Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: XQ7QbRPZ3xVq3Z24rX7pXgLS1lMofsRFf27CoIKmLIQ=
Subject key identifier: 8D:E5:7B:38:1A:EB:D3:1A:23:81:2C:E5:B7:18:40:59:75:5D:24:34
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019357D25D04A5295A9400D86D5BF8EB5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 07:00:24 +0000
Manifest this update: Sat 23 Nov 2024 07:00:24 +0000
Manifest next update: Sun 24 Nov 2024 07:00:24 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: NCievYHLUKrn9qJi5FsO/7MRm/DW31EoYUHOcZ3jvOQ=)
2: RqbanMGs8OupmkvUhgL_aQXy6yQ.roa (hash: /Ezx+cuYfNYZtyz07PYRRLqmq0ZuqvIfbeWAr0mc/+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:5d:04:a5:29:5a:94:00:d8:6d:5b:f8:eb:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Nov 23 07:00:24 2024 GMT
Not After : Nov 24 07:00:24 2024 GMT
Subject: CN=8de57b381aebd31a23812ce5b7184059755d2434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:cd:97:9a:82:1e:99:82:34:50:88:ae:16:
f6:02:27:46:24:f4:8c:22:8e:f7:90:10:01:02:58:
94:bf:4e:09:d8:41:a0:75:45:b8:76:c4:0e:53:ba:
93:81:3c:96:ef:5c:39:13:09:9d:33:05:4c:ec:32:
3a:a5:c5:8b:27:43:41:78:3a:03:10:0f:4d:79:e6:
18:c6:85:2f:a9:4e:7f:9f:5b:73:73:ba:a0:c6:50:
76:26:86:66:a7:14:8f:04:3d:78:97:10:4a:f7:f4:
0f:76:ff:08:6c:84:ef:dc:a7:5e:1b:ff:a3:58:bf:
ea:68:ee:9a:09:69:12:a4:fb:dc:de:ce:a6:8a:3d:
ed:a7:e1:95:dd:c5:b1:ab:9f:78:56:0d:86:66:0f:
e9:e7:93:b9:3e:3f:3f:1a:23:7a:86:19:3e:30:54:
37:1a:a7:e3:a3:c6:82:b4:84:ec:0a:a3:8d:5f:75:
0d:7e:3d:9b:0a:37:e6:f2:7f:1d:35:2d:34:a1:b1:
ac:8b:3e:b7:4e:44:a0:34:68:eb:54:51:e9:2b:57:
e5:05:ff:93:8d:d1:c2:88:76:04:7f:01:37:8e:23:
24:64:9f:a8:0c:03:c2:9c:f3:ae:8a:20:cd:56:fe:
ca:85:8a:a5:e2:54:a6:3c:88:00:a8:2d:31:c8:7c:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:7B:38:1A:EB:D3:1A:23:81:2C:E5:B7:18:40:59:75:5D:24:34
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:08:f9:82:05:a4:c9:7e:93:35:ca:aa:1d:c5:5c:f9:20:b4:
99:1a:0b:3c:d8:46:44:b0:98:c5:83:3c:86:98:42:ac:3d:1e:
9f:4b:5c:b1:82:88:f1:d7:29:a5:ca:14:64:80:ba:e7:ba:dd:
72:4f:3c:b1:82:0c:83:95:22:49:c4:ba:50:36:7f:5d:8f:e9:
6f:65:c9:dc:a3:48:e3:51:a7:3a:c7:73:83:a1:98:74:cb:39:
e1:e9:ce:0d:77:32:87:ab:2c:1e:36:78:6e:f9:2b:85:8a:97:
b8:7d:49:f7:22:7d:c4:de:9d:05:f7:19:65:cb:27:3b:85:74:
92:24:26:5c:62:17:8a:39:a8:ac:eb:11:f3:01:04:d5:7e:b0:
3e:8b:36:fe:64:79:7d:8e:3b:0c:b3:1d:1c:79:d4:e7:c9:7c:
4d:e0:f8:a4:ef:a0:cd:33:0f:4f:eb:17:98:8c:57:43:19:5e:
7f:90:27:2c:17:b8:2d:68:85:42:55:3d:af:73:ef:66:05:f7:
6d:25:55:54:f4:0d:7b:b8:b0:8f:82:5e:90:f2:e0:e7:38:44:
23:ae:92:0c:ad:30:32:e6:9b:d4:bf:39:91:ed:07:28:ab:06:
a9:5d:11:0b:b5:19:77:07:1f:5b:73:74:8f:af:c9:ef:85:7c:
c2:ff:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:14 2024 by rpki-client on console-ams.rpki-client.org