Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: Gc/TvA8ij+IyAADBtIJrF8b3FyIiTXgBH0Ak4gT3854=
Subject key identifier: 39:8B:E4:F5:CE:C0:E9:AF:BF:A3:4B:9F:BC:45:E0:8A:E9:0A:0C:32
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 01936AB4CB4A9CE2EBD803CB783BA875F1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 08EF
Signing time: Tue 26 Nov 2024 23:00:53 +0000
Manifest this update: Tue 26 Nov 2024 23:00:53 +0000
Manifest next update: Wed 27 Nov 2024 23:00:53 +0000
Files and hashes: 1: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: ugWNTHVekPseatmAMjCeh8z4C/w1+GypWFY5iDIzQjE=)
2: rFBtk7BNW9OlcoysrG0wDP8usQk.roa (hash: MEu8Ib9zublPmKLqVMvoyHuwO1CqDrz6VrZJ1JKtuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:cb:4a:9c:e2:eb:d8:03:cb:78:3b:a8:75:f1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Nov 26 23:00:53 2024 GMT
Not After : Nov 27 23:00:53 2024 GMT
Subject: CN=398be4f5cec0e9afbfa34b9fbc45e08ae90a0c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:c6:6e:cb:17:23:63:25:1e:10:f9:b3:fd:
0d:ad:4e:0c:58:fe:ce:7c:7d:7a:3a:38:c0:23:78:
f9:a7:d7:e7:56:8e:af:1b:1a:51:7a:bd:56:0e:fb:
40:86:f2:78:0d:3b:30:07:94:c1:d7:ce:87:f7:76:
69:ee:0e:61:94:10:ad:46:e2:86:70:c8:55:12:d4:
23:b7:f4:68:53:70:25:e0:8f:84:7a:10:86:86:6f:
10:01:b7:20:08:f1:4c:bf:1b:37:0b:56:3e:7a:99:
96:3a:16:bd:92:39:58:bf:ff:d7:05:4a:b9:e4:78:
0a:c3:d4:b0:8a:34:d1:f6:3f:39:4e:0a:8d:a7:ad:
a7:eb:c1:84:c6:08:2c:79:0e:7c:e0:f3:1d:20:c3:
4b:3e:6c:36:f1:02:40:4e:f8:ba:23:6c:b2:87:3c:
15:fd:4b:a7:1e:73:12:3b:4d:6e:70:1b:21:76:62:
34:f9:79:e6:86:8e:ee:de:b8:a7:3b:42:87:76:a6:
8e:49:5a:49:a6:22:83:aa:5b:31:4a:75:64:62:99:
9f:bc:66:12:cd:39:bb:4e:d9:47:e2:77:a0:39:aa:
71:67:bb:39:67:b8:f0:5f:6a:bd:c9:05:a6:0c:18:
ff:cb:19:52:d3:d0:81:e9:d2:b8:98:dc:61:fe:33:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:E4:F5:CE:C0:E9:AF:BF:A3:4B:9F:BC:45:E0:8A:E9:0A:0C:32
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9e:b0:0b:d2:65:b3:33:1a:52:48:f9:f9:18:0b:ce:89:de:
3e:62:8e:b0:6f:be:05:aa:dc:34:65:3a:31:33:16:77:cd:c6:
cf:40:3b:2c:4f:7c:de:1f:d1:4f:43:75:16:81:ba:68:f7:42:
bb:df:8d:b8:cd:4e:27:a1:17:d1:c3:84:2b:42:47:9d:3c:93:
e9:12:71:64:01:4c:57:65:75:6e:2e:d7:b8:c9:a5:46:11:92:
95:a9:84:e1:1f:3b:ef:f9:6f:44:8d:e4:ca:5b:a7:79:ae:6e:
4f:7d:3e:5f:63:1d:38:c7:c6:89:cd:41:53:2e:d1:ae:29:8a:
19:95:30:fd:e5:74:f3:ff:ed:ce:f1:05:c3:64:33:22:49:b8:
88:65:27:b1:eb:77:72:cf:80:39:09:36:f5:21:aa:2f:01:57:
ed:18:95:a2:41:ab:f2:b1:33:36:10:91:3a:e7:61:57:e1:c2:
c6:cd:a5:2a:33:e2:c5:73:9d:44:8c:fd:5f:d9:09:82:9e:19:
1b:72:27:53:29:7d:87:7b:56:dc:22:4e:fa:54:eb:d3:34:c7:
4e:c6:0b:ab:2e:70:7d:f3:56:91:fd:f3:b7:41:dd:47:fe:1a:
43:97:16:12:c5:5b:77:2e:d2:13:18:d0:fa:ed:0a:07:d6:b3:
30:c2:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:53 2024 by rpki-client on console-fra.rpki-client.org