Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: awk9vcllAUKPuzK0+nHX8DNf56eSdNNrPajLt2bK7o0=
Subject key identifier: CA:41:C5:CF:58:0D:0D:EC:27:C2:13:5D:22:70:FA:50:29:E1:3B:7A
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019355E3FD69830B25F6223245C5DE768948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 22:00:25 +0000
Manifest this update: Fri 22 Nov 2024 22:00:25 +0000
Manifest next update: Sat 23 Nov 2024 22:00:25 +0000
Files and hashes: 1: ffTEmHDwrnxcx64_e8SAl1mpY4o.roa (hash: oOLI8epsDfTUXJqCkz0SsAQAjlqrToiG0NjYMSlooVQ=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: lARjca3wejUsATjbDFRPKnRV+mRzD4X5DbFUxjnUNLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:fd:69:83:0b:25:f6:22:32:45:c5:de:76:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Nov 22 22:00:25 2024 GMT
Not After : Nov 23 22:00:25 2024 GMT
Subject: CN=ca41c5cf580d0dec27c2135d2270fa5029e13b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:a8:fe:84:98:a4:60:86:99:7e:c3:95:16:
9c:7f:90:a4:f5:dd:35:3d:08:5e:93:16:96:ce:05:
a3:e1:9e:2e:07:d9:4f:ae:45:b9:ef:d3:8c:74:be:
4b:49:48:0a:41:32:39:fa:0f:86:a6:08:11:93:9e:
ea:f1:f4:dd:bb:bb:52:91:ae:f0:20:db:45:9a:33:
15:e2:55:80:56:b7:e0:52:5f:48:07:cb:b6:6d:c3:
1a:5f:ab:ef:6b:9e:49:a4:97:e0:ff:07:f3:21:b5:
3b:c9:77:93:c7:d0:ea:79:99:b6:83:17:03:43:94:
bf:90:7b:53:bf:5d:8c:08:49:44:1b:de:97:be:c6:
d2:22:7d:f6:2c:7e:0b:f9:37:2f:7b:e1:a2:5e:5a:
91:b7:3a:63:e2:d6:6a:3d:d5:b1:31:a5:e9:37:55:
30:43:32:af:d7:02:1d:46:d1:d7:8b:15:55:a5:65:
de:b6:6c:7b:32:48:3a:50:80:11:cd:04:ed:f9:4e:
ac:40:b5:ca:34:74:46:8f:65:be:03:2a:83:aa:5d:
33:38:e3:06:a1:f7:f9:4f:3f:73:1b:c3:9e:8a:7a:
45:56:71:4c:15:47:af:94:cc:cf:a4:f8:4c:98:29:
90:ad:84:0b:74:69:38:4d:dd:3f:ac:b1:0d:f3:53:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:C5:CF:58:0D:0D:EC:27:C2:13:5D:22:70:FA:50:29:E1:3B:7A
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1e:7b:59:ad:61:7f:15:07:75:b1:59:ec:2f:4b:f0:22:36:
35:13:bd:c8:c3:a2:03:8f:ec:a0:ac:72:cc:89:84:20:05:65:
75:22:0c:77:0e:05:6d:57:db:b2:1b:6b:6c:16:d3:b4:4c:f8:
ba:a2:b0:68:63:f1:e4:df:5a:3a:c5:9f:22:e6:ad:d7:26:eb:
b3:f6:c9:6b:e6:12:e5:ab:d5:c0:83:4c:5a:51:1d:0f:f0:7c:
e4:05:f0:b3:25:8b:cc:d4:b2:6d:1d:d6:85:a9:d9:35:8a:a7:
3b:c0:c4:bd:af:21:f2:50:41:b4:9b:83:c7:f3:a0:8a:23:e6:
d9:60:73:9e:d3:d8:f1:6b:e2:00:d2:4b:13:85:73:8c:f2:54:
61:e1:b8:1f:3a:75:09:32:4b:63:9c:87:f9:ac:1e:3e:99:ba:
5b:32:a1:0f:8b:79:5b:c9:1b:7b:e1:1a:d9:f0:1c:6e:f8:0d:
64:8e:af:bc:14:a0:b7:0c:cc:23:d0:01:87:49:f5:32:42:a1:
5d:85:69:71:b6:f3:95:9a:91:81:ea:0f:b3:17:7d:25:37:c6:
a1:fb:aa:2e:79:d9:ed:84:7e:0e:3d:67:0c:6e:21:bc:da:bf:
81:36:bf:11:dd:bc:62:9d:58:2d:b1:60:b1:14:08:9f:94:4e:
75:c3:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:20 2024 by rpki-client on console-ams.rpki-client.org