Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: LxSQvZkp6wfKCT2OMThASC3rq2ayzmtr2CWUbhVz9nw=
Subject key identifier: 9D:A4:FE:5E:B5:7A:96:4C:04:B5:7F:E5:EC:94:E9:81:E2:9C:AA:AC
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 019368581267D7500DC5D23FD600D9C6CADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 107D
Signing time: Tue 26 Nov 2024 12:00:22 +0000
Manifest this update: Tue 26 Nov 2024 12:00:22 +0000
Manifest next update: Wed 27 Nov 2024 12:00:22 +0000
Files and hashes: 1: ZMGQbIrWPW_qshOhGoodUFskIps.roa (hash: V4WJ3AZAbMjMo/OJbN9aqckeJS2H33MH2TCPjK1QGbc=)
2: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: Dq64i5DMOUqrnSnfgKMKNcL3+m1oa5LvLEsvfsf1BqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:58:12:67:d7:50:0d:c5:d2:3f:d6:00:d9:c6:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Nov 26 12:00:22 2024 GMT
Not After : Nov 27 12:00:22 2024 GMT
Subject: CN=9da4fe5eb57a964c04b57fe5ec94e981e29caaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:24:8c:47:e3:6a:e0:9e:23:32:bc:df:cd:
27:24:c8:05:3e:e9:00:b0:21:07:e6:41:91:b6:3a:
5d:71:36:36:78:c8:e4:d5:7b:87:af:d4:22:0b:f5:
f4:66:c1:78:57:fc:66:c0:74:b4:98:fa:04:58:52:
d9:e6:b5:2c:0c:f6:f3:21:bb:11:05:db:73:30:a3:
00:1a:13:8e:d4:65:51:37:0c:60:76:f8:12:b2:f8:
da:cc:76:22:96:2e:e4:73:c3:ea:a0:b8:da:66:50:
ce:18:ef:ab:8f:ff:81:f2:15:98:4c:af:5e:8e:96:
b8:43:b3:ab:44:1e:bc:f9:1d:64:3d:7f:f6:7c:b6:
43:a3:86:b3:df:0e:3e:48:7e:81:6a:52:84:1c:19:
4c:18:b5:99:15:ad:eb:40:39:b5:bd:85:94:7b:bd:
f6:39:e1:5d:8e:27:bd:f3:ae:f1:f6:48:44:1f:c9:
e6:39:f5:47:0d:c9:56:58:d7:86:a7:8a:aa:7a:68:
72:e1:51:cf:64:1c:b3:36:ed:b6:42:0c:e3:ef:c4:
98:e1:81:7e:51:b8:be:f7:a0:23:74:c6:cd:9f:37:
30:81:86:f5:9f:34:fe:00:5c:ae:c2:e8:6c:b7:1e:
44:42:41:d4:96:2b:f3:1a:b0:a9:f1:c8:69:ee:f8:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:FE:5E:B5:7A:96:4C:04:B5:7F:E5:EC:94:E9:81:E2:9C:AA:AC
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:c5:eb:9a:9c:b3:6b:29:17:8e:44:41:24:7f:9a:36:4c:
b2:14:38:1a:48:fb:b7:e0:94:64:c7:83:d8:53:fa:5e:87:cc:
b7:fd:75:bb:c2:09:44:63:44:a5:9b:a3:de:44:9d:16:90:92:
1a:7b:6c:a2:f5:77:74:b0:d1:cf:47:d6:4d:51:a0:69:64:81:
60:05:78:88:e5:07:ac:a9:af:41:61:f1:40:5c:6e:33:62:e4:
8e:70:70:d6:eb:32:07:91:66:8c:a9:60:95:bc:15:db:6f:b0:
e7:fa:27:bc:82:5a:e5:4b:69:c0:2f:3d:d6:6c:87:4d:50:24:
44:f3:d9:87:e9:76:fc:04:4e:be:47:54:4b:26:df:79:34:b9:
4d:d1:1e:e0:cf:b4:fd:43:7f:ea:a3:ac:e4:09:5d:fc:8d:e5:
1f:1a:1e:4c:13:8c:2c:0d:ef:4e:60:4c:7c:0b:68:40:33:79:
01:03:32:ad:c6:b4:bb:f9:2f:b9:63:c1:2a:6e:c4:3e:60:fe:
50:78:11:90:3a:cd:56:20:40:11:43:b5:88:25:dc:af:51:6a:
66:b5:0a:a0:71:2c:f4:bc:64:15:df:3c:62:48:5b:b3:17:d1:
ba:77:fc:22:37:a7:f0:ea:e6:75:c1:ab:f1:59:61:a2:c3:06:
44:92:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:58:29 2024 by rpki-client on console-ams.rpki-client.org