Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: KCe8L9GGVFoH50u4CSgFwfWoRVsbQ5+ZIl9vVUaCCdg=
Subject key identifier: ED:FA:3F:53:03:F7:2A:BC:7B:58:35:AE:17:2B:65:28:7A:20:BF:13
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0193572DBCCC963E6F085B361B60187CB48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 13AD
Signing time: Sat 23 Nov 2024 04:00:35 +0000
Manifest this update: Sat 23 Nov 2024 04:00:35 +0000
Manifest next update: Sun 24 Nov 2024 04:00:35 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: SwZY4i+e1M9QKNV3JbDAg3qAMEAmfgHmRzQ4QFMFYRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:bc:cc:96:3e:6f:08:5b:36:1b:60:18:7c:b4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Nov 23 04:00:35 2024 GMT
Not After : Nov 24 04:00:35 2024 GMT
Subject: CN=edfa3f5303f72abc7b5835ae172b65287a20bf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:be:65:03:aa:f4:da:f5:c0:83:a2:f5:d9:5f:
67:d4:10:35:ab:fb:9d:f2:50:3c:79:82:ed:c4:ca:
7f:42:b6:d9:84:b4:71:85:2b:68:2f:0a:22:d9:ca:
25:bc:ff:ed:5f:f1:55:b5:ef:84:73:f4:20:c4:de:
e4:a4:15:a3:81:f7:ec:a2:21:48:61:57:d2:ce:42:
7d:c8:b7:b1:26:8a:7f:a2:ef:e5:14:f2:b0:c2:44:
65:05:39:5f:51:dd:c5:1f:f6:21:13:fb:31:0a:1f:
87:ce:5c:d4:48:f5:12:71:6a:7c:da:19:f6:eb:78:
aa:57:6a:fc:46:3c:81:6b:39:b2:33:ec:e2:16:ae:
27:75:ee:95:f6:fe:49:76:19:2c:11:b2:5c:0d:24:
d9:c9:7e:24:f0:e6:1b:28:70:85:41:b4:7e:38:95:
a8:9b:97:70:98:a9:05:08:3d:51:81:5a:1e:69:e8:
14:f7:52:a0:63:5e:4d:3d:70:53:88:e4:d3:e0:39:
a4:75:31:79:b6:07:4b:e0:0f:14:51:f8:fc:23:db:
cb:a2:94:a2:ef:a8:fe:1b:82:85:fa:9c:30:a7:e7:
11:e6:43:c1:6e:91:c0:b3:8b:0c:ed:8a:a9:49:d5:
7b:a9:a0:4f:eb:93:9a:10:91:04:62:15:8a:0e:2d:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:3F:53:03:F7:2A:BC:7B:58:35:AE:17:2B:65:28:7A:20:BF:13
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:fb:a5:e6:75:e2:78:bb:be:21:47:9b:be:80:cf:2a:75:
bb:3b:df:bb:40:15:91:85:fc:c0:7c:4d:a8:e6:aa:8b:67:76:
74:1d:86:33:5d:78:e9:19:e9:b8:c2:36:e6:3d:cb:5f:c5:5c:
7a:d8:a8:23:81:8d:c3:c0:6b:ff:36:41:6d:f5:bf:83:aa:d3:
d3:5e:8a:cc:c9:45:3c:ea:be:44:96:d3:32:2d:94:b9:fb:bc:
6c:f1:ea:51:2b:ae:a4:9e:cd:71:41:b5:73:66:b7:66:9d:60:
09:bb:5f:a6:88:c1:c4:60:a0:06:35:5b:15:b2:ac:30:b4:33:
8e:29:78:04:da:37:1e:10:a4:d3:ba:88:85:e4:1d:ec:90:33:
14:23:ab:7a:4c:ab:b9:4c:ab:0c:86:79:37:d1:ea:1b:8c:d5:
4c:c1:23:73:ae:76:4d:e4:05:2c:3a:11:b9:d1:fc:2c:a0:17:
d1:2b:88:4b:ae:49:8b:db:6c:12:b4:d4:dc:8c:18:11:8e:37:
b3:2d:c5:56:39:95:07:36:07:75:d8:52:5d:a4:ca:de:3a:6b:
1e:df:09:8b:03:59:4b:46:9d:02:f1:ea:91:92:be:45:9d:84:
03:a1:67:7c:5d:69:4f:8d:63:e5:be:a3:c9:11:cf:48:cc:77:
1a:75:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:26 2024 by rpki-client on console-fra.rpki-client.org