Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json)
Hash identifier: A0p8e0jkkPvVo3sHPsr4k0Z3Pz791b9ImkoZtT3Tgrk=
Subject key identifier: 2F:E6:4C:07:00:56:44:B4:FF:1F:99:58:0B:0E:10:CB:6D:D3:E8:67
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019369D9A9F5FB37507FAFF07CAEE8F5AD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
Manifest number: 0FD8
Signing time: Tue 26 Nov 2024 19:01:32 +0000
Manifest this update: Tue 26 Nov 2024 19:01:32 +0000
Manifest next update: Wed 27 Nov 2024 19:01:32 +0000
Files and hashes: 1: PCahx4W8qaXaNhSQdT-aWlx6dnk.roa (hash: /20n1jrLeAXpuMHYsF4+WNLYTPs2JgEuRlMIej3Uigw=)
2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: hErRlCGq7Ofm2N/fX5yA8VIxuNNLhRUyAFj99Nk9Rb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:a9:f5:fb:37:50:7f:af:f0:7c:ae:e8:f5:ad:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Nov 26 19:01:32 2024 GMT
Not After : Nov 27 19:01:32 2024 GMT
Subject: CN=2fe64c07005644b4ff1f99580b0e10cb6dd3e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:8b:85:75:39:57:13:91:e0:61:1b:0c:b2:
b8:c2:d9:af:fb:ec:70:6d:3e:7a:d1:49:2d:5d:f1:
6c:87:75:ac:29:11:7c:c1:38:39:e3:b0:d4:36:8f:
c9:7c:47:7c:45:80:61:cd:1d:1c:9a:e8:64:aa:4d:
45:90:81:9a:f7:2f:f0:f6:6e:15:24:84:50:87:e8:
97:30:07:f9:18:c3:89:2a:c7:a4:2e:38:af:41:55:
92:e4:93:1c:73:ba:a5:b8:39:19:76:bc:e6:63:2d:
39:7e:06:03:7c:c3:f2:d2:bb:44:9c:d3:2a:9d:17:
e2:3b:12:10:9d:93:99:00:6e:55:9e:af:8b:6c:c8:
6c:1a:10:0d:97:97:f6:a9:6b:28:ff:85:94:77:fa:
b7:e6:1f:fb:7c:8d:cf:70:3a:c7:8f:d9:6d:11:63:
a8:aa:3d:43:a1:03:b2:5d:b6:a2:88:d5:d8:81:46:
c0:86:de:bc:16:5a:f9:97:05:25:a8:61:a5:16:09:
d4:21:30:bf:1e:11:ce:b7:fd:dc:a1:ae:15:48:6c:
e7:bd:d5:0a:29:ce:25:a3:3f:fb:05:8f:97:06:1c:
c4:03:79:1e:60:4d:4a:33:14:6d:ec:44:b6:25:a5:
cf:4b:e8:bc:f7:90:63:fd:c9:4b:d4:c8:02:91:86:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:4C:07:00:56:44:B4:FF:1F:99:58:0B:0E:10:CB:6D:D3:E8:67
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:40:80:18:70:e0:c6:b1:97:5a:d8:9c:6a:40:92:e5:0d:40:
b4:b4:32:98:af:f4:79:42:f0:51:78:ad:5d:b2:9e:16:61:76:
62:52:46:7d:94:d9:b2:b6:96:45:1a:1f:df:05:77:38:76:12:
ca:e4:8d:a2:af:4b:a1:4e:65:a4:b4:bc:a7:c7:29:2c:43:77:
48:c9:86:7e:45:e1:14:21:c7:a6:21:5d:0b:2b:be:80:0f:b0:
f0:28:30:74:8f:69:d1:25:94:8a:f0:8f:5c:0e:ac:40:70:40:
78:9c:e9:19:05:a9:23:2d:13:c4:70:63:be:a8:f5:e8:b6:1e:
89:96:4c:7d:ff:e9:ab:c0:0f:e5:01:a8:30:d1:ec:c3:54:99:
e9:56:3a:ab:90:b9:c2:06:4b:73:cd:14:d8:42:ca:62:54:b5:
ae:b6:3d:38:5f:bb:ca:5d:fc:ce:5b:a6:47:d8:29:56:c8:ea:
ec:56:c0:08:b0:32:83:69:e5:eb:a2:cf:6b:2d:65:28:ab:c5:
b6:12:bb:5f:7c:16:e2:e2:db:23:ad:24:66:b0:ae:64:c8:27:
3a:69:20:f5:fa:c0:1c:db:28:3f:ae:91:ed:2d:e3:02:33:e5:
3f:a4:6a:41:c5:15:25:98:f1:36:d1:5c:e6:61:ab:12:21:05:
4f:83:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:39 2024 by rpki-client on console-fra.rpki-client.org