Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json)
Hash identifier: oXqrPHHcr8on2wLpcphk9Hh47gDSECwzrbjEI06LgMs=
Subject key identifier: D2:13:FC:91:BC:91:4D:F7:8F:2B:82:C5:4D:F3:D0:51:D0:2A:88:EC
Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab
Certificate serial: 01935689C57CFCC8F634A2E6CF6CAA298F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
Manifest number: 0E0E
Signing time: Sat 23 Nov 2024 01:01:29 +0000
Manifest this update: Sat 23 Nov 2024 01:01:29 +0000
Manifest next update: Sun 24 Nov 2024 01:01:29 +0000
Files and hashes: 1: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: +ym2lyqj+zx/0qXilraPUsLOlB9OEMKiw9l3IKqiulE=)
2: IaPdn3Z0HDPTQ-jkVSEx4et7TkI.roa (hash: FUrxGjKdbkwpaT++WBX+T0gNWjbiQhU6YYPkINFDLjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:c5:7c:fc:c8:f6:34:a2:e6:cf:6c:aa:29:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab
Validity
Not Before: Nov 23 01:01:29 2024 GMT
Not After : Nov 24 01:01:29 2024 GMT
Subject: CN=d213fc91bc914df78f2b82c54df3d051d02a88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:65:24:de:94:d9:25:45:76:0a:67:eb:b4:
38:f0:36:bf:de:ea:94:3c:cb:a6:3c:fb:ee:42:cf:
58:06:f7:31:87:6d:ed:26:d3:19:8d:a7:17:02:a7:
cb:24:9c:86:2d:2b:b5:fe:94:56:7f:05:0a:81:f8:
13:fc:a0:31:99:8f:67:46:f1:5b:9c:1f:1c:c1:e5:
fe:b1:ae:f3:4d:5d:46:6a:d4:3a:48:44:9f:bc:1b:
66:ff:d8:2d:68:d2:39:cb:ff:4c:60:9f:54:e5:16:
da:ba:05:66:88:a3:5e:0f:37:66:c6:71:d3:4d:79:
f6:a4:0c:e6:d6:a2:76:20:39:ba:f7:c2:92:aa:32:
36:7c:70:16:ca:53:c0:af:3a:f2:7b:31:ab:2e:3d:
b2:0f:9a:41:55:1e:37:a7:29:90:d1:aa:89:e1:1a:
26:e6:5e:35:6c:4c:3d:21:a5:fa:7c:3b:af:3c:07:
5d:1f:14:e3:35:ec:dd:af:f5:6f:59:77:56:bb:20:
f9:97:6e:c4:98:13:0d:40:df:92:51:ca:ab:da:bf:
26:82:f1:44:6e:da:2b:bd:5f:fa:f0:31:8b:ff:ee:
1d:21:56:9b:46:d6:14:eb:df:7a:bd:24:db:1a:b7:
dd:ce:50:4e:63:e2:62:45:83:0c:24:1b:a2:86:1f:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:FC:91:BC:91:4D:F7:8F:2B:82:C5:4D:F3:D0:51:D0:2A:88:EC
X509v3 Authority Key Identifier:
keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5a:37:d7:aa:bb:d6:12:b7:1e:fd:34:e1:f1:7a:d9:b7:d7:
b2:d7:77:77:d5:04:9b:b0:95:79:09:b5:cf:a7:9f:3c:2b:fe:
cd:f3:6d:d0:a5:94:b6:94:76:23:b8:3e:fa:24:4a:bb:fa:07:
d6:3e:0a:10:90:c9:f3:f5:76:70:9b:92:e2:be:65:02:0d:a0:
37:ae:6e:ba:68:5d:31:32:84:d2:4b:0a:97:a5:a8:af:79:7a:
aa:82:30:2a:83:3d:f4:ca:95:e0:2e:9f:c5:49:35:b8:eb:d9:
79:82:f2:4f:81:e4:67:97:b5:41:42:e2:c2:20:2d:b4:22:a9:
c0:60:88:14:94:81:07:fd:e4:1c:01:56:cf:cf:5a:5a:2a:d2:
f0:05:ac:6e:2b:6c:d0:c7:5e:73:e9:3f:d5:e6:be:ec:43:70:
38:6d:9f:0a:06:69:c2:c3:f1:b0:eb:89:1c:c3:54:ef:9e:5a:
2d:ee:88:96:a9:a4:38:0c:ee:03:db:dd:78:84:5d:65:a5:2d:
56:35:86:83:5b:b9:7e:a6:67:a4:36:29:6f:75:e6:a8:36:26:
79:02:29:45:f8:e8:b9:73:d4:8f:3a:ad:32:87:ac:1a:bc:ec:
ad:a3:f8:5c:1b:13:c4:c9:0e:18:06:ae:ee:11:fe:a3:f5:91:
ea:1f:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:01 2024 by rpki-client on console-ams.rpki-client.org