Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: VIQWd7pFT83vjLWcfWMZML2J4RJpvygKfyn2Z+UJjCY=
Subject key identifier: 1F:6C:F7:72:C2:50:D4:D2:2A:8B:E7:D3:7B:BD:63:AE:E6:34:93:A7
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019352ABD7C29FA12D11395CE5B315BF63F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 11D7
Signing time: Fri 22 Nov 2024 07:00:13 +0000
Manifest this update: Fri 22 Nov 2024 07:00:13 +0000
Manifest next update: Sat 23 Nov 2024 07:00:13 +0000
Files and hashes: 1: 4iuGq-VWGgHQhLj4nds89YHROaI.roa (hash: 87WRFQXToutiGRbBy/iffGVB/EGVXGZhDbxq70sSagQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: gLJnAKuXb+XajbHFjblSizgcEM+LYEfse2WBf+D9BVQ=)
3: wO3gO3AtzjwYiKYp9AfWbXKMxKA.roa (hash: 7FDysw6a2Tuu5B5ron14GV8BgfKfajXbaEOiK3IwJLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:d7:c2:9f:a1:2d:11:39:5c:e5:b3:15:bf:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Nov 22 07:00:13 2024 GMT
Not After : Nov 23 07:00:13 2024 GMT
Subject: CN=1f6cf772c250d4d22a8be7d37bbd63aee63493a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:11:d1:2b:c1:ea:5a:4c:7f:24:f6:6a:1c:
60:37:af:a0:5a:76:35:85:68:9f:ff:41:e8:3a:23:
9f:bf:d1:18:e2:d7:64:33:cc:28:5f:2f:d2:a2:3d:
52:10:31:47:02:d1:30:a4:ce:c8:b6:db:2e:35:97:
e2:22:af:07:26:ba:20:8e:ec:6d:5b:3c:91:69:f1:
3c:90:6f:03:ba:4e:0b:8b:a8:92:cd:5b:30:b1:8f:
bc:aa:77:50:e8:c2:d5:33:09:c9:7c:42:34:14:0e:
2e:9d:1d:71:0d:d3:fe:35:67:8c:85:44:c0:2e:d6:
8d:62:05:b9:b0:33:0d:24:64:aa:26:6d:84:ac:3d:
e2:eb:1a:3e:60:86:d7:b5:06:b8:63:b9:2f:6a:9f:
79:73:1c:c4:7f:a9:85:17:7e:b2:79:c4:38:71:b5:
23:45:8a:dd:fe:ea:92:ef:19:2d:a0:d2:3f:ba:ae:
db:04:d5:18:77:e0:00:59:da:c5:f1:16:3b:b0:52:
39:1b:72:84:cb:42:71:a7:b8:a4:63:34:1a:38:1b:
ec:cc:0b:61:80:b5:86:30:5e:8e:7c:0e:02:0c:6f:
32:b4:12:24:42:bc:1e:cf:49:e8:7d:7e:69:2c:2d:
40:e3:75:a9:77:be:c8:f9:94:60:26:d0:e0:fb:81:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:F7:72:C2:50:D4:D2:2A:8B:E7:D3:7B:BD:63:AE:E6:34:93:A7
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:14:82:01:3c:d1:7c:c7:6b:86:61:f3:6f:22:b4:1e:ca:
4a:50:7f:dd:f3:e3:2b:56:cf:6f:14:5e:c9:dd:ab:61:fc:de:
d9:03:8b:ee:c7:31:e7:66:74:0d:00:a2:58:68:4c:71:eb:38:
24:69:ff:e2:5a:31:f0:90:2a:be:2e:e4:cb:c7:42:9d:f6:a7:
95:f2:27:8d:ca:a1:be:cc:db:8c:91:6f:41:78:8e:ae:ac:aa:
77:66:47:c9:84:27:70:c0:e8:b8:7b:19:38:98:f6:e7:c5:f0:
7f:a1:14:65:7f:af:81:45:9b:53:9d:e9:9a:d4:d7:a3:35:de:
32:f8:89:56:eb:19:1e:b3:e5:72:46:b5:00:ad:f7:5c:b0:1a:
20:7d:cf:4a:61:d7:78:0b:16:03:f6:fc:36:30:88:54:1c:92:
84:23:ea:89:b9:8e:6e:67:c0:63:fe:eb:a9:b6:30:22:f4:7f:
3e:a4:bf:74:cd:61:ec:30:a2:34:92:21:96:2d:e1:95:ed:4b:
59:3e:09:16:6a:28:2b:e5:c5:53:a1:03:d6:c4:42:eb:33:83:
dc:ea:7f:09:00:9d:d1:ce:32:5c:7a:98:9d:60:2d:fb:26:86:
c4:7f:22:98:2f:39:87:6d:bf:23:6a:88:55:a9:68:d2:70:db:
7b:57:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:30 2024 by rpki-client on console-fra.rpki-client.org