Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: dfY/GFA3F8X4BOn0yg1RTtqaqZY9u0uj11btzdUSkTw=
Subject key identifier: 62:3D:49:E2:F6:AF:58:A2:2E:D7:57:89:DB:AB:E6:6B:63:65:05:C4
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 01935508838C37971D7ACC577BFF3E56B8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 1302
Signing time: Fri 22 Nov 2024 18:00:41 +0000
Manifest this update: Fri 22 Nov 2024 18:00:41 +0000
Manifest next update: Sat 23 Nov 2024 18:00:41 +0000
Files and hashes: 1: 3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa (hash: Kd2BvN9smka8KBqmwAAS/5i1BthruxBYKf/X6z3Om14=)
2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: bO3DX7C4AqZootJ36jHaRoqPYTFSwtDsB2ghfEtHAt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:83:8c:37:97:1d:7a:cc:57:7b:ff:3e:56:b8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Nov 22 18:00:41 2024 GMT
Not After : Nov 23 18:00:41 2024 GMT
Subject: CN=623d49e2f6af58a22ed75789dbabe66b636505c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:ea:f2:aa:7f:1c:dd:ed:8b:2b:01:f8:ac:
dd:d7:fe:c4:55:46:46:e3:3e:ea:17:e9:7a:64:c4:
ea:41:57:84:02:ce:ed:2c:fa:7f:b0:8d:4f:2d:11:
5d:7d:9b:5a:bf:6b:e2:c5:87:93:05:ba:ac:89:79:
e7:69:51:28:95:b5:3f:b3:30:bd:b5:93:5c:db:da:
e1:12:1a:53:01:46:2e:d9:99:6a:64:f0:13:a9:0f:
1a:fa:61:a8:2b:7d:14:e0:0e:2f:b7:cd:5f:c1:c9:
c8:1f:73:9b:b5:83:ce:6f:7d:95:ca:10:3e:ab:e9:
0b:2e:44:72:d0:70:fd:fc:a2:58:c9:58:1e:87:da:
1a:f4:f9:ea:b0:7a:ec:61:fc:76:92:ec:cb:c2:c2:
d2:63:c7:08:58:28:f4:69:12:81:81:4a:7f:da:19:
8d:18:7a:b8:5b:0d:ab:72:ba:2f:1c:22:25:bd:25:
4e:c9:7d:1a:4f:a1:bd:53:f7:04:48:c2:a9:57:5b:
92:c4:5c:6c:a1:3c:ff:2c:f7:9f:4f:ba:ff:bf:9f:
a9:f7:8f:4f:48:80:42:01:4f:12:f0:0c:2f:2e:1f:
47:40:a4:cc:69:1c:09:97:e5:ab:e6:31:dc:4d:03:
01:61:87:3f:be:f7:44:e2:be:40:b1:71:26:8b:a5:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:49:E2:F6:AF:58:A2:2E:D7:57:89:DB:AB:E6:6B:63:65:05:C4
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:bf:0e:a8:59:1b:61:cb:8a:f7:82:ba:2b:4a:a6:05:05:
b2:9c:44:b6:11:af:5d:5e:b2:0a:e0:1f:1d:88:8a:02:ea:ca:
ac:8e:f7:4c:25:72:d5:9c:7f:14:be:f6:ea:e9:24:cb:a3:9f:
bc:9d:ab:3e:3a:db:ae:9a:94:7b:32:6f:9e:27:f2:60:cb:96:
c1:29:fd:29:8d:82:54:9e:94:c5:f5:e6:0e:c7:7e:35:c3:e7:
85:93:3a:59:e3:e6:bd:d9:ca:48:4c:34:3b:81:45:db:e2:ee:
1d:2e:41:66:6a:56:9c:e8:82:e2:77:b5:ee:ad:2d:ab:48:94:
7c:91:5b:96:22:7d:d7:c3:77:55:ee:a8:58:be:c2:de:23:d5:
03:b7:03:c8:63:d5:1e:ee:10:b1:91:91:53:18:fc:96:a5:6e:
28:99:6a:02:32:13:05:7d:47:37:e9:48:11:f2:f8:1a:2f:70:
5c:4f:36:25:97:34:3d:6f:f8:6a:e8:5a:52:ac:84:05:a7:4b:
cd:c7:0e:7b:7c:f4:af:6d:91:2f:5b:f2:07:d6:81:45:31:d4:
0e:82:c6:80:86:c9:e0:b1:72:94:cc:5f:d9:f4:cb:eb:d7:84:
7f:aa:6f:2d:ff:ca:91:c1:31:ed:70:d6:dc:0e:56:86:d9:ed:
41:2b:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:36 2024 by rpki-client on console-fra.rpki-client.org