Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: pc5eglbXyGKrU+2/b6QloNrutLfJsndnFsj/DcL4XJY=
Subject key identifier: EB:17:83:F4:CF:65:E9:EE:47:1A:B0:E4:65:4B:A8:E3:E8:AD:14:95
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 019406B3FB24AEBFB2DCDA04145FD6609F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 12DC
Signing time: Fri 27 Dec 2024 06:00:45 +0000
Manifest this update: Fri 27 Dec 2024 06:00:45 +0000
Manifest next update: Sat 28 Dec 2024 06:00:45 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: i+oRyl3f5Y9nkEvCMHZKf1QdMsusLf52tW1Cbs3o09Y=)
2: JYbcTThxOx5BnOuR-mJWLMRrwnk.roa (hash: adXrqc0lnzAUr8dKQ3rTWmreu64+i239Ds4J5l+KNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:fb:24:ae:bf:b2:dc:da:04:14:5f:d6:60:9f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Dec 27 06:00:45 2024 GMT
Not After : Dec 28 06:00:45 2024 GMT
Subject: CN=eb1783f4cf65e9ee471ab0e4654ba8e3e8ad1495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:24:5a:59:d4:b4:e3:e0:76:82:38:a3:5d:
6d:e4:95:dd:24:5a:cb:e9:79:db:c0:c0:ba:9d:f8:
69:a0:23:b0:96:d6:5f:60:54:a6:ff:9f:aa:99:2c:
c4:b6:bd:cc:77:a6:99:bc:1b:89:93:cf:a6:d6:9f:
ed:fc:13:88:ce:f0:d7:4c:97:37:6b:0c:f8:b8:8b:
4a:a4:fb:73:dc:a9:69:12:b6:73:d6:a9:18:37:0b:
d1:58:e6:a9:bb:a9:74:b0:d4:78:11:75:1a:5e:2e:
0d:cd:8e:5a:ce:96:72:bf:7d:3f:26:2d:30:f6:06:
1e:97:59:07:b7:3b:68:da:c6:48:42:fa:a1:28:a1:
25:97:c8:8b:54:b1:f5:28:08:8f:6a:7e:a7:b1:5e:
97:1c:6e:f1:1f:bf:67:b1:24:e1:c2:a7:a0:f1:a7:
9b:b3:41:4d:98:ac:17:0f:e3:39:17:d9:98:6f:1c:
3e:6b:20:f5:78:dc:19:1f:7f:65:a1:75:6b:89:c0:
e1:a3:bc:1f:ac:15:89:4e:c6:a9:6d:f4:fc:e5:72:
48:5a:6b:b4:52:41:66:e3:6b:88:e4:ab:20:79:74:
2b:eb:4d:3d:df:c7:e6:d2:7a:64:98:b4:14:47:1b:
54:01:a9:f1:ba:e0:77:ab:79:d1:96:88:1a:96:e2:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:83:F4:CF:65:E9:EE:47:1A:B0:E4:65:4B:A8:E3:E8:AD:14:95
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:eb:5c:65:01:27:17:95:d3:69:f9:67:ab:af:d8:f3:08:00:
34:35:22:30:1f:e3:88:04:4a:5f:ca:45:66:04:30:ed:01:a8:
f0:4d:51:89:82:69:9f:45:83:c1:7b:74:0d:21:73:d0:cb:ba:
b9:36:04:10:1a:dc:7d:bb:84:a8:ad:58:4c:3b:b1:75:58:e9:
3c:57:0e:bd:6d:89:db:c6:aa:b3:6e:ab:e2:47:44:36:7c:bf:
53:07:00:e2:25:d2:01:41:ba:10:5b:b0:e7:34:a9:bc:85:95:
9a:6d:74:a7:09:02:6e:96:ed:a7:0d:3f:61:e2:24:74:b4:35:
61:f4:95:e8:da:c8:ea:45:2c:43:a0:ec:f3:4f:16:d4:9a:da:
c1:e6:e4:2f:7a:06:75:57:3a:4b:17:47:28:25:f1:e6:bd:e8:
be:b8:2c:35:78:3f:61:8f:ea:13:08:e0:2a:9f:07:46:f8:70:
9c:63:76:37:b6:15:1b:d1:bf:49:df:4b:a4:6b:9b:9d:18:30:
c1:c2:00:4c:9c:8b:bd:00:15:6a:4e:c0:b5:e1:15:8b:05:4d:
7c:49:39:55:2e:73:c5:d4:4c:81:60:bf:d9:17:d3:2b:ee:d4:
d2:06:d8:d9:1f:c7:e9:ff:ab:67:69:7d:eb:d2:f6:61:f5:e7:
bd:59:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:54:48 2024 by rpki-client on console-fra.rpki-client.org