Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: Fh42ifP4QI77cBNqqGdLPro8FhTfCEZfExU8wb/g9CI=
Subject key identifier: 3F:95:0C:A2:6E:96:5A:A4:CE:76:62:97:BE:C7:AB:E5:6E:45:87:30
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 01936BC72B6DBFB5D7F0E0B09F04DF67585A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 12FA
Signing time: Wed 27 Nov 2024 04:00:34 +0000
Manifest this update: Wed 27 Nov 2024 04:00:34 +0000
Manifest next update: Thu 28 Nov 2024 04:00:34 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: ypt9bdb69SlC38AEjIhL0FTQcEf8NRdlYQ5PHyIbKcw=)
2: JPqCrG4zNSlH911exXawjGFm1Jo.roa (hash: BRU6a2GSkeQP6cQVNX4zaxQAXsyUlwJub/Weibd/PV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c7:2b:6d:bf:b5:d7:f0:e0:b0:9f:04:df:67:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Nov 27 04:00:34 2024 GMT
Not After : Nov 28 04:00:34 2024 GMT
Subject: CN=3f950ca26e965aa4ce766297bec7abe56e458730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:1f:f7:44:21:5f:78:5d:68:92:2a:af:f2:
d3:16:b9:27:8c:2b:b3:f7:78:2c:15:5b:b2:25:98:
15:f1:78:16:ff:02:ac:6f:8f:c3:8f:66:8d:a1:e8:
c5:1a:81:7b:df:95:af:01:33:6d:88:d1:7c:4f:e0:
9a:5c:74:9b:9b:bf:b0:75:f4:8c:43:36:7d:df:6d:
85:57:86:e6:11:d3:31:c1:d1:1c:f6:72:1c:3d:34:
73:99:2c:b0:32:22:4f:a9:e5:12:7d:2f:52:b7:34:
1f:b5:ea:1e:aa:1f:98:ff:8e:f2:37:e0:b1:15:8b:
2e:80:84:e2:fa:2c:f6:0c:11:cf:5d:a2:b0:e1:9e:
55:af:6e:16:40:3c:e5:05:51:c6:a1:39:66:2c:14:
9b:88:18:3f:56:fe:d6:d2:18:b3:8b:d6:e2:77:83:
fa:53:4d:89:60:d1:61:e7:be:96:cb:d7:29:78:c8:
83:ae:ef:d1:de:22:66:3d:26:96:3d:a8:66:cb:f1:
ff:84:c0:24:e5:96:da:38:fc:ad:d0:57:99:dc:85:
67:0e:69:21:f3:24:51:c1:45:54:69:cf:bf:b4:d8:
15:cf:ce:0c:d7:ce:d6:39:8f:ad:0e:f7:e8:b2:8f:
3e:0a:a6:c3:72:21:5e:5d:06:28:f8:32:75:72:fd:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:0C:A2:6E:96:5A:A4:CE:76:62:97:BE:C7:AB:E5:6E:45:87:30
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:76:5f:ef:1e:e2:02:55:fe:f7:f2:eb:c4:fa:16:b1:aa:5c:
df:2f:4d:12:3a:9b:88:95:4b:33:d5:f6:04:b7:70:44:ae:22:
1d:b6:fa:47:dd:ab:c7:f0:31:d5:cf:0e:f8:d4:10:48:53:8f:
67:07:cc:50:4d:b0:2a:0a:0a:e8:b2:fd:ab:bd:be:04:57:44:
b9:b3:86:1d:ca:66:c6:a5:44:df:63:77:04:fd:e1:ed:08:70:
6c:0b:5f:35:6b:a1:bc:05:4f:04:83:b3:4b:5b:58:34:61:e6:
d1:a2:da:fe:76:f8:28:35:84:c4:aa:18:d6:b3:f4:6a:a4:5c:
c7:8e:f3:15:de:03:12:af:f8:0b:8a:36:21:f3:57:cc:a3:9e:
75:1e:dd:1d:bd:3a:7b:85:a3:15:7c:cf:c0:d8:8b:f0:57:69:
24:16:fe:86:06:8c:f9:5f:54:87:a1:a3:1d:81:66:a2:c7:ce:
00:db:31:79:31:3c:a6:d7:69:9a:12:ae:97:b4:3c:0b:7d:9a:
aa:fc:4f:8e:69:8f:10:1a:7c:fa:38:16:a0:0b:ea:53:9b:27:
44:8e:ea:c0:83:81:e1:b8:8f:92:fb:ad:af:31:b0:54:0c:e7:
ab:94:76:c0:71:0d:bc:a8:48:39:16:32:66:80:13:5b:da:18:
a2:09:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:34 2024 by rpki-client on console-fra.rpki-client.org