Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File: fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier: PInM6vONG1BPeVoj7AMqxK3cf0WmspvCXa+IiZTz8AI=
Subject key identifier: 9F:71:68:12:74:86:56:2F:A9:2A:CD:40:B7:EF:53:54:EA:DF:DC:15
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer: /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial: 019365FDB8242D35C983B3A830D284094D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number: 0803
Signing time: Tue 26 Nov 2024 01:02:26 +0000
Manifest this update: Tue 26 Nov 2024 01:02:26 +0000
Manifest next update: Wed 27 Nov 2024 01:02:26 +0000
Files and hashes: 1: UKSF_Fv3CqLh_32l4ChuUDH6Du4.roa (hash: rZ+qNXv0G4X7XJfTY+kMW3aMlnV651iu53nf85Uhvcs=)
2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: 42ThpoLhPScLmt9treH8426EnePSjnYv0iEn1PzIn9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fd:b8:24:2d:35:c9:83:b3:a8:30:d2:84:09:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Validity
Not Before: Nov 26 01:02:26 2024 GMT
Not After : Nov 27 01:02:26 2024 GMT
Subject: CN=9f7168127486562fa92acd40b7ef5354eadfdc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:ce:86:a6:6a:ca:c5:19:11:55:62:67:af:
c0:b0:d8:09:4c:ff:2d:9e:74:19:77:2f:c0:dc:fa:
63:63:8b:ce:75:89:00:42:d6:d5:93:26:cf:3b:5f:
e2:63:03:cb:56:be:ba:6c:c1:00:c3:c5:ff:6d:8b:
de:39:fe:6e:9a:05:c7:ee:83:f8:be:3d:df:fe:49:
32:d7:6a:e6:3c:ac:be:31:5b:9b:f8:b7:f8:3b:2c:
2c:6c:80:d0:03:3d:66:41:64:21:1c:a9:7e:fa:cd:
68:f3:b4:10:65:c6:da:7f:13:d4:5d:9c:f0:ce:15:
d5:01:e2:e9:95:80:db:d1:78:19:4e:c8:54:44:98:
2d:36:a1:2f:fd:e8:57:53:10:76:76:29:73:96:0a:
a1:81:b1:e7:07:87:72:bf:c4:3d:b5:4e:5f:4e:8f:
43:1a:36:50:5c:d3:27:6c:68:e1:c6:2f:56:0f:a1:
0e:4e:3c:a1:fd:c6:00:2e:78:63:96:fa:49:71:ab:
c3:5d:94:9a:17:d4:50:14:79:88:11:3a:a3:7f:10:
06:f4:92:68:6c:60:99:81:19:b2:d0:a3:b1:68:10:
8e:68:83:e7:bd:1f:e8:0d:25:3c:db:a3:aa:33:a5:
30:b9:43:c5:42:7c:bf:99:a2:5d:18:b1:8e:f7:c6:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:68:12:74:86:56:2F:A9:2A:CD:40:B7:EF:53:54:EA:DF:DC:15
X509v3 Authority Key Identifier:
keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:64:64:ad:ae:63:75:e9:78:68:4f:1b:67:05:0e:d2:45:
77:2f:22:fd:5c:6c:35:bc:cd:c9:6c:19:53:a8:d8:32:b4:19:
03:9c:b1:e5:85:d5:00:88:76:ee:95:e5:0e:9c:6b:9d:80:38:
28:47:1b:90:b1:d9:70:46:e4:74:bd:97:3d:34:0c:f6:4b:f1:
1a:89:e5:5d:a3:21:45:e3:29:32:36:d1:02:36:59:be:cf:05:
9d:e2:81:c4:09:52:2c:31:58:cd:af:d6:bf:38:e8:0c:8f:64:
8d:5c:fd:ec:55:bd:1a:dc:88:c0:e5:6f:bc:d7:f3:ec:39:b3:
40:0b:8d:1b:ed:bc:d0:12:83:d4:60:6b:00:a9:2c:1a:5d:42:
ad:fe:6f:ef:79:34:3f:cb:55:a5:cc:63:a2:9f:fb:4b:90:b9:
ff:68:86:7e:2f:85:e9:ea:b6:c3:e2:d3:1e:7e:6c:7b:3b:87:
c8:d0:67:ca:35:4e:d7:eb:5e:8f:49:39:ac:d0:57:d7:7e:ef:
15:c9:fa:96:49:9b:94:3f:6b:ef:e6:ac:8f:cc:03:f4:99:d8:
32:0b:eb:68:d0:48:7a:f0:77:b1:24:53:92:dc:f2:22:40:61:
bf:82:b0:11:d6:d4:b6:c0:77:6b:17:f5:14:ad:54:fe:a6:c4:
c1:e1:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:57:32 2024 by rpki-client on console-fra.rpki-client.org