Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: YJsbVkFf6lAeBYbZF80Vb0+bXUvwRuRjZ+CwZqgH1Xs=
Subject key identifier: FC:B2:8A:76:E5:C9:79:A3:3D:08:9A:FA:BA:2F:DE:3C:11:61:5D:6C
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019366D7BD486C6770BB34A52D2B989FA6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 05:00:34 +0000
Manifest this update: Tue 26 Nov 2024 05:00:34 +0000
Manifest next update: Wed 27 Nov 2024 05:00:34 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: xedgDvhSeEsUM9FC0BUp2gsFpUke54SwXkQ+qvYvQ+4=)
2: zGikwoIBZvGkRvvwM9IT58X4y3s.roa (hash: 7mw6aXf9h8zAOLGZmVNyfwOCk6TOV29Vr9S9MXAF1kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:d7:bd:48:6c:67:70:bb:34:a5:2d:2b:98:9f:a6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Nov 26 05:00:34 2024 GMT
Not After : Nov 27 05:00:34 2024 GMT
Subject: CN=fcb28a76e5c979a33d089afaba2fde3c11615d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:ce:47:43:13:76:a3:6b:4a:aa:6b:1d:99:
ae:4a:f4:ff:0f:60:1e:d6:e2:18:f8:b7:b8:ac:83:
84:79:38:62:b9:5e:3e:7c:40:4a:d2:b9:a0:bb:60:
06:2e:6c:4e:96:6b:19:ab:0c:81:89:82:dd:6c:35:
f8:58:82:d1:2e:8f:f9:b9:3c:1c:de:e5:38:87:e8:
14:4e:bf:bc:1a:28:0c:59:df:3d:d2:66:cc:fc:02:
c7:83:bb:a0:42:2d:13:44:79:16:86:ec:fd:66:7f:
8f:7d:15:5e:7f:d4:de:49:8a:3d:97:67:70:b4:de:
c5:32:54:1b:83:2a:7a:dc:85:ae:24:c2:b1:c0:44:
97:00:e9:ce:f9:23:77:0c:45:51:dc:d7:ed:9b:9f:
71:c5:07:e1:34:29:01:95:8d:fd:3d:98:55:9d:74:
f6:bf:c7:1b:9d:a7:55:87:00:bf:d5:12:9d:85:3d:
c5:60:5f:bd:36:ae:6c:e0:b5:cf:db:e4:f1:8c:ce:
c2:88:8c:d9:e6:59:f8:7f:e9:d7:a1:53:c4:ca:f0:
1b:46:54:58:a3:7f:4d:c2:46:23:ad:e7:39:17:f4:
d4:f0:b6:14:fc:7b:5c:8b:0d:c5:f7:00:38:c0:0e:
95:05:b4:7d:a6:bd:d7:ca:22:b5:ac:02:71:f8:2d:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:8A:76:E5:C9:79:A3:3D:08:9A:FA:BA:2F:DE:3C:11:61:5D:6C
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:6d:80:21:f6:22:2f:96:7d:ed:84:26:62:a7:0b:36:4a:
f0:50:8c:03:37:02:c9:cc:23:8a:53:f7:d5:f8:85:b3:38:58:
e8:d8:7a:9d:50:62:1a:40:b4:ef:25:c4:86:89:99:de:36:f7:
17:74:96:93:a8:9d:b3:ff:0d:c3:a5:61:f3:d7:7e:2c:4a:14:
c5:4c:1e:06:3c:5c:91:cb:cf:e5:be:4d:66:99:22:f2:c1:84:
63:00:f8:07:8f:c6:a9:c6:7d:a2:6a:8c:1f:b5:59:4e:64:46:
84:ff:c9:c4:0c:c2:3d:f1:24:7b:a7:b1:eb:94:85:ff:9d:ac:
7b:49:74:4b:e9:f1:a6:03:63:0f:c0:2f:30:1d:a7:f0:fc:bf:
14:ee:2b:a3:f3:63:42:cb:c0:3a:74:85:62:91:3f:3c:af:17:
77:f6:0c:cd:d9:db:99:1b:66:b4:c1:5a:4c:5f:a7:31:fe:61:
41:d3:60:22:6e:a2:3b:c1:ea:cc:bf:6f:d9:9d:0a:f7:76:26:
55:cd:16:35:81:99:ac:74:09:a8:d9:15:ae:a0:6b:24:7e:97:
22:a6:a9:55:a3:2f:17:f2:c6:dd:de:4a:86:38:53:6a:1e:06:
ed:d2:42:89:bf:be:ff:60:a0:fc:61:e8:0e:74:9b:8b:be:41:
00:37:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:42:01 2024 by rpki-client on console-ams.rpki-client.org