Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: ILSc8lr/sH8LqlsS51e3xPkNIzgVqVo7ID81lZgu+3A=
Subject key identifier: 16:EA:1D:A1:B4:35:79:50:84:69:A1:B4:AC:63:9F:A7:BC:5C:59:87
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 019406B3D999AAAFCC0BBE91EAA0BD2CF697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 06:00:37 +0000
Manifest this update: Fri 27 Dec 2024 06:00:37 +0000
Manifest next update: Sat 28 Dec 2024 06:00:37 +0000
Files and hashes: 1: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: ewKSQn6QSVNMJ1ckexvlgpuc9LxrAi1ydm09ya537IE=)
2: f8JGErQpm3immCeRkeCw8zIF13U.roa (hash: zU6ClNDwXmc3bWl5MB+RLYneYnG/o0PAYjkVC+eOis4=)
3: xBBv34D-f5Umij7IGab8C_E-r4Q.roa (hash: 95xgc0bdfdfOSIXphWzE0SLdNcxlTFEgwA8FWYN8wJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:d9:99:aa:af:cc:0b:be:91:ea:a0:bd:2c:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Dec 27 06:00:37 2024 GMT
Not After : Dec 28 06:00:37 2024 GMT
Subject: CN=16ea1da1b43579508469a1b4ac639fa7bc5c5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:bf:32:c4:46:d4:09:f0:18:f5:41:75:5b:
88:65:8a:51:15:a0:16:d1:eb:a2:8b:22:96:9e:60:
dc:63:7b:c5:9b:6f:c4:d6:3e:6c:42:94:03:8a:6b:
e5:b1:a0:cd:59:b3:8d:fc:56:81:02:4d:e2:d1:ae:
6c:91:e1:b8:74:e8:b8:d5:dc:28:41:c8:be:41:50:
0e:f8:4f:58:b4:69:5e:8f:5c:20:5a:15:92:1b:8e:
10:42:65:46:94:64:fb:2d:6b:77:56:ca:4b:a1:13:
a0:16:1f:f4:f5:36:ce:31:07:da:aa:1b:94:68:7e:
b7:3d:89:56:8a:6d:03:4f:f7:90:c3:3a:52:39:66:
31:08:24:56:51:83:3b:a0:03:0f:87:2c:f9:ee:01:
23:7a:36:e1:46:10:fc:f9:c2:76:c6:42:1a:e3:78:
19:4a:e9:cc:f0:c8:e9:a8:f7:50:05:1b:4e:d6:c7:
04:74:6c:f2:c7:37:73:a8:6d:cc:52:e6:22:68:7f:
20:54:f0:59:3c:7e:fc:d3:6e:64:da:9a:3c:d1:7d:
92:7b:c7:9d:fc:05:a0:de:e8:51:fa:cd:53:19:29:
a1:b0:20:b7:fd:71:f4:44:ef:b9:3d:4b:d6:f2:cb:
ba:2a:c2:b9:2f:d5:e0:50:ab:03:3d:d1:e0:1f:9b:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:1D:A1:B4:35:79:50:84:69:A1:B4:AC:63:9F:A7:BC:5C:59:87
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:ab:de:5d:69:e3:71:01:b9:b2:92:71:f9:dd:27:ab:01:
89:40:76:75:18:4c:9b:d0:73:6c:ef:c7:0f:42:a2:69:bc:7b:
c5:b4:a9:a1:f6:9e:68:62:c4:18:04:9b:b0:28:f0:6b:13:3a:
14:0a:a4:18:ea:fb:a5:d3:80:9a:79:62:ec:dd:e9:d7:cd:bc:
8f:33:54:62:75:bb:b4:c9:19:d0:e8:e5:bc:e5:0c:a3:7f:78:
96:87:3e:5e:80:49:9e:31:12:5f:d2:74:8b:1d:4f:ee:d5:96:
b0:04:8c:5e:9f:0a:00:cb:ce:41:e5:0f:3f:ab:2f:d6:9a:48:
81:b6:62:a8:6d:dd:b6:17:85:4d:98:c0:64:fb:80:32:75:a1:
8c:09:46:ec:30:49:24:7c:62:4f:00:6d:d4:9e:ba:ec:c8:a6:
1d:0e:9d:73:2e:78:b7:4a:dd:cd:9d:c6:f4:87:eb:69:73:72:
7d:2c:f3:d4:f5:3e:1f:81:e4:65:93:b7:6c:86:a1:ff:25:2d:
23:4c:bc:19:6f:48:d5:06:d9:c1:d8:25:43:46:89:06:ad:d6:
07:1f:eb:ca:d7:72:22:a8:0e:0b:d3:0b:be:25:b9:0b:33:0a:
ac:fe:03:a9:c1:55:ca:91:df:c6:63:e9:ff:99:1e:e4:36:e8:
4c:01:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:05 2024 by rpki-client on console-fra.rpki-client.org