Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier: xgeu74v/KdXq6+S+6VUqhQsQGL+C1QY9YF8tFsJKZYE=
Subject key identifier: EC:46:A4:73:AD:43:94:82:EB:25:27:BC:BD:47:32:5F:B3:D5:6B:75
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 018F51DB637B0BE8CAC7FB90550B61B86C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number: 0CA1
Signing time: Tue 07 May 2024 07:01:23 +0000
Manifest this update: Tue 07 May 2024 07:01:23 +0000
Manifest next update: Wed 08 May 2024 07:01:23 +0000
Files and hashes: 1: A6IUTEvi7wxXW8-eKyj0PH86bAE.roa (hash: hDh8P7QOHea1wVNd56vBwxPBzPwGvxhlmiQgUr1vIt8=)
2: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: ng+WTH5o6oNbY4oPt11voXwyWe1buklaIdYIdwPR2HQ=)
3: ccn65hk9-qnFd_H_lFegzUu2HAg.roa (hash: dYS3Uy8i/n54D+tnuYSAHU4iCy/98GFGOATb54O/s2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:db:63:7b:0b:e8:ca:c7:fb:90:55:0b:61:b8:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: May 7 07:01:23 2024 GMT
Not After : May 8 07:01:23 2024 GMT
Subject: CN=ec46a473ad439482eb2527bcbd47325fb3d56b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:7f:6b:d8:89:29:9e:0e:5d:6a:3c:db:f2:
70:95:0e:75:d7:a2:56:82:ca:de:8a:94:74:ec:7c:
6b:1a:5a:8d:9c:1f:26:e7:41:7d:be:79:37:08:4e:
7d:1d:ff:d0:fe:4d:5b:da:64:1c:18:20:82:07:fa:
2b:43:7a:6a:dd:df:eb:47:e8:f4:5e:0e:f4:c2:b7:
4f:9d:98:7b:cb:d7:2c:0d:0d:2e:60:dc:1b:23:df:
f6:a9:64:bd:24:fa:ed:89:5a:9d:de:20:06:d7:68:
1d:3b:68:ae:6c:a2:ce:d1:72:e0:c8:86:c0:4c:18:
db:af:8e:9f:32:8b:db:c3:1b:b7:15:b6:ba:5d:41:
04:8c:29:01:c6:ee:85:90:b6:ea:30:aa:94:b4:e5:
50:6a:b9:6c:3d:97:5a:57:35:29:a4:a7:cb:5f:cb:
2a:0b:5d:ac:4c:4d:71:5e:8d:f7:0c:f6:d9:41:73:
a7:f6:30:88:56:b6:0b:f8:a7:c5:2d:20:3d:aa:f8:
6c:ab:30:41:28:56:95:a3:17:3e:f4:2a:50:d6:ba:
3e:b7:72:32:3b:65:0e:0b:00:cc:9e:fd:05:f6:2b:
8f:d9:34:2f:46:f9:38:32:67:50:72:84:d4:f1:fd:
d2:8f:70:96:ae:2c:64:70:b3:df:be:6c:0c:9b:7b:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:A4:73:AD:43:94:82:EB:25:27:BC:BD:47:32:5F:B3:D5:6B:75
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:43:6c:93:3a:a0:b5:f3:35:59:4e:b1:28:b5:c5:91:de:
2b:9a:88:95:34:bd:b9:d0:f8:74:4e:52:45:55:c4:b7:76:4b:
6f:d2:0d:1b:f2:0c:0f:b2:5a:f6:6e:33:25:4d:14:38:43:68:
b4:8b:f3:ef:33:3d:11:20:2f:cb:2b:dd:ac:8c:6f:02:0f:e9:
3f:76:ef:29:61:02:a7:bd:9e:5a:ab:8a:27:fc:bd:5a:b1:02:
b9:12:21:ac:f8:db:1b:b1:bd:2e:74:a9:ef:9a:9f:47:f1:75:
90:57:01:85:33:07:16:ab:63:9d:fa:2d:bd:aa:a9:99:78:78:
72:91:d4:50:ac:51:60:2c:6c:7e:2d:fb:a6:5e:75:53:41:40:
78:33:a0:69:c2:7a:dc:a2:70:0f:96:e9:c5:18:5d:df:ea:b8:
4d:37:a0:6c:ed:c7:cd:df:df:60:89:30:63:38:1a:d5:43:b5:
14:cc:63:03:93:61:95:e1:54:14:5e:94:7f:7b:5a:14:8d:04:
41:e6:cd:02:ec:13:09:4f:15:d0:64:ab:c4:52:02:73:74:e1:
5d:ac:0c:a1:42:4b:54:14:60:1b:52:9f:fc:de:fd:0c:b3:ba:
f0:69:56:c9:f7:10:c8:88:fa:30:16:40:50:97:59:3e:af:d6:
b7:26:67:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:15:51 2024 by rpki-client on console-ams.rpki-client.org