Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: o0vm2X10iCdw82YKvGz/VRXHwt2WyID1NW1dkBcQ8Zg=
Subject key identifier: 66:65:CE:DE:85:20:36:5B:D0:E1:97:61:DD:2C:C5:22:E3:95:30:08
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 01936D10E6C402178940AC899DA10C8DFA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 137C
Signing time: Wed 27 Nov 2024 10:00:44 +0000
Manifest this update: Wed 27 Nov 2024 10:00:44 +0000
Manifest next update: Thu 28 Nov 2024 10:00:44 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: UU4XFgbCEYjyCbZuoY4+3Po7LGmNAR9C5TAhq1sHWqE=)
2: My27Wg750G8HCT5Ed-v9ku8o6i4.roa (hash: Y3E+xdDXG3Cpt1NR1gJuB6nl7Z+TAXH79Po7KRGnzQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:10:e6:c4:02:17:89:40:ac:89:9d:a1:0c:8d:fa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Nov 27 10:00:44 2024 GMT
Not After : Nov 28 10:00:44 2024 GMT
Subject: CN=6665cede8520365bd0e19761dd2cc522e3953008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:e8:b5:74:7b:d7:af:ea:a4:c2:09:fe:6a:
3b:09:1e:bd:b5:51:f6:be:dd:a6:df:d7:aa:f3:0f:
be:e6:79:b4:cc:23:0b:cc:9e:a0:67:32:12:9b:d2:
d7:cb:77:7a:8d:15:51:ce:ce:4d:29:7f:95:b4:18:
57:2a:41:d6:f8:b9:a5:9b:2b:a8:fe:b9:0a:df:c7:
fe:86:01:35:c9:a2:55:df:6c:c8:40:03:09:21:4a:
17:b0:71:42:ca:59:9c:f1:5f:d1:cb:ce:bd:62:16:
27:c5:6b:de:94:cc:09:f2:6d:c0:d6:76:99:64:87:
ab:18:49:c7:41:ae:e9:83:c0:cf:f2:15:9c:b3:09:
e7:e4:19:fd:2f:3d:57:d3:44:9c:a7:11:56:7e:0d:
2d:44:ab:2d:6e:bd:0d:ef:2f:e0:29:ed:0c:45:29:
0b:0f:94:f6:35:33:92:5b:3a:8e:23:1a:19:73:0e:
5d:73:fc:66:68:0f:10:f8:e7:eb:a5:3f:b5:60:38:
71:1c:1b:aa:91:46:e6:f1:af:95:6a:cf:3d:4d:4b:
93:02:4a:09:6d:15:5e:0d:d3:f8:f4:6f:dd:04:05:
f9:f9:25:44:2e:2b:1c:7b:78:c4:2f:65:fb:5e:44:
56:22:1b:c5:b4:b1:70:33:1e:8b:07:ab:2b:9a:78:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:CE:DE:85:20:36:5B:D0:E1:97:61:DD:2C:C5:22:E3:95:30:08
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:a2:05:9f:02:38:2c:35:e8:fd:7a:ff:45:6a:9d:43:b3:
e6:8d:2b:77:91:cc:ef:ab:31:3e:0d:84:95:18:be:22:9b:1c:
0a:b2:a8:aa:80:e0:f2:b9:54:d8:82:75:cb:a7:f7:6b:11:f4:
2b:da:7f:36:a1:87:0d:2d:35:85:8c:e6:94:44:1d:4b:15:08:
9f:a9:f0:ec:8a:9b:68:e7:c9:2e:d8:5e:86:bb:13:0f:74:6f:
99:02:d9:49:83:60:11:94:ee:e7:97:0d:ed:a5:25:ec:16:4e:
e0:e8:31:38:29:c7:dd:42:75:ae:7f:97:76:3e:95:8d:d5:ef:
0d:6b:a2:a5:79:34:63:0a:e2:ab:e9:ad:d2:a3:92:2a:0f:fa:
fa:17:73:f5:61:41:ac:07:44:47:27:f4:8a:22:5d:0f:74:86:
a8:39:0a:1b:8e:e3:db:be:13:25:25:e8:d8:e8:31:c9:b9:59:
26:2f:89:67:b8:9d:a7:68:77:98:1e:b9:b7:d5:c5:18:c9:08:
4c:fc:8a:57:f3:51:b6:34:e8:d3:fe:a6:74:76:6c:8d:0a:63:
30:21:17:cf:60:f3:d3:ae:41:bb:6d:d1:0a:ff:f5:4f:d9:1b:
9b:d2:a4:b5:f4:c6:8c:f6:b7:6e:87:9b:0d:12:08:9e:ba:6a:
e1:dd:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:52:36 2024 by rpki-client on console-fra.rpki-client.org