Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: hv+gy/qFnjAK6nhLBcxFPGcNlrUhBMSGmNk3H7DOcOA=
Subject key identifier: 5C:ED:DD:3B:E0:0C:9E:52:FF:B7:45:A8:51:AD:C3:14:D4:F0:BE:38
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019357646719B6E79FA63CEE6B0BF2D73461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 05:00:17 +0000
Manifest this update: Sat 23 Nov 2024 05:00:17 +0000
Manifest next update: Sun 24 Nov 2024 05:00:17 +0000
Files and hashes: 1: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: Tl0kYGK7vKyl8sDgglX5iPSHc54tHgAGUK6fAdv0wWc=)
2: QaNK01qgkMP59jWxAUK4RBd-8RE.roa (hash: oHSyvIG6NxrRS2CgG1uOAZu/jlovJHMoOR541hKOAQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:67:19:b6:e7:9f:a6:3c:ee:6b:0b:f2:d7:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Nov 23 05:00:17 2024 GMT
Not After : Nov 24 05:00:17 2024 GMT
Subject: CN=5ceddd3be00c9e52ffb745a851adc314d4f0be38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:1d:58:30:49:a8:16:b4:ae:7a:c9:27:86:
f0:dd:ec:06:96:7c:71:1b:b5:42:bb:dd:c6:c0:25:
c3:02:f2:8a:2a:3c:09:68:87:e3:d8:68:9f:fc:d4:
9a:01:bf:1a:df:c9:86:52:43:5a:da:a9:43:b1:68:
fd:3b:6b:d2:31:d4:bd:e8:f6:38:8a:84:e8:b9:2c:
89:9c:2b:c9:44:9e:9b:1d:52:20:0f:4f:65:14:d6:
93:a1:63:fe:0b:1c:09:87:68:ac:39:7f:b1:4e:c9:
78:b9:b3:b3:96:cd:81:ce:f4:6f:e2:00:ca:5a:d1:
8a:ab:f7:d0:a2:5c:d9:a4:cf:db:cf:2f:31:0f:83:
ba:e1:f8:15:de:47:3e:cc:25:ea:57:7c:5a:4b:b1:
10:d9:57:fe:0b:db:03:92:91:4b:9d:43:e7:c5:f3:
7e:39:43:6a:cc:22:99:b2:73:d3:eb:73:48:88:02:
49:65:fe:3f:6d:a5:72:61:06:a3:63:d0:3b:09:8b:
e3:b9:ba:93:fd:dd:c7:07:a7:52:a6:26:47:e9:03:
7b:ec:81:22:a4:97:26:1d:0b:3a:8e:a5:00:6a:ee:
88:4f:82:51:5d:8b:4f:94:2d:ea:d4:77:02:02:f7:
a9:83:6d:c5:58:44:71:1a:a6:89:0c:73:93:48:3a:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:DD:3B:E0:0C:9E:52:FF:B7:45:A8:51:AD:C3:14:D4:F0:BE:38
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:97:e2:df:d1:83:77:2b:f1:30:38:70:bb:d8:9c:65:db:
e8:41:d4:8d:b1:9b:ab:1e:b6:75:08:d8:3d:7a:d7:31:db:93:
24:4b:08:24:77:6c:02:01:0f:45:29:d8:0b:ac:da:95:5b:1b:
60:e3:e1:65:fa:85:ec:03:ff:dd:e1:52:c9:8b:be:14:1b:83:
16:8c:7b:be:fe:66:42:f5:c2:0c:c9:5b:b1:af:86:dd:49:77:
86:b5:a2:a1:88:3d:85:c1:56:b8:d1:b8:ae:14:38:30:e7:82:
f1:cc:22:db:e1:2b:87:ee:29:54:8f:82:62:03:e0:36:6e:08:
7d:45:cf:cd:c9:96:2d:27:81:c4:78:7b:98:ca:38:b7:49:f5:
f0:76:4a:04:e2:0b:ed:94:74:f6:55:68:0c:9a:80:29:3c:62:
9d:2e:d8:13:bd:6c:b3:43:af:40:59:7c:17:8b:06:25:29:ac:
c2:74:d7:98:ad:00:b9:27:7d:f1:cd:8d:79:63:3b:d1:9c:1b:
6e:35:4b:af:37:c8:f1:06:b0:e1:23:f4:6b:f9:63:ce:67:24:
61:b3:fd:cf:e3:d5:91:a7:13:bb:38:16:de:f3:45:07:fd:5f:
f3:b4:9b:c4:56:5b:56:22:6a:e5:30:8a:42:95:2e:e1:ab:9d:
f5:e9:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:00 2024 by rpki-client on console-ams.rpki-client.org