Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: boJN7Cf/G4/beDhgYC13sisbGKGZ8ooy7eIQyaFv0cA=
Subject key identifier: 1D:0D:C4:43:2B:A8:CE:A9:75:F9:91:BF:42:6C:4D:DC:0A:69:EC:83
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019368582A0E9AE4647518E6F58AB3C0C617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1025
Signing time: Tue 26 Nov 2024 12:00:28 +0000
Manifest this update: Tue 26 Nov 2024 12:00:28 +0000
Manifest next update: Wed 27 Nov 2024 12:00:28 +0000
Files and hashes: 1: 16X_1LHoGrsyolbPIJhRZRwpZ90.roa (hash: QrITIlPtPK8BBQKjD/UENeIsxG74ep6HxEq1HvmUpC8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: 8F4LbOLYC+8NSEZklHaJ5hEAzy/kWT2M5d86vPXdQ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:58:2a:0e:9a:e4:64:75:18:e6:f5:8a:b3:c0:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Nov 26 12:00:28 2024 GMT
Not After : Nov 27 12:00:28 2024 GMT
Subject: CN=1d0dc4432ba8cea975f991bf426c4ddc0a69ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:cd:ce:e2:ff:88:2d:7e:d1:67:61:1b:58:
13:53:38:22:8a:ac:f8:b5:b8:e5:cc:13:57:fe:de:
87:b3:7c:12:ec:29:27:c4:f0:4f:b1:33:4a:20:36:
63:4a:c3:b4:68:fb:1f:cf:b9:f5:db:00:44:c0:b1:
55:05:52:95:ed:a9:27:a4:42:cb:65:dc:00:2e:8d:
d2:74:aa:84:36:39:5d:37:b7:1d:dd:23:cf:70:27:
8b:72:f3:52:63:04:d0:3c:e5:32:97:0c:28:4a:dd:
ea:07:a3:80:22:60:ff:6b:3d:b5:91:21:95:34:96:
01:85:ff:08:9c:a2:fc:25:db:e6:aa:63:7c:9d:de:
d0:77:dc:db:ca:a4:f7:3a:69:df:ac:d1:c3:77:43:
6a:7a:9a:18:a5:fc:19:65:c1:5c:49:7a:99:78:23:
59:d7:4e:7b:79:d5:3d:60:4c:01:98:08:05:d5:3a:
11:1f:02:3a:4b:ff:39:23:63:73:bf:36:32:0a:08:
bb:35:64:f0:7e:b2:fe:a2:a2:00:90:e1:98:75:b8:
49:a1:10:36:18:84:bc:15:e2:04:4e:10:b0:52:8e:
7e:d0:27:94:09:5e:e7:5a:2a:2a:2c:1b:ea:cf:e2:
5b:9c:b4:39:67:f2:b9:39:b3:0b:ef:f7:88:98:cd:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:C4:43:2B:A8:CE:A9:75:F9:91:BF:42:6C:4D:DC:0A:69:EC:83
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bb:14:dd:f3:8f:84:d7:e4:fa:ba:31:d9:eb:74:df:a3:3d:
48:2d:1a:1b:e1:0c:bd:c9:8b:4e:03:2d:32:fb:c6:8b:98:53:
27:b7:b2:c3:13:b7:47:f6:52:3c:fc:e2:5f:0c:0e:8d:4e:27:
88:88:35:00:9e:1f:fc:fe:20:f7:68:a8:47:b8:74:22:86:c4:
97:80:58:7a:7f:b1:97:94:33:b9:d0:34:7b:ee:dd:46:2c:78:
7b:c9:f7:5c:c0:07:43:80:f5:e5:91:74:df:6c:88:75:fa:f3:
14:11:7e:cc:df:02:2f:27:85:e3:f5:aa:4a:24:2d:94:c5:5f:
49:db:1d:89:0f:f0:c3:43:52:03:7d:87:e4:70:42:d8:75:8c:
b5:91:31:0c:ff:83:9d:d0:26:c5:62:66:60:c4:76:1d:21:81:
f7:81:ae:94:ba:83:70:95:69:48:a4:e4:05:b2:10:8d:0a:6c:
2a:7b:bf:a3:ce:9b:f7:e0:a0:b7:a6:b2:43:b7:aa:3b:81:0f:
58:1f:93:11:05:d4:b3:12:0c:6f:73:c1:ec:c5:78:80:6a:24:
40:43:9b:a7:8e:0f:f4:55:87:74:59:56:36:73:ef:2b:d6:8e:
b6:dc:30:f2:68:e6:e9:a3:32:22:81:59:6b:4d:e8:6c:9c:f2:
21:ae:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:49:12 2024 by rpki-client on console-fra.rpki-client.org