Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: vBkVsnqe7xvEDg5HDnC9Lzfy5JuL9UQxJQuAliQp0Ds=
Subject key identifier: C5:23:EE:03:AF:79:62:60:63:5C:55:01:45:6A:0A:B2:FE:C6:2D:6D
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 01935877773CBD9F9696184D151722F1F81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0BB9
Signing time: Sat 23 Nov 2024 10:00:44 +0000
Manifest this update: Sat 23 Nov 2024 10:00:44 +0000
Manifest next update: Sun 24 Nov 2024 10:00:44 +0000
Files and hashes: 1: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: IULhhG/2CDomimg3z0OWTZSXBLioVfwqTJVtWYedbXo=)
2: vYujAm0GTTMu5nxMyzvZIetpjH8.roa (hash: whnAkLbxuvT16RYWTvmize9sMISE/swDlxbAnZUNL3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:77:3c:bd:9f:96:96:18:4d:15:17:22:f1:f8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Nov 23 10:00:44 2024 GMT
Not After : Nov 24 10:00:44 2024 GMT
Subject: CN=c523ee03af796260635c5501456a0ab2fec62d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:c1:e8:94:af:65:60:71:19:53:6a:55:6b:
2e:e3:52:e5:bd:da:a8:f4:86:1c:cd:df:dd:1f:e0:
6f:b8:f7:ab:dd:d8:b6:ab:27:af:50:64:a1:ef:6c:
a8:d6:23:f3:d4:c2:01:c6:03:85:7f:5b:92:e9:24:
5d:f0:ae:54:c1:73:37:28:d9:94:a9:e8:08:bc:d8:
44:8a:0e:f9:02:9c:34:46:da:e7:fc:08:cf:26:19:
17:bc:fa:2b:ad:8b:ad:bf:6a:c7:71:ba:7b:37:ae:
78:11:4d:a1:4b:8d:a6:1e:dc:90:ca:f4:84:66:a9:
86:7b:9f:f5:bb:c2:ee:32:f3:ba:ab:03:6d:27:64:
8e:4e:b0:17:54:b3:d7:54:cc:a7:b3:bb:a9:c1:f5:
30:3f:f2:bb:32:f2:3a:67:33:c2:79:62:26:e3:6a:
65:4c:3b:f0:55:8b:67:0b:af:ac:50:ef:a4:b4:d9:
3b:09:6f:72:9e:39:6c:d8:b8:f3:b8:8e:07:b4:d0:
51:95:24:59:0f:82:8d:19:db:95:09:63:b5:b0:a8:
54:a9:4a:2f:16:da:2b:2f:a6:9f:4e:29:76:b8:f2:
73:b0:5c:06:ea:08:fb:20:fd:0c:3f:9b:60:2c:94:
e3:c3:29:1b:ff:b2:25:f7:c9:8b:02:5f:da:a2:a2:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:EE:03:AF:79:62:60:63:5C:55:01:45:6A:0A:B2:FE:C6:2D:6D
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:61:dd:64:98:14:2a:a6:64:69:d6:22:1f:83:86:04:3e:
ee:0c:4f:05:76:40:9b:d4:9f:f9:9d:4a:89:4d:b2:02:d4:ef:
ff:8d:b1:f6:0d:11:39:69:32:0e:40:12:1f:06:b5:67:db:de:
d4:1c:0d:d6:7e:ee:54:a3:af:c5:09:dc:38:de:e2:5e:fb:a9:
43:ec:56:58:3b:5a:b4:f0:14:ed:bd:2e:bf:01:c6:94:aa:44:
e8:da:4f:36:4a:3a:6d:ca:00:92:91:a8:a3:70:2b:39:f8:5a:
c1:02:d8:e4:e0:12:da:5f:63:0f:f0:7d:4c:f8:4d:99:96:a1:
40:30:71:64:82:2b:71:6e:6f:df:19:47:57:3b:3b:c7:c3:c7:
64:56:64:d7:24:4c:61:a7:37:c6:bc:32:ab:c8:2f:78:70:47:
2d:de:02:b5:b4:43:a2:ef:67:e6:b0:ef:5d:ef:87:23:f7:f6:
df:aa:c8:92:6c:41:5c:6c:8c:74:e4:2e:d5:74:86:fc:59:94:
90:42:9e:54:7c:76:8c:12:1b:ed:90:c6:39:e9:e0:c4:9a:59:
42:85:ae:0d:bb:bb:34:9a:2a:f8:4d:10:8d:f1:13:38:b2:bd:
b2:90:5f:a0:ae:ae:9b:24:e1:54:65:b0:01:78:0e:23:90:2b:
35:4a:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:45 2024 by rpki-client on console-fra.rpki-client.org