Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: Fs8EK1TOqg3oB1CYOBTdEcPUdIfEhofeRaq2ZVJqGM8=
Subject key identifier: 0F:E8:2C:EE:87:04:3F:94:09:B7:D8:90:90:A7:90:CE:5F:E7:6A:8C
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 0193572DC44FC7864FABC14C4AA97690C68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 04:00:37 +0000
Manifest this update: Sat 23 Nov 2024 04:00:37 +0000
Manifest next update: Sun 24 Nov 2024 04:00:37 +0000
Files and hashes: 1: POKDbL-AkzxIj7FgRIvMrj1Ad6Q.roa (hash: pdICwjxED76xlMct7i3abRdXrJoMWDjl6hPMAKyonl4=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: E8co1mwFfQigwML0JM68mmCI/mvptV70g5S+CvPiKvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:c4:4f:c7:86:4f:ab:c1:4c:4a:a9:76:90:c6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Nov 23 04:00:37 2024 GMT
Not After : Nov 24 04:00:37 2024 GMT
Subject: CN=0fe82cee87043f9409b7d89090a790ce5fe76a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:96:7a:f7:76:88:92:74:6e:9f:5b:93:17:
d5:f2:5c:f7:dc:10:c6:eb:a4:f1:e9:15:19:97:be:
db:79:c3:bb:f2:3c:b1:3d:ab:0a:3a:6d:14:18:88:
90:8e:a1:8a:f3:65:1c:ff:ab:7e:c3:78:93:2b:1a:
db:7b:f9:3a:4e:2b:15:98:4a:81:94:d5:42:c5:8c:
be:d8:66:0f:55:da:c4:88:52:b5:d3:cc:b6:03:ac:
ff:79:2d:5f:2a:dd:78:2b:0d:f2:31:53:cc:30:a7:
7f:6f:9b:1d:93:1b:44:cd:18:89:4d:80:9e:c9:a7:
40:ed:98:bc:0c:0f:7c:44:46:ce:a2:16:ea:12:2e:
45:54:ee:ce:eb:50:9e:1e:ae:97:57:24:f6:93:16:
ef:36:d0:b1:89:c5:bb:ba:5a:46:97:f5:03:f9:6b:
3f:2d:a2:6d:1d:94:3b:ac:77:2a:04:a0:96:cf:f7:
99:41:27:f6:0d:92:3a:39:da:2f:d4:e0:0d:56:7b:
41:e0:4a:50:5e:99:31:88:02:b3:3b:22:66:34:8b:
3b:c8:27:4a:3b:22:97:0a:29:ce:5c:0a:bc:f2:44:
81:5d:3f:de:af:98:70:a8:f4:66:1a:58:23:c5:68:
50:0d:a4:19:c7:fd:6d:ec:03:47:ae:d9:d8:0f:e4:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:2C:EE:87:04:3F:94:09:B7:D8:90:90:A7:90:CE:5F:E7:6A:8C
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:98:31:ee:ed:e9:21:21:00:06:ec:5a:1e:00:9d:19:5b:e6:
b8:4c:17:4f:41:3e:58:5b:b7:3f:b5:70:7b:8c:f5:7e:b5:1a:
4a:a1:69:66:e5:53:a6:4f:76:1a:52:33:53:eb:2a:69:00:3e:
71:c5:f1:f0:d5:4e:cb:fb:42:55:d6:96:fe:59:6b:45:8f:42:
4a:6b:21:e2:59:0e:bb:04:d2:91:61:31:26:b9:36:24:dd:b7:
27:58:15:d5:ad:c7:b2:a7:cd:de:e9:26:71:0e:26:9c:f9:2e:
b3:f6:7f:28:8f:12:33:ea:04:84:53:ea:6c:cc:4b:1e:83:ac:
97:df:9d:6f:ea:b1:b3:b2:24:d2:12:30:3a:f2:ad:b7:67:71:
2a:6f:23:37:00:95:8e:bf:3f:fe:2e:a6:eb:31:84:98:b2:a2:
30:09:77:c2:21:4d:3d:a9:a5:57:78:0f:d8:6c:d1:86:fc:ff:
73:5a:49:74:3b:0e:d3:2a:50:8b:2d:07:f7:64:12:a7:f4:42:
cb:5f:2d:92:e8:41:14:83:91:98:a5:9a:19:97:a2:16:c4:8a:
03:6d:9b:32:7b:45:8c:dc:c6:ed:d0:d7:fb:cc:d0:15:65:16:
ef:7f:6e:8f:b6:34:3f:7b:26:00:59:69:0b:de:a6:33:32:73:
25:95:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:45 2024 by rpki-client on console-fra.rpki-client.org