Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: /OiJonuRmdsC+kotjqMAzEUNu5ICsHhhnI7xiYMNZ8M=
Subject key identifier: 94:B1:C1:35:40:0A:B4:35:33:D4:0B:43:95:36:B4:54:62:B5:15:32
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 018F4E6C7F48A46FE621A8B85B7A44D00DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 1159
Signing time: Mon 06 May 2024 15:01:24 +0000
Manifest this update: Mon 06 May 2024 15:01:24 +0000
Manifest next update: Tue 07 May 2024 15:01:24 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: Qoy/u0QT3Q1JYc8OGCYIT6629k70FFyZ5+XTDgO+C7s=)
2: b9ZgMy28CrUavpsUC51ipp99pU4.roa (hash: aDjcqnwu/I+YtMR/qhn056GNbIKbYEcMvmF1Zw2CaXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:6c:7f:48:a4:6f:e6:21:a8:b8:5b:7a:44:d0:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: May 6 15:01:24 2024 GMT
Not After : May 7 15:01:24 2024 GMT
Subject: CN=94b1c135400ab43533d40b439536b45462b51532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:84:47:0b:63:fe:c2:26:b4:ac:b7:f8:a9:
df:5f:84:3d:f5:bb:0c:21:91:3f:80:58:46:da:f6:
8a:6d:bf:68:69:14:4f:3a:46:ff:31:9e:d3:bd:ad:
55:75:56:34:67:89:cd:af:92:2f:fe:44:03:cc:39:
60:52:a4:eb:0a:aa:5d:6d:70:31:60:30:ff:09:e9:
d5:eb:22:f6:91:95:8c:eb:8b:cb:f2:db:f0:f4:61:
ff:e4:21:03:66:b8:1c:5a:42:02:69:4a:ba:e0:d0:
5a:a1:e9:e4:0c:86:38:50:c3:38:ca:a4:08:d6:1b:
6e:9c:3d:80:e2:a6:16:b9:bc:67:17:f4:1a:d9:24:
56:8d:57:58:ca:d5:c8:1e:78:c2:3c:50:55:99:1b:
29:fc:9b:13:23:fa:4b:1d:10:a4:12:59:47:8d:e4:
56:40:b2:87:22:96:1e:f5:ac:9f:7d:df:47:d1:70:
e1:9f:3f:1c:3b:27:eb:28:5b:9f:f8:aa:dd:59:13:
2e:ec:ae:31:60:c0:2d:fc:48:87:c7:e5:e8:de:86:
5c:12:31:7c:ad:37:e8:3f:b4:66:26:6e:de:c2:df:
b7:d4:03:1a:4d:73:65:e3:d7:bc:5a:13:dc:0b:98:
1f:b8:37:f9:69:38:7f:81:a4:3a:a8:00:c7:40:42:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:C1:35:40:0A:B4:35:33:D4:0B:43:95:36:B4:54:62:B5:15:32
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:93:dc:03:db:fd:6d:8f:30:54:3f:0f:bf:97:c0:a1:02:
90:da:4f:53:39:88:b2:c2:f3:ce:e3:2d:b7:70:b2:d8:fc:68:
bf:d2:0a:6b:bc:dd:ed:62:86:03:a3:3e:f1:17:84:3b:27:20:
15:40:53:63:aa:0c:e9:71:c7:45:ee:c8:59:94:54:4c:ec:6a:
1b:a4:b8:ed:79:14:42:92:6b:9b:8d:5e:84:e1:a5:f6:14:20:
41:a8:a9:7e:1e:76:ad:7b:6c:5b:3f:c2:8d:85:5f:52:89:30:
6b:3a:d9:b6:ce:2f:22:99:ce:e3:b7:c3:8b:19:80:e6:aa:7e:
2a:e8:e2:86:1a:f1:18:71:c1:5f:cd:5e:b0:cd:41:64:90:a4:
49:76:e4:5a:f9:b1:54:b6:d2:1a:47:6e:c0:18:73:25:0a:e6:
86:fd:d9:f1:c1:c2:37:fc:7a:3c:fb:02:f7:f0:53:a7:59:4a:
3e:bd:2a:30:07:24:ad:70:46:95:86:e7:7a:76:5d:79:d7:b3:
d6:6a:e6:5e:ab:e7:7b:73:ec:59:3f:04:e4:a5:7d:86:ef:9d:
66:7f:99:b3:c7:5a:df:17:ca:da:4b:e0:51:07:07:1e:d9:7d:
90:87:1a:31:c7:53:5a:2f:83:e0:f5:ca:d3:70:c7:c9:6c:2f:
de:48:a9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:56:04 2024 by rpki-client on console-fra.rpki-client.org