Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json)
Hash identifier: 6mFC0A+WqEOnvI2jWTdCnpQLHOE89/TWwnjNynjmGYo=
Subject key identifier: 0F:C7:47:DB:12:DB:44:47:1C:4F:C4:51:FD:C6:9F:45:B2:45:B3:A2
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0193519995144534165AE9B6A40D3BA30614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
Manifest number: 1380
Signing time: Fri 22 Nov 2024 02:00:39 +0000
Manifest this update: Fri 22 Nov 2024 02:00:39 +0000
Manifest next update: Sat 23 Nov 2024 02:00:39 +0000
Files and hashes: 1: 6kJ96XMY799y6vtmrn9rx3kYmhs.roa (hash: PNSRje8fwUirW2TXsczyQ2jOuSaEbsxbw87OdQ35Jrs=)
2: UzT2L2zieEzygfAZBsfnKXzillo.roa (hash: d4DJIv7gwoJAgQk3DlfD7vhyLwqoo8Ij0yUfTBnjhbw=)
3: _bBDK1nUQdsI5Vhj546N3ABb9f8.roa (hash: 8TWPO4hI51cVFijwej2pk6cT1UBE6HMej65AQk5QpzU=)
4: dW5AzCDkth1zapjkUSsbaaGQU7E.roa (hash: aPV1UY5WaJOmG2/BN1+Yn8KtMdB+LDJeDLGjhh8kCV0=)
5: f1qcqJmojmjm9tN--vJ2FUipzUg.roa (hash: 97ORGdvoZSob+gt0h3AQ6tlmlIjkq/+QDwWAR4hCgMQ=)
6: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: GNzWpP0B05ZCK0Ra2HjLaJZXwaa6915C++QI5OS8sb0=)
7: lzqQLxCOgbmMsFjIF9l6yOZ5_lM.roa (hash: NYvys6J3TneEgOXNsSuYqj8xqnd3SH7BGXlv5Qny2EY=)
8: omNvqowQWiFcHzJmArraPXsTckw.roa (hash: ud2vkFB3oPXxZN8PY4iD97HcEJqFoVfzq7PHNHYE8R0=)
9: qV26o5jf7Zdqx2NPUxQYdarYo_4.roa (hash: Gs1DQ/tougIiuQj6HLbiD8HrEDMNOCL2u1112zrE+C0=)
10: vZHFhIaZCEkZwYylPh9pBWCedbM.roa (hash: PFlsx86ehYKUMA6fSJe1wqKv3SeOZdsbRcfAmNYLmVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:95:14:45:34:16:5a:e9:b6:a4:0d:3b:a3:06:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Nov 22 02:00:39 2024 GMT
Not After : Nov 23 02:00:39 2024 GMT
Subject: CN=0fc747db12db44471c4fc451fdc69f45b245b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:9c:72:ae:d5:d7:75:3c:4f:4e:18:2b:37:
08:7f:eb:89:5d:35:9d:ed:12:16:63:31:ae:67:cc:
06:4b:4f:6f:c3:ed:de:d6:19:eb:11:c0:73:a8:a2:
a4:a7:2f:34:8a:73:7d:b2:e9:5a:f2:78:d2:65:5d:
89:58:27:25:dc:43:23:71:14:ed:9c:95:ed:06:9a:
86:6f:7f:d6:54:21:dc:a9:eb:7c:d0:3d:92:9d:5c:
df:9f:aa:2d:19:94:5d:f2:1e:11:47:a7:01:c0:45:
0c:dc:88:d2:a5:5e:e6:e8:7a:82:2f:22:d3:37:15:
00:93:92:28:ea:07:eb:38:69:0c:c1:9a:5e:51:f8:
00:b3:e9:71:77:49:fc:db:db:05:64:fd:4b:00:3a:
35:96:dc:eb:54:86:ea:31:45:14:24:87:93:b4:5d:
5e:8c:35:37:4f:13:5b:45:7e:05:8b:2f:21:b4:9f:
c4:9d:a5:1a:ce:e7:d3:a7:41:e9:52:a5:ac:09:2d:
d1:8d:e9:17:ac:9e:3a:19:2f:df:7c:a7:c9:d8:c8:
d4:14:8a:bf:32:f4:57:e7:61:b6:f5:9a:77:36:96:
88:21:48:8f:65:ea:2c:90:49:53:6e:98:c2:8d:50:
bd:c2:4e:44:33:33:4a:82:43:d5:ba:12:3b:6e:c2:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:47:DB:12:DB:44:47:1C:4F:C4:51:FD:C6:9F:45:B2:45:B3:A2
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:07:5a:e3:3f:00:5f:5a:95:c9:27:8e:dc:a3:0f:26:b4:97:
f6:6d:fb:d1:0c:ba:e3:13:54:c7:7f:95:64:d7:16:d0:d2:b6:
c3:26:63:56:aa:ec:ae:37:64:f8:84:b3:df:eb:7a:fb:ea:82:
6a:67:7e:e3:1c:47:d7:ec:4e:72:82:eb:5b:58:e7:55:28:65:
4d:3e:a1:09:7b:bc:51:7a:01:42:e3:bb:b8:e5:62:5d:bb:7f:
9e:e8:70:18:25:3b:b7:f4:ca:6e:40:ee:e2:d3:ad:9f:9e:b7:
72:68:18:cf:2a:d6:ab:a6:d5:8e:91:6e:94:d9:63:5a:e0:9a:
b1:fd:a6:ea:b1:05:f3:18:e6:e4:31:39:77:55:37:bf:6c:7d:
a6:15:f8:69:12:d3:73:6d:e3:09:f2:b0:83:f5:77:40:7b:18:
d9:fe:09:90:ea:b0:b3:cf:6c:e5:dd:c6:3c:ad:1e:61:77:19:
1e:19:95:cb:51:2d:0b:4c:4a:b3:8c:9b:5d:3e:cf:56:44:67:
fb:51:fa:57:89:d8:7a:84:a3:54:42:2e:bc:94:fe:91:76:2e:
b0:e3:f2:a4:33:3f:b1:95:c1:a9:6f:1c:b1:e3:cc:69:b7:9c:
bf:1f:cd:c6:d4:4a:05:00:89:3d:71:46:ba:59:cc:0f:f5:ba:
a2:b7:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:53:36 2024 by rpki-client on console-ams.rpki-client.org