Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
File: _JfnqMJOB2HT5dydVjmLxH0m08A.mft (raw, json)
Hash identifier: b7lnDGjPPhXJx6aeOWpk5vLx557K9tESTsDdaHV7CgM=
Subject key identifier: 73:84:E0:FD:D0:C0:F2:A1:A1:11:12:E0:84:21:2F:E3:29:FD:D2:8F
Authority key identifier: FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
Certificate issuer: /CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Certificate serial: 018F8711494DC7C2BA6B0DA9349A19A60A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
Manifest number: A5
Signing time: Fri 17 May 2024 15:00:08 +0000
Manifest this update: Fri 17 May 2024 15:00:08 +0000
Manifest next update: Sat 18 May 2024 15:00:08 +0000
Files and hashes: 1: _JfnqMJOB2HT5dydVjmLxH0m08A.crl (hash: 9MR4nXqKp4RD9OFOqcIZGlgfstkkrb+3SiDAfBxwgfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:11:49:4d:c7:c2:ba:6b:0d:a9:34:9a:19:a6:0a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc97e7a8c24e0761d3e5dc9d56398bc47d26d3c0
Validity
Not Before: May 17 15:00:08 2024 GMT
Not After : May 18 15:00:08 2024 GMT
Subject: CN=7384e0fdd0c0f2a1a11112e084212fe329fdd28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:02:3b:dd:e4:44:fb:a2:e6:9b:f3:ee:fd:
d7:9a:a3:86:ef:e4:3d:90:8a:2d:92:c8:af:1c:c9:
70:f0:db:6c:0d:56:2f:1b:d3:69:3c:19:0a:bd:ee:
09:68:c0:3f:12:29:a0:ed:7b:87:2a:3c:0a:1a:99:
46:ef:e3:08:76:91:99:49:db:92:c7:d0:3e:99:80:
16:b1:d5:26:df:ac:c8:36:91:50:1a:c3:dc:44:8e:
77:57:6e:e9:c3:17:be:1e:cd:c5:e0:0b:68:b7:f6:
7b:01:7b:79:f0:b6:32:5b:4a:cf:b1:02:1c:de:ad:
f5:69:70:1d:4a:0b:af:47:99:82:e9:1c:45:27:15:
28:a2:38:04:69:58:66:9e:ee:2f:80:ab:12:bb:0c:
75:f9:f0:6d:bd:02:13:88:df:70:64:d9:4b:ee:f9:
b6:f2:8f:d0:30:84:e0:55:60:93:db:d6:35:a1:e6:
9f:f7:54:c2:ce:3c:44:f2:8b:92:3f:10:57:63:12:
fd:ab:6b:3d:82:f2:74:55:87:09:ee:53:8b:d3:de:
95:7d:f1:ed:b4:95:58:ce:4e:a0:eb:89:db:70:6f:
a8:12:66:2a:d6:4c:ba:d5:27:30:f1:a5:86:21:f1:
bb:d6:8c:ce:b0:6f:73:9e:2e:d8:fc:24:c0:61:96:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:E0:FD:D0:C0:F2:A1:A1:11:12:E0:84:21:2F:E3:29:FD:D2:8F
X509v3 Authority Key Identifier:
keyid:FC:97:E7:A8:C2:4E:07:61:D3:E5:DC:9D:56:39:8B:C4:7D:26:D3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JfnqMJOB2HT5dydVjmLxH0m08A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e3529f-3794-4b94-9317-3a59c70c0a99/1/_JfnqMJOB2HT5dydVjmLxH0m08A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d6:0e:bc:91:05:32:19:a5:80:49:68:38:a1:75:d2:00:e0:
8e:ee:16:47:23:39:d3:1a:24:70:6b:c2:a4:37:98:ec:a8:c1:
7b:ee:3a:c0:70:46:b3:ca:a8:45:3f:b9:e2:7b:c0:7d:c7:ba:
38:ac:d8:7d:c9:fc:b8:2a:69:c0:10:cc:1d:d2:9d:4d:55:fe:
ef:3c:20:1b:b5:3c:b2:d9:fd:30:74:f8:b7:40:e9:e6:fb:3f:
ff:a4:27:ee:af:d7:e4:aa:22:57:e3:a7:7f:c8:cc:00:5a:0e:
bb:20:e0:62:c2:9e:80:f4:1b:af:e5:a4:71:fc:d7:2a:c1:62:
31:e0:d8:ae:d0:77:2f:3f:50:73:54:33:b3:32:c4:aa:d8:ba:
fa:02:a2:49:97:42:1d:b3:2f:c8:ed:97:f1:22:92:c4:c8:ce:
14:fe:dd:c1:bd:8a:68:26:43:e1:d7:35:cc:f8:21:1a:07:ad:
06:2f:53:5a:e1:17:0b:63:4d:27:5c:9d:75:ca:00:76:35:89:
54:cd:cb:3d:7a:7d:0a:78:8a:93:cf:40:6f:cd:e8:4f:53:cf:
3c:20:2a:0f:5c:4d:02:37:b0:cb:26:c1:75:05:be:05:3f:30:
58:e1:a0:d3:43:ab:98:c3:f9:db:fa:51:0f:d0:ce:bf:8d:cf:
88:88:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:42 2024 by rpki-client on console-ams.rpki-client.org