0e:35:d0:9c:e3:7c:8c:13:dc:7a:4d:fb:4f:
0e:94:53:03:2f:39:6c:bc:21:4f:7e:91:d3:37:85:
15:84:03:82:52:38:71:4c:8d:75:e7:c8:93:26:16:
30:94:6b:25:61:2b:45:47:b6:cd:cc:ad:55:75:3b:
d1:45:ca:b3:42:31:3a:0d:36:e4:80:5c:94:fe:c7:
55:d4:27:d8:ed:28:25:72:ef:b3:ba:cb:c0:3f:90:
09:7b:d1:02:e1:33:59:40:84:d4:61:18:d0:62:55:
87:25:e7:06:1c:32:3b:0b:78:9c:6e:8d:d1:a0:fb:
2f:88:52:c9:f0:6a:ae:c8:69:6b:d6:ec:5e:23:98:
3f:56:a1:c8:c4:41:ac:8b:1d:0d:49:78:0c:77:66:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:94:D4:33:97:70:E6:C4:31:8A:71:1D:FB:AC:F9:C4:CF:A7:D0
X509v3 Authority Key Identifier:
keyid:C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:04:74:fc:05:d6:7a:78:62:7f:66:fd:e5:f5:d1:c0:ae:8b:
51:34:50:00:ce:61:60:25:fb:44:90:ef:5c:2b:df:ae:4f:f0:
b5:70:db:cc:7f:64:18:2b:c5:90:e2:26:50:b1:30:95:20:e0:
fc:1f:28:5d:fd:4d:4e:f7:f7:6f:99:7e:f2:d1:c5:b9:e8:d5:
a0:3d:0b:9b:2e:9b:b6:84:31:96:fd:20:aa:f9:e3:aa:db:53:
8b:65:b0:a0:bf:32:92:48:ae:f3:a6:cd:2f:5a:bf:ac:c0:1b:
d3:18:d4:42:67:25:a3:f2:45:2f:e8:84:eb:ce:c9:25:75:40:
a6:25:8f:b5:fb:a3:78:03:d4:be:96:19:46:ac:64:c3:cf:22:
38:3f:28:28:c2:5e:fa:08:fd:6c:27:62:72:26:ff:fc:dc:fe:
32:87:e3:45:72:74:5a:a9:cd:d7:d6:d5:81:61:68:ac:74:fe:
0c:2b:bb:a1:a3:38:22:87:11:bc:fe:7d:fe:9a:18:15:f6:01:
24:11:0d:49:08:80:0c:0f:16:40:a9:9d:22:67:99:95:ec:d9:
a9:ea:0b:0f:47:5d:2f:70:4b:65:6b:88:4d:94:67:b8:8a:e7:
64:55:fa:06:b3:a6:6e:31:65:af:71:73:02:d9:40:29:3e:ab:
13:c3:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:33 2024 by rpki-client on console-fra.rpki-client.org