Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: iPYxd5kmYUzRE23ZP2aPFYn2pWtpngAtwwC0lcSjlF0=
Subject key identifier: 5D:A0:2F:62:7F:1C:5F:1B:3B:22:A6:08:DB:49:BF:C1:BD:34:BC:7E
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 01935689F2473385982153FD5039EF0C3114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 01:01:41 +0000
Manifest this update: Sat 23 Nov 2024 01:01:41 +0000
Manifest next update: Sun 24 Nov 2024 01:01:41 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: E/y99cyY9juppXhuV68UglMX5y8rnVbd9E68Y+BBwgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:f2:47:33:85:98:21:53:fd:50:39:ef:0c:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Nov 23 01:01:41 2024 GMT
Not After : Nov 24 01:01:41 2024 GMT
Subject: CN=5da02f627f1c5f1b3b22a608db49bfc1bd34bc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:6a:d0:f8:97:80:17:42:26:f5:ba:99:64:
9b:87:12:18:f2:3f:1e:c0:76:fb:7f:ff:f0:45:1a:
6a:25:8d:f8:31:f5:82:d0:dd:20:21:c1:22:d4:97:
79:dc:e1:2c:bc:0a:b0:30:34:7f:4d:7e:d9:55:1c:
fc:88:60:0c:fe:0b:d1:43:76:4a:3d:ee:ce:37:89:
1d:14:99:49:90:8c:34:1e:2e:1f:0a:fb:e1:19:e4:
c7:35:e6:59:ec:da:83:7f:89:ce:5a:d2:bf:03:f5:
f0:75:7d:8e:58:ee:e9:49:8b:93:a8:b4:c8:05:e4:
d8:c9:7d:31:4e:d9:f0:6b:5d:67:0d:4b:a1:d5:41:
fd:e1:cf:94:de:de:cd:0a:03:d4:87:97:ff:d4:17:
e0:15:a5:1d:3c:89:6c:62:78:b1:24:b6:2d:b1:8c:
58:2c:ba:0a:4b:20:08:7e:89:e5:d0:ed:21:98:70:
01:33:26:a6:28:4c:db:92:3e:dd:71:3f:2f:2c:86:
92:d8:3f:ec:85:96:87:13:b8:91:df:9e:6d:40:5c:
e1:29:b9:4c:10:4d:6d:aa:61:cc:39:15:d5:8e:e8:
3b:84:11:fe:a1:34:43:68:60:d8:92:ec:98:fe:ab:
8c:95:18:41:df:7c:56:33:1f:e6:84:af:3f:4f:5c:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:2F:62:7F:1C:5F:1B:3B:22:A6:08:DB:49:BF:C1:BD:34:BC:7E
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:a7:cc:ed:a9:62:16:b2:5c:af:57:a2:5d:93:c0:ad:98:
3a:85:b9:26:4f:cf:84:d4:c6:e4:c8:bc:72:69:51:5c:fa:63:
74:40:89:df:28:b5:0c:dd:9c:2d:ac:f8:a4:e5:ed:fc:2d:82:
5d:68:58:8c:9e:78:50:b6:41:2b:cc:02:59:a8:40:2f:36:b3:
1a:50:8f:30:2a:88:90:e3:69:5c:eb:17:32:46:56:d5:3d:be:
6c:4a:3f:f1:66:c2:63:de:7e:d9:bf:ac:46:f7:57:61:cb:18:
85:8e:ea:c3:af:1f:ca:55:c4:14:dd:73:0a:2b:ea:8c:3b:bc:
fd:34:8c:f4:00:f7:a0:9a:c0:d8:25:cf:59:06:a9:6e:98:f1:
ec:9f:26:66:71:ab:a5:da:2e:9d:b2:ed:90:f0:f2:d2:37:dd:
61:87:ba:e2:e9:78:e4:19:11:72:c0:39:74:dc:e0:a5:be:ab:
57:62:76:fc:d0:11:68:10:27:b9:04:cd:98:6b:31:ce:c5:f1:
03:05:f6:77:f9:fc:7b:12:d6:11:d8:01:17:33:db:3b:0e:31:
35:ef:d8:13:25:89:27:00:9a:6a:67:3f:80:7c:2e:51:e1:c8:
eb:a0:95:31:0b:fa:22:bf:38:30:e4:93:69:d4:a0:b5:be:86:
6d:1b:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:56 2024 by rpki-client on console-fra.rpki-client.org