Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: Y3EQ1rF+W5AxjPZ9ji7Pt/K3rdpvNUA3ZsxtoHkMZes=
Subject key identifier: 64:B8:E0:97:3A:4B:AC:2E:80:51:CC:1C:FB:ED:46:28:56:2D:99:03
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019356BF9DAEC7E1840EDCD65DFAB1C5691D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 118C
Signing time: Sat 23 Nov 2024 02:00:18 +0000
Manifest this update: Sat 23 Nov 2024 02:00:18 +0000
Manifest next update: Sun 24 Nov 2024 02:00:18 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: F790EV8UOR3goaCKazgB5HBTG04qEpXRh5f/BUNGDzs=)
2: 4De5PEQxtabZErw8Fai8iWAyh7I.roa (hash: knU6en48JHTKK5yvNdwb2zG6fyEsr7qX2izroTHqc7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:9d:ae:c7:e1:84:0e:dc:d6:5d:fa:b1:c5:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Nov 23 02:00:18 2024 GMT
Not After : Nov 24 02:00:18 2024 GMT
Subject: CN=64b8e0973a4bac2e8051cc1cfbed4628562d9903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:f5:cd:a7:40:9f:41:1d:9e:87:d4:4e:e8:
61:2e:7b:5e:41:09:6a:16:1e:8a:31:32:4f:ed:af:
5c:0c:3e:72:e6:20:86:50:87:6f:26:c5:ed:a8:ef:
97:b2:9b:27:e9:6b:d9:23:1e:d8:97:1c:a6:fb:7e:
70:a6:c7:30:61:0c:5f:e6:4a:5d:8b:29:5d:4a:cf:
f2:c6:27:d3:af:63:fc:f5:1f:53:d8:39:31:91:b7:
6e:34:4f:3c:a7:ca:f0:82:5a:ca:2f:d6:02:f2:a2:
e7:1c:f4:7e:43:b2:60:ae:e3:60:df:44:73:e3:fa:
a4:5e:d5:62:4e:27:d1:41:af:3f:fe:92:5d:ef:8a:
43:eb:8e:df:6a:26:6d:92:c1:80:d6:fc:c5:e5:97:
63:68:5c:96:9c:78:e6:a5:65:2d:40:ca:2d:57:1b:
ae:0a:94:4a:5f:73:5c:97:05:60:bc:26:c3:3f:95:
2b:81:22:23:bc:00:ef:2d:0a:f7:17:3a:a1:8f:a0:
c0:24:ff:88:3c:90:f2:69:46:9f:99:b0:f3:92:6a:
28:bb:86:72:92:14:da:37:99:57:cc:bc:14:c9:07:
92:3e:f5:e6:65:6b:8a:ea:57:1e:3c:ea:b2:f3:a4:
6a:82:e2:cf:64:de:9b:b4:16:41:22:1a:12:e4:0b:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:E0:97:3A:4B:AC:2E:80:51:CC:1C:FB:ED:46:28:56:2D:99:03
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:af:33:9a:60:ba:06:fa:d9:9b:44:1e:33:21:e1:2f:83:0f:
44:4b:bf:09:23:3d:68:9c:e6:3b:eb:cc:00:2f:d9:72:22:51:
72:c6:53:e4:0d:fb:a2:21:27:96:86:c8:41:70:ef:69:cd:90:
de:41:cb:89:35:3d:1b:91:ac:08:7a:7c:8c:5e:de:4e:8d:eb:
cf:00:c2:45:a1:21:9c:d6:60:24:2d:78:dc:5b:8f:d8:dc:43:
18:ca:4f:d2:f3:ea:6d:e9:ed:9d:a9:5e:79:f1:6c:1a:8e:3c:
a6:1f:0a:cd:36:db:c2:fe:2b:65:b6:35:73:e2:46:49:75:c8:
e9:37:5c:e9:29:5f:c6:bf:d4:12:e7:38:3b:2a:65:a6:ac:0d:
cb:b1:66:9b:c2:af:dd:cc:05:8b:85:15:f0:91:01:65:a1:8e:
98:cf:06:16:19:af:8a:39:86:ce:c7:51:6b:6d:14:bd:35:77:
04:44:ac:04:aa:21:26:9f:f9:1b:a1:5b:15:4a:2e:f2:d5:a4:
26:22:23:be:87:23:14:5a:a3:c0:8c:d6:e2:fa:1d:ef:09:fe:
e6:14:2f:35:a3:b4:5f:c6:db:ad:e6:fd:b7:73:6b:33:42:ef:
e4:f1:7c:59:d9:50:29:00:22:08:82:57:6e:67:89:cb:ad:de:
29:5e:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:45 2024 by rpki-client on console-ams.rpki-client.org