Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: GoL/H/xmAL4TyWEXc6pgdcj0wng6lat8Y5XeilUmrtE=
Subject key identifier: 1F:2C:09:A9:81:8D:CF:6E:0E:99:F0:1D:83:A8:06:AF:AA:A3:B6:C3
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 018F874968EACA05553654D093B995AEA7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 1106
Signing time: Fri 17 May 2024 16:01:26 +0000
Manifest this update: Fri 17 May 2024 16:01:26 +0000
Manifest next update: Sat 18 May 2024 16:01:26 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: E+eI7Yd/v7bVGd8+IkkAq40ITs2U0dLoK9BkVLhy6eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:68:ea:ca:05:55:36:54:d0:93:b9:95:ae:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: May 17 16:01:26 2024 GMT
Not After : May 18 16:01:26 2024 GMT
Subject: CN=1f2c09a9818dcf6e0e99f01d83a806afaaa3b6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:ab:64:15:ff:c8:bd:ec:a3:ab:d5:ad:4a:
4c:19:a3:bc:7f:8a:11:35:ef:8b:6c:4a:1e:ea:5b:
b7:e2:b7:a2:24:8e:f3:b4:7d:bd:df:1b:e7:a3:5b:
b9:70:ff:b4:cb:e8:75:5f:93:46:c7:16:4b:f5:0e:
b9:75:04:d8:a5:f7:64:3b:e7:b0:a9:62:a6:0c:a8:
7d:d7:5a:d7:aa:a7:5d:1b:50:9b:88:51:cd:8f:ff:
1a:ce:2c:4c:1e:14:f2:8a:02:b8:0a:f6:9e:bc:16:
0a:00:66:b0:d0:da:d5:17:fc:bc:ba:92:af:98:52:
51:ab:47:4f:21:df:e8:db:d9:56:af:b9:16:ce:3c:
62:d6:d6:ab:96:0a:14:74:44:f7:26:08:ab:a3:7e:
79:54:a4:12:9b:c7:4b:b5:80:24:2d:80:2f:18:e8:
7f:65:ed:0d:d6:1f:3a:b5:90:45:b7:55:7e:3f:b5:
5f:d5:76:92:ef:31:fd:34:92:b9:c5:3e:53:2b:0e:
0a:e5:1a:48:8a:8f:b0:58:2f:cf:18:2f:60:1f:f7:
98:d7:88:23:bd:00:dc:cb:99:1e:b1:a5:0a:8b:c3:
66:44:c8:2a:fd:3b:6a:ce:1f:d0:97:a5:84:3c:24:
b4:b0:20:4a:fa:89:3d:bf:59:2f:da:26:a6:a2:b9:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:09:A9:81:8D:CF:6E:0E:99:F0:1D:83:A8:06:AF:AA:A3:B6:C3
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:5b:1b:e5:ba:48:b0:98:38:23:f6:1d:73:9a:ce:5c:a5:
e8:83:49:b6:ae:50:9e:62:3a:e4:fb:d3:39:72:d0:52:bb:e1:
4e:ea:56:76:f2:0e:3c:38:f4:eb:93:cb:59:44:dd:6f:1d:11:
a4:50:75:4e:d6:34:ba:ac:31:29:f5:dd:23:97:ea:67:f9:3b:
15:aa:bf:eb:0e:c8:e4:be:17:d7:64:be:3d:c9:56:8b:84:a7:
37:0d:ef:ad:76:e8:7d:91:42:0c:ea:32:fe:68:8d:00:8e:1c:
ba:90:e1:c6:fd:7e:7d:e0:42:39:4c:7e:d3:6a:27:c0:d2:0c:
16:9f:8f:81:dc:64:92:8a:8d:27:12:92:a5:da:26:55:55:84:
85:a4:9a:ba:66:90:15:c4:53:d8:69:87:af:ce:a0:dd:99:73:
58:9e:a1:88:99:7e:15:13:d2:96:91:99:ce:4d:23:06:2f:cf:
b9:6b:85:79:90:12:b0:68:93:18:7c:d7:15:73:b1:1a:7a:8b:
9f:ec:bc:57:88:84:de:af:94:a1:18:4b:ea:c1:06:fc:f0:bf:
54:c2:13:73:ae:13:36:a4:69:d0:be:bc:96:e4:ea:76:9d:ac:
4d:cf:50:0c:28:a0:d5:84:e3:50:d8:56:7a:70:de:0f:25:cb:
78:54:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:18 2024 by rpki-client on console-fra.rpki-client.org