Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: p3ioHIkK0z7u7UPUPFeTaxKTlERFacruPSmv0N+x/f8=
Subject key identifier: 8E:98:A9:81:98:AA:4C:F4:26:43:C8:9C:F8:0F:0F:90:5B:7B:84:F0
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 01936A46E0EF5447A222A578DA519F4D327F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 21:00:50 +0000
Manifest this update: Tue 26 Nov 2024 21:00:50 +0000
Manifest next update: Wed 27 Nov 2024 21:00:50 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: ixv2caRmjvzzBDdXIZTFwpYYX6jk0rLgB9HzYIvRKlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:e0:ef:54:47:a2:22:a5:78:da:51:9f:4d:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Nov 26 21:00:50 2024 GMT
Not After : Nov 27 21:00:50 2024 GMT
Subject: CN=8e98a98198aa4cf42643c89cf80f0f905b7b84f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:63:4d:9f:de:47:5e:a8:dc:4a:c4:ba:53:
6b:f8:91:b0:2f:8c:be:a5:29:67:18:d9:00:8f:b9:
71:5d:d2:cc:84:bd:a2:ac:fd:84:6b:90:4a:c9:4a:
19:dd:17:76:2e:3e:b3:fd:a2:7b:b5:d2:1d:18:67:
f3:77:68:37:7f:85:a4:38:8c:17:1c:61:d1:86:2d:
c7:a7:31:7a:67:9d:fb:be:8d:bd:ad:a4:6c:3c:ed:
d9:cc:bb:f9:cb:4e:0e:6b:fe:60:af:d3:b8:2f:0d:
a8:41:35:6d:4f:cc:a9:a9:35:6a:84:97:b7:77:12:
0f:e7:6b:1f:01:0b:47:8c:ca:00:bb:3a:7e:6e:21:
63:aa:f0:3c:d2:9b:f2:c5:4e:be:40:47:b8:63:ce:
d5:85:aa:fa:42:95:54:bd:17:0e:f9:ad:83:c2:bf:
13:79:c0:c5:4d:e0:58:13:4f:f0:e3:55:b4:eb:0a:
c0:aa:80:f9:ab:15:44:82:31:02:ea:61:c8:19:b7:
63:0e:d8:17:a3:79:b9:27:98:06:30:30:26:30:b4:
ba:85:7a:9e:2d:ea:83:67:9e:69:dd:38:ca:00:f8:
f3:de:15:ce:42:22:62:9f:e1:62:4d:b9:a5:18:b0:
a5:36:34:60:17:81:a8:1f:df:2c:0a:df:0d:46:2c:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:A9:81:98:AA:4C:F4:26:43:C8:9C:F8:0F:0F:90:5B:7B:84:F0
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ec:1a:6b:82:a4:af:af:3d:3f:c7:06:46:fa:9d:f0:b0:2a:
ae:1f:94:94:a9:58:8d:8d:71:55:4f:ba:0b:9a:89:09:53:6b:
9d:d3:0a:cf:a5:99:4d:1f:44:a8:64:b5:e6:c4:7a:18:4d:a6:
f0:e5:35:ad:91:34:22:5f:aa:e2:6a:9d:61:38:01:0d:79:7e:
21:70:53:16:d2:7c:86:c2:c3:8a:dc:0b:50:83:19:0b:74:bb:
3a:0c:bf:9c:fe:2e:80:23:04:c2:1f:d7:e0:9c:41:25:ab:18:
7a:e0:8a:54:d7:5c:00:80:ff:33:aa:89:da:9b:8a:f1:cb:e3:
e4:11:a8:fa:f5:b5:51:f2:6f:6b:34:83:9b:72:70:14:18:4d:
2b:b4:67:b0:5f:6c:3a:b8:5f:9c:27:d5:aa:72:7a:a6:84:62:
d2:ad:73:b1:cc:34:47:16:7a:05:fd:82:54:94:4b:36:71:70:
31:4b:6d:65:e4:3b:dd:a9:13:1b:32:17:f6:c7:50:28:65:a0:
c1:84:f6:80:77:55:bb:fc:66:b6:28:70:6a:4f:79:01:2d:4e:
8e:4d:95:c5:d5:b1:8c:86:0c:8c:45:e1:5d:77:81:0f:90:c6:
a8:a4:22:60:c6:26:db:83:49:f4:95:fb:8a:f0:de:97:98:b3:
9f:2d:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:27 2024 by rpki-client on console-fra.rpki-client.org