Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier: HsENuDqs71fFbeKNkmFWZKZ5GI9A3aiF2acwV6DFypg=
Subject key identifier: B5:EF:BB:4D:4F:02:A5:E2:75:76:BA:09:7D:2B:FF:56:1E:A8:79:FF
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: 0193568979B1D7298A53DD6CCAA93E485697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number: 09A1
Signing time: Sat 23 Nov 2024 01:01:10 +0000
Manifest this update: Sat 23 Nov 2024 01:01:10 +0000
Manifest next update: Sun 24 Nov 2024 01:01:10 +0000
Files and hashes: 1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: EDRhkhkIIJ3AJxRsnVcWDgAsUI3XXrorU06np5SWvas=)
2: oFbJbYcc6gdpEGAqxFN_CO5NGtg.roa (hash: 8SJGBpKrbrQeCbjG0qEZPHrYb5oSUWBNsnVX4isR9/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:79:b1:d7:29:8a:53:dd:6c:ca:a9:3e:48:56:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Nov 23 01:01:10 2024 GMT
Not After : Nov 24 01:01:10 2024 GMT
Subject: CN=b5efbb4d4f02a5e27576ba097d2bff561ea879ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:3a:d2:bf:25:b3:b9:36:63:b6:79:b6:f4:
85:04:f0:43:16:53:89:e6:f5:d6:4d:fa:88:8b:f3:
be:aa:7c:f3:d5:93:00:e5:b9:dd:e4:95:b2:a6:4b:
b2:56:87:8e:d2:73:5a:67:03:ed:2f:25:9a:6d:d2:
0e:a9:34:a6:5b:aa:3f:0e:23:e6:f8:9b:04:90:71:
33:a3:72:43:6c:a6:ca:0f:54:c1:63:43:65:c9:b5:
2e:74:12:d7:94:f8:ef:dc:24:23:98:a1:8f:5d:39:
4a:66:63:1c:b7:a9:57:66:c2:4a:cf:12:ca:84:e9:
41:f1:6d:88:fd:28:a5:92:9a:44:4c:3e:f9:9b:12:
8c:9a:a7:45:fd:66:33:b4:54:38:55:0b:b7:b4:4b:
d5:07:10:35:64:a7:d9:d9:c5:ba:bc:cb:62:fd:1e:
6d:a4:24:8a:1f:06:7e:eb:48:48:73:e7:0d:38:df:
33:77:a6:b7:91:55:78:93:8a:39:c5:c6:85:47:e9:
9b:d2:17:f2:46:6c:08:f0:dd:b7:6e:70:37:3e:38:
ac:1d:58:81:a6:16:25:67:d4:e7:8c:a4:31:d6:be:
b9:ac:b2:b1:a4:b6:a0:de:5f:f2:d6:be:14:74:9e:
a8:fc:01:ba:a4:71:a5:b4:d4:af:29:93:e7:0f:48:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:BB:4D:4F:02:A5:E2:75:76:BA:09:7D:2B:FF:56:1E:A8:79:FF
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fb:1b:11:dd:46:c4:f2:26:da:30:b4:46:2f:2b:c0:03:12:
c3:4b:b7:fa:2d:d9:a3:96:f9:79:df:f9:68:b3:4d:73:0a:40:
e3:4b:da:e4:4c:28:5e:3a:1e:b0:fc:b1:a2:a1:01:ae:0c:fe:
d8:c3:4c:cc:d1:5d:82:b9:9f:96:fb:07:7b:40:5b:c9:d3:c9:
ab:45:bb:f5:df:e0:a9:ee:60:a4:5b:9b:ce:a9:db:16:c2:ef:
c7:a3:0a:77:a9:97:55:e4:94:50:7c:c2:6d:20:f3:f3:95:c6:
d3:1b:f1:47:88:5e:ef:42:eb:4f:1f:cc:8b:53:c2:07:10:e3:
6d:35:21:96:76:07:04:f9:0b:5e:8b:0c:cb:30:9b:a9:70:1a:
1d:f3:a7:39:bd:80:d2:68:f5:cd:2e:31:66:01:5f:53:68:71:
23:ad:fe:6c:23:f9:31:4d:1a:fe:64:c2:63:56:30:01:41:63:
39:cf:7c:37:bb:ac:dd:65:79:c1:d7:54:5a:ce:be:cd:eb:a2:
e3:8c:db:c5:d6:05:4b:79:8f:58:ff:1f:bf:7c:61:87:23:ad:
52:55:12:85:0d:eb:9d:b9:6e:ad:0a:cb:3d:3e:12:2c:bb:8b:
49:23:5b:de:aa:6c:70:1e:38:ac:de:08:cb:95:f3:6d:a0:64:
94:10:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:16 2024 by rpki-client on console-fra.rpki-client.org