Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: BvPGBrI3KldPQxRYJFr7laB7JUPsNU4JaAkDEY//FaE=
Subject key identifier: 85:EB:60:E7:ED:68:03:97:3C:47:7B:CC:71:FA:E5:F0:8D:21:F4:3F
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 018F5513A6CF44B2C8AB8D7A03C9CB40D687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 03EC
Signing time: Tue 07 May 2024 22:01:42 +0000
Manifest this update: Tue 07 May 2024 22:01:42 +0000
Manifest next update: Wed 08 May 2024 22:01:42 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: PQoKlGV1cGonR/uZwrzzsTCIAbHbca2Hp0rIoA0cBwo=)
2: quawSWznBixEw4o-S2N9kVS_pl8.roa (hash: jfuAfUWA8wWd2It4QrVHbjnc40ZYZktc0iu1fBcAjTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:55:13:a6:cf:44:b2:c8:ab:8d:7a:03:c9:cb:40:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: May 7 22:01:42 2024 GMT
Not After : May 8 22:01:42 2024 GMT
Subject: CN=85eb60e7ed6803973c477bcc71fae5f08d21f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:ed:a2:ab:7b:32:72:57:62:36:3b:c4:12:
95:24:6d:01:1a:a0:72:39:8e:3b:da:a0:82:cc:ca:
a7:6f:b3:1c:e6:9b:21:ba:bf:9c:14:bd:78:5f:10:
a4:28:bb:df:da:7a:0a:d9:1f:b7:00:3c:86:6d:ef:
38:1c:1d:fd:cc:b0:60:0b:36:02:c3:b8:da:61:0a:
1e:ec:05:ec:03:14:d9:bc:e5:66:ac:64:50:8a:69:
ed:55:2a:7c:3c:cc:63:0a:66:8f:bb:d4:4b:85:db:
86:36:a2:9e:99:f6:5f:ab:1c:31:08:9f:1a:20:6f:
02:3b:7b:04:36:da:46:aa:f6:57:f6:00:b8:3e:88:
d8:75:e0:74:17:69:0b:39:d4:a4:75:b6:4b:6f:66:
52:27:52:a5:fa:23:a5:b7:b7:64:cc:11:d7:ca:2c:
48:e6:9f:3a:b5:75:53:65:62:6b:74:7d:f3:77:e2:
1c:bb:6d:6c:88:b6:73:89:eb:b4:bf:b6:2d:fc:7d:
34:fb:8a:1a:77:47:10:25:93:78:49:2b:86:e2:3d:
93:74:9d:a0:c1:28:34:06:9a:27:75:8d:a1:2f:28:
1a:b2:12:b0:e3:76:d1:bc:7a:dd:e9:27:c4:35:aa:
ad:e0:66:bb:21:d6:9a:6f:e2:13:94:91:c8:a5:34:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:60:E7:ED:68:03:97:3C:47:7B:CC:71:FA:E5:F0:8D:21:F4:3F
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:41:7a:06:1d:37:26:bf:bb:e9:9c:e3:92:8c:c8:04:e2:
bc:ee:d7:8d:44:4e:7d:d1:24:06:32:a5:46:26:15:63:b6:f6:
3c:c8:38:25:05:6b:75:35:c6:ba:a3:d4:83:00:3e:85:63:2b:
9e:4f:cf:e9:8b:ef:18:21:b8:62:dc:49:c8:cd:70:70:25:07:
85:e3:d8:79:39:da:b0:9f:e4:1f:5b:32:b8:7b:9a:66:86:d5:
bf:f2:64:b4:f8:51:75:f8:5c:3e:6f:87:b3:d4:7a:34:70:55:
4c:a4:28:d5:4f:7c:2a:3e:b0:e6:eb:26:8f:44:cf:e6:89:d8:
ed:04:ce:5a:b0:97:36:86:59:66:64:d7:e7:57:d0:22:dc:ad:
65:3c:9c:39:22:95:a8:16:80:3c:c8:87:a7:10:d6:2a:cf:82:
84:5e:81:2d:7e:62:aa:c1:3d:1d:25:b2:a6:e7:0b:25:3c:37:
6f:f6:21:97:fd:41:f4:17:7e:db:b7:af:c0:d6:fc:83:1e:53:
5b:d0:63:61:53:42:5b:08:93:bf:32:a8:78:05:df:82:1c:59:
13:1e:7a:8c:b2:7f:e6:d0:46:c6:7b:66:5e:73:bc:17:de:4a:
c5:30:d0:0a:75:95:e3:81:1d:ec:97:ec:f1:0a:65:c7:18:60:
44:14:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:39:46 2024 by rpki-client on console-ams.rpki-client.org