Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: RUoR4AgWlEqDxbnool16mXlCCTEhw+tE/55vXoR84v8=
Subject key identifier: BB:A9:68:F2:CB:38:A0:E9:61:1A:D6:F1:65:85:29:5C:D2:94:A9:7B
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019357D250D17E38ED6F640C8343C24A20A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 04C7
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: CtSoxerPwm3PFvpde5Gj--q7nbo.roa (hash: Sz2D5nElGAu4GW1vncrnEl2P2lx1eo3aiO01hQDR1rE=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: Oe2NO8cHdKq6lywKJn3qwMxMFw7Ag8ziGowGDUBj+XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:50:d1:7e:38:ed:6f:64:0c:83:43:c2:4a:20:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=bba968f2cb38a0e9611ad6f16585295cd294a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:e2:79:31:21:e1:9a:d6:46:fd:17:54:34:
c4:53:d3:ae:3e:46:51:cc:bc:c3:00:90:91:c2:14:
a9:59:51:9c:89:ed:4c:df:11:21:1a:53:56:c5:f8:
a5:17:f8:6b:fd:91:4c:6d:d4:07:b9:3d:b8:bb:27:
d5:62:fa:cd:a2:90:4e:b7:f8:ee:6f:80:9b:b8:17:
d1:d9:01:aa:f0:8e:f2:47:7a:d6:0f:d8:01:85:ea:
2d:b6:99:6d:f8:94:a0:d8:f2:e8:fe:4e:35:89:a6:
ec:53:15:cd:54:c5:da:84:b0:5e:04:29:1b:54:68:
fe:90:46:5e:0a:1b:b5:cd:45:fd:ee:84:8e:ec:28:
41:bb:0d:d9:51:a7:9e:1a:2d:01:8e:6e:44:2e:61:
1e:81:c7:36:a6:27:59:16:88:69:84:32:59:ef:e8:
df:46:53:96:60:5e:a5:6f:41:cf:75:28:7e:4f:ad:
3c:26:bc:67:bf:ce:7d:cf:41:4c:d9:7e:62:d6:18:
98:44:e8:52:63:05:ad:01:49:66:e0:50:30:bb:29:
91:01:57:50:79:22:ef:03:e9:15:8b:d7:8d:f6:b9:
9f:d1:b4:26:12:42:1f:cc:34:f6:d2:8c:bf:66:9f:
88:59:8b:2a:07:70:d2:08:22:94:ce:ca:05:03:30:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:68:F2:CB:38:A0:E9:61:1A:D6:F1:65:85:29:5C:D2:94:A9:7B
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b0:6a:dc:a6:69:5f:67:5e:42:1e:8e:aa:4e:cc:a6:f4:fa:
d5:f0:f8:54:c4:b3:3a:2b:dd:ae:29:c8:56:c3:b7:8d:04:0a:
3f:a0:df:34:e8:f7:2e:f8:45:f4:12:7a:5c:cb:bc:f2:ff:f6:
87:47:22:52:a9:a7:79:c0:15:f4:a6:7f:7e:43:71:3d:7b:14:
34:9f:45:d5:ea:48:f0:fb:29:8a:5c:23:47:03:8c:6f:e4:b4:
44:85:3f:1f:7a:46:98:63:ed:3a:d6:d6:43:03:14:73:93:b9:
92:38:d7:67:53:ef:55:e4:c9:36:48:5c:8e:71:65:f3:78:80:
17:62:4e:fb:a7:f6:bc:b7:28:9d:16:ca:cd:76:c4:da:81:dd:
b1:ba:e0:9c:17:fa:e3:ca:bc:cc:c2:ae:2f:ce:9d:8c:49:d8:
b8:fa:c7:4c:8b:8f:2d:8c:9b:bb:f5:aa:34:30:04:ce:9b:97:
dc:32:d5:16:35:00:9b:38:fd:46:09:83:91:b4:bf:a3:20:00:
ab:02:0c:3f:1d:4c:0e:c4:86:fe:6c:f4:80:75:0e:fd:81:27:
38:d9:69:29:dc:7f:13:64:31:04:a8:be:78:89:20:30:ac:9a:
49:2e:57:fe:6e:d6:56:c8:0c:5f:2f:f4:cb:e0:51:d1:fb:bc:
2e:9a:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:21 2024 by rpki-client on console-ams.rpki-client.org