Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: 0MJ5PYTrf/tIlbnlW6m8vltvti7aDFTDz+pOxLeSeeM=
Subject key identifier: 13:58:9B:D7:BF:97:4F:DD:BF:35:5C:02:B4:51:06:04:36:56:A6:B9
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 0193587931A86F379C5ACF6F462A224C1F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 10:02:37 +0000
Manifest this update: Sat 23 Nov 2024 10:02:37 +0000
Manifest next update: Sun 24 Nov 2024 10:02:37 +0000
Files and hashes: 1: O1xTiJXJ9RaPXcM3TxZg263QSpk.roa (hash: CDxqgS9xIrcHYQQmsrHXKviaOf7QW0SeBJFT0aZjltg=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: q3ZhWTjsJ6UgmVG3jDhJST7YqmO7aw7emgYFiy7TDWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:31:a8:6f:37:9c:5a:cf:6f:46:2a:22:4c:1f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Nov 23 10:02:37 2024 GMT
Not After : Nov 24 10:02:37 2024 GMT
Subject: CN=13589bd7bf974fddbf355c02b45106043656a6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:12:38:cd:5c:bb:c2:4b:32:8a:5f:87:84:
bf:d0:99:ad:79:8a:f0:3a:38:9a:cc:db:23:ce:f9:
75:1b:56:32:77:78:c2:c4:43:fd:50:37:ac:36:29:
ae:05:72:e1:30:ce:a9:7e:06:c2:01:64:d4:11:32:
ef:88:72:9b:1a:58:f1:48:6d:60:b9:ad:d6:79:88:
87:89:4d:4d:00:a0:b1:c6:46:7a:9c:f9:31:f5:38:
15:c0:47:97:40:03:b4:8b:b1:92:62:15:74:62:60:
fc:11:18:45:58:91:5c:e8:1d:6b:86:b3:ee:54:ec:
c2:02:59:9c:08:cf:1e:c1:d6:13:92:ef:e6:1b:83:
24:99:96:ca:24:f2:48:0e:0d:ca:6c:29:38:1d:7a:
e0:20:80:c4:73:60:18:2b:7f:bf:ec:55:33:0d:81:
a5:3b:a0:74:ae:1a:e4:20:6b:09:26:c6:91:f3:69:
92:8e:1c:bd:f3:13:d7:ce:52:33:71:fb:34:0f:5d:
ab:3e:2f:6d:5a:e6:ce:e4:e9:12:d6:88:5b:61:04:
20:7d:3b:72:c7:15:72:98:7b:cc:cd:63:07:59:f1:
b8:c1:bd:3b:a8:fb:9c:ff:89:25:d6:44:fe:62:aa:
14:dc:6f:74:07:cd:45:50:ee:7c:f0:3e:5c:90:e0:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:9B:D7:BF:97:4F:DD:BF:35:5C:02:B4:51:06:04:36:56:A6:B9
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:8a:0a:c6:be:9d:0e:25:1f:37:13:09:5b:0e:7a:28:81:
1d:36:09:28:56:89:ce:77:8a:33:a7:9f:f7:76:b3:d4:af:a8:
44:c6:9e:b4:b6:87:49:b9:0d:a5:75:25:48:fc:5a:4d:e0:d7:
e8:3c:01:96:1d:ca:45:b4:c3:52:43:bf:50:d6:0e:2d:55:cd:
04:d5:c9:10:eb:c8:0d:63:0a:2a:3c:ac:c8:3c:a3:67:fe:b7:
e5:81:06:b3:a8:53:eb:2f:93:08:9b:fd:0a:11:49:18:73:23:
a5:2f:e5:d4:6d:1a:a9:37:ba:ff:72:e8:36:20:67:44:41:06:
f4:e7:fe:64:ec:82:6c:d2:88:e8:d3:0b:54:a0:2c:65:10:47:
84:01:f5:ee:1a:a5:ba:e0:a6:17:46:ef:aa:76:55:4e:f1:d7:
fb:00:57:d9:39:03:be:8d:cd:f2:d5:44:61:92:15:70:c2:8a:
61:39:0a:84:97:5f:06:bc:b0:f6:77:41:17:5d:b7:4c:c4:ff:
97:d3:ff:6b:b4:56:42:a7:38:90:91:ed:26:e5:4b:2a:fe:81:
90:4d:93:7a:80:f7:66:f1:d6:33:0b:fa:fb:5f:98:fc:61:da:
12:01:f8:15:75:6e:46:84:b9:30:e7:a9:59:98:cd:b9:8a:d7:
5d:9b:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:48 2024 by rpki-client on console-ams.rpki-client.org