Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: LJR/loMmOJKzLRfVdsD8BGPc6LC6WNL8/WFgjx5NnNY=
Subject key identifier: FC:A9:D7:33:85:50:D0:33:DF:DD:5B:DC:E9:32:DE:6B:A2:CE:C7:65
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 01936A0F8B40DEB96C2190F6E162C89489DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 1380
Signing time: Tue 26 Nov 2024 20:00:23 +0000
Manifest this update: Tue 26 Nov 2024 20:00:23 +0000
Manifest next update: Wed 27 Nov 2024 20:00:23 +0000
Files and hashes: 1: i0fmY8CuO5KbmcXl625-zPF1jak.roa (hash: YccrozPAVjl0NStdQGdbft58nJtsNPn6sUYfFJU0+9o=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: Fl+jFJ1rOUIzeGBMUaRbutpLnJD14g49ug6qKrnbQ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:8b:40:de:b9:6c:21:90:f6:e1:62:c8:94:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Nov 26 20:00:23 2024 GMT
Not After : Nov 27 20:00:23 2024 GMT
Subject: CN=fca9d7338550d033dfdd5bdce932de6ba2cec765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:98:76:3d:c6:f8:0a:ff:9e:ab:7a:44:5a:
78:7f:ac:e0:b4:11:72:e2:51:f4:8a:0e:f3:3b:1e:
5d:14:ff:11:82:23:d4:c0:2f:ec:54:cb:f2:13:93:
50:df:12:43:14:91:ea:76:1a:d4:ae:10:cd:ca:e4:
24:b6:48:20:96:c0:44:51:d1:32:c5:07:53:89:1f:
2d:12:fb:17:52:70:ac:1b:89:dc:af:06:0e:1b:71:
63:2e:29:a9:8c:b8:ad:86:23:25:8b:5d:db:d5:41:
65:f9:2f:0f:80:9f:50:31:70:8e:56:d2:55:ab:07:
8f:2d:af:07:5f:2d:b0:43:37:2f:52:0d:fb:80:4e:
40:fa:5c:98:04:98:46:34:c1:24:b9:65:d9:9d:12:
6e:f3:0a:30:99:d9:93:ab:55:62:43:a4:8b:dc:43:
21:b8:a5:1b:c2:83:73:b6:d4:1b:94:a1:8e:3c:1d:
94:f1:8d:73:6b:1e:94:f1:c8:47:06:1b:c4:68:e5:
07:7e:21:2e:cd:9a:51:b7:90:6b:a4:db:b0:d3:2f:
db:9a:64:65:9b:57:c5:2e:89:de:04:3e:37:e3:bb:
ef:2a:4c:e0:d4:df:f1:c8:db:c7:40:55:23:97:9d:
58:9d:21:3a:f2:17:87:18:3a:13:18:04:f3:f2:ab:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:D7:33:85:50:D0:33:DF:DD:5B:DC:E9:32:DE:6B:A2:CE:C7:65
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:66:aa:66:53:ce:f5:c8:ac:2a:56:e4:5a:82:38:c6:0f:
7e:09:68:8e:58:1b:24:bd:55:5d:c2:83:2e:93:54:ad:cb:e4:
ca:8c:d1:ed:4b:1a:d2:b4:6f:06:7b:0f:5a:08:db:9b:6b:97:
07:f2:fe:07:66:b5:37:6c:df:31:87:0e:50:5d:9d:07:1b:24:
10:47:9c:6c:c8:26:13:e9:79:0f:9e:24:ba:31:47:d8:28:85:
2f:49:10:9b:b9:c6:81:a8:bf:f1:31:cf:49:78:e1:82:63:ce:
07:ad:e5:18:5d:2b:98:c2:d6:d7:f1:84:a3:2c:b1:9b:56:e2:
35:8e:4c:3a:b4:c9:7a:8f:55:d0:fe:71:fc:8d:14:23:50:a9:
58:9a:fc:e7:4b:da:f9:7c:34:44:90:04:9f:7f:b5:f1:53:07:
c7:cf:10:88:3a:4f:66:e2:cb:3c:42:81:88:a4:ae:27:82:d9:
af:3b:e8:05:df:52:ac:18:3b:f7:28:87:a5:88:5a:4d:eb:a4:
d3:8b:7d:38:54:90:a2:5d:79:47:b4:0f:31:e4:64:d3:f0:5f:
7e:3a:09:fd:22:33:f2:6d:c4:e3:3c:f8:d6:80:f3:09:d0:1f:
08:02:c8:0b:ee:28:a9:ce:71:04:f4:d6:ee:f8:26:6e:92:83:
d6:05:c9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:11:24 2024 by rpki-client on console-ams.rpki-client.org