Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
File: FgWNKEMMTknmGlivT9em9lbt_Z4.mft (raw, json)
Hash identifier: 4mFxBWKKTtFremEzzUpuuXXetbFUGUoI/LUjqJ+kkqc=
Subject key identifier: DE:BF:39:3C:AB:86:8A:6C:7C:4F:59:45:DE:17:BD:A3:AB:63:06:87
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Certificate issuer: /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial: 019406B3BF5251CCD4CB4F5DCEAD0A353736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
Manifest number: 0ED4
Signing time: Fri 27 Dec 2024 06:00:30 +0000
Manifest this update: Fri 27 Dec 2024 06:00:30 +0000
Manifest next update: Sat 28 Dec 2024 06:00:30 +0000
Files and hashes: 1: FgWNKEMMTknmGlivT9em9lbt_Z4.crl (hash: QZjKH1SJvwJ6SB58DMatY1WlmJPCF894b77nZNk8AGk=)
2: HmuVMw8VRPedRbLs_ih_l1ad8xw.roa (hash: PGOE2RxqOA+1MYaxVO+oFZUrUs67IBjypfZgtkQGebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:bf:52:51:cc:d4:cb:4f:5d:ce:ad:0a:35:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Validity
Not Before: Dec 27 06:00:30 2024 GMT
Not After : Dec 28 06:00:30 2024 GMT
Subject: CN=debf393cab868a6c7c4f5945de17bda3ab630687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:82:4e:80:93:80:7b:8d:a2:00:49:1a:8a:
77:cb:a2:62:69:87:d1:88:f9:4b:e0:03:55:af:19:
dc:94:80:49:d3:34:82:13:ea:0e:2a:3d:db:9e:91:
9c:4e:70:1e:9e:8a:9b:39:3e:45:22:f7:4c:d9:b5:
7b:00:04:fd:dd:62:18:e9:f5:2f:c0:c4:fd:8e:bf:
7a:ce:18:3a:4b:71:5e:a9:d2:6f:1c:bd:e4:6a:bd:
fc:ce:be:09:d2:b6:5d:38:68:17:ab:21:b2:5a:c4:
76:1c:64:cc:2e:58:43:67:f6:fd:df:f4:9d:e7:91:
11:38:82:80:24:93:ac:f9:36:55:65:3c:82:6a:c7:
d3:0d:8e:bd:74:a5:c1:18:25:97:9c:1f:a3:4c:01:
7f:f2:31:82:75:9f:3f:9f:b3:69:b4:a3:be:68:97:
b1:6a:82:b7:04:7e:af:5a:5f:86:03:ac:09:7b:e9:
05:84:84:f8:7e:e6:15:40:11:3c:23:98:d9:a0:95:
53:f0:33:d3:6f:0e:13:4b:68:c2:99:cc:61:35:cf:
1b:70:e6:26:d9:e0:34:d3:e3:35:02:fa:a8:d8:16:
eb:20:a6:6d:90:93:ae:01:49:43:59:0d:7a:68:a5:
1a:51:64:32:53:0b:df:b9:ae:1d:22:fd:3c:99:45:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:39:3C:AB:86:8A:6C:7C:4F:59:45:DE:17:BD:A3:AB:63:06:87
X509v3 Authority Key Identifier:
keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:02:38:0f:ff:d4:05:21:6e:0d:70:15:6e:09:8c:63:da:
41:44:b7:16:24:1d:73:74:bd:16:3e:81:00:74:65:4a:31:d4:
68:22:c0:32:41:6f:7e:7d:55:51:34:93:7a:85:10:b7:23:1d:
02:33:d5:af:3b:22:9d:83:eb:64:d0:82:79:d6:56:97:96:ec:
99:48:53:e9:99:c9:02:b5:c5:c8:b5:14:96:87:cc:c7:c7:a8:
29:f6:56:2a:17:c5:fa:d4:5f:75:fd:14:66:d5:f4:7b:00:06:
2b:9e:66:39:c5:f5:5e:37:14:53:1b:0b:5f:f7:12:cd:03:fe:
27:61:8d:d3:64:30:f6:38:a6:f1:d3:c1:45:4f:0b:cd:05:54:
40:b9:fc:65:86:7b:c2:9b:d0:c9:8b:f6:cc:c7:60:b2:1d:34:
14:64:05:54:16:f6:db:5c:e8:cf:81:61:89:42:5b:5f:dc:b3:
c1:b8:14:25:6a:7c:04:22:87:c2:30:c0:e6:38:14:67:a2:46:
f0:d3:cf:1e:4d:52:02:7b:e3:c8:4d:7a:dc:48:6a:5c:59:d0:
2e:29:a9:39:f1:16:ef:35:9e:b5:0e:8e:8a:2c:ba:3e:f1:31:
38:a0:b7:fa:31:8c:94:10:15:2b:4f:9b:ad:6f:88:ca:8b:86:
b1:f5:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:47:52 2024 by rpki-client on console-fra.rpki-client.org