Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: hmGPEY+49B+AgeKrpmgQzP4ySye61GHpSGC5dKa+nP4=
Subject key identifier: 70:DF:C8:BE:3E:47:DD:B7:40:3A:DF:06:53:53:AF:25:53:46:96:74
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 01936A0F5FB9D9108FAA60D12BFCF9CBF515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: A7
Signing time: Tue 26 Nov 2024 20:00:12 +0000
Manifest this update: Tue 26 Nov 2024 20:00:12 +0000
Manifest next update: Wed 27 Nov 2024 20:00:12 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: uRcTuSToDb62E4vPDYYSArK3C9NdlRW+QfHAlCNXb+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:5f:b9:d9:10:8f:aa:60:d1:2b:fc:f9:cb:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Nov 26 20:00:12 2024 GMT
Not After : Nov 27 20:00:12 2024 GMT
Subject: CN=70dfc8be3e47ddb7403adf065353af2553469674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:6e:b3:17:5a:40:e0:4b:fe:ff:a9:9d:bc:
ec:c7:29:8a:9a:f5:b2:57:e4:2f:0b:a0:55:ea:28:
cb:13:07:15:78:bd:f4:c7:ea:37:6c:68:61:0c:77:
d8:d5:3f:c9:db:70:d3:08:3a:cd:78:3a:70:20:c1:
36:dc:2f:39:84:1b:45:86:d8:0d:f1:5e:85:07:78:
ce:2d:60:83:5b:ef:f2:5b:41:d8:04:31:b2:25:2b:
9c:7e:9b:97:37:9e:49:12:b8:83:f1:bf:65:ad:9e:
fd:a1:db:3c:37:52:a2:65:55:82:8c:4f:3f:b8:92:
05:44:40:1a:31:b6:c9:ba:d6:58:24:04:ba:b8:2e:
be:65:eb:93:ff:2c:b3:28:d6:48:d4:d9:c9:e5:c9:
4d:ac:9a:a9:0b:2a:d7:b8:4a:7a:42:6a:fa:96:51:
a4:06:3c:9d:66:0f:1a:01:dc:b7:91:be:17:3d:e7:
43:79:dc:82:d2:14:58:22:33:27:c8:a4:03:70:40:
57:44:60:27:8b:36:2e:f9:47:b0:94:2c:b3:b8:8b:
d0:a4:bd:39:81:f7:cf:64:6c:aa:75:21:c2:37:2b:
af:46:68:89:c9:71:79:21:d4:75:ba:1d:7c:a4:36:
97:f2:e5:02:12:6d:a2:53:b2:78:0a:3e:7a:e7:c0:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:C8:BE:3E:47:DD:B7:40:3A:DF:06:53:53:AF:25:53:46:96:74
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:93:bd:bd:6f:d4:14:ae:16:ab:cb:3c:8b:b0:be:c8:30:4f:
e0:59:a0:f9:62:84:8d:ed:fc:19:47:2a:30:86:85:b5:6d:5e:
02:07:01:e7:69:65:1c:da:e0:cb:b4:56:fc:17:37:b2:b6:fa:
42:bd:9e:be:ef:a1:78:3f:d7:80:20:3a:fe:d1:6f:9a:e5:de:
78:30:73:73:49:c8:a2:a7:c5:34:c6:31:3f:6b:71:ca:4f:fc:
94:7f:f8:b8:fe:7c:c4:95:bc:b4:1e:27:05:1a:5a:9f:13:be:
61:3c:bf:7e:b3:6a:84:4b:0d:59:5f:57:8c:76:e5:fc:77:a4:
f5:ea:f7:a3:62:21:1f:e1:6d:70:fc:f9:af:bd:5d:50:94:1c:
90:c2:cb:27:8d:99:e9:10:c8:34:69:3c:38:90:60:8b:02:44:
2e:5a:b8:b8:6c:32:42:5b:37:14:2d:97:81:57:00:1b:a2:1a:
1d:39:13:d0:f9:7f:8c:37:09:aa:85:7e:b4:b2:c9:98:b9:fb:
0e:c1:d9:e2:7c:1b:a3:c9:c3:98:58:a9:68:55:98:5e:f4:ec:
3f:98:f2:cc:23:c0:d4:05:a3:ee:43:d7:18:88:b4:85:e4:14:
e2:26:1a:6b:68:de:6e:28:c5:ed:0d:7d:2a:70:b3:e3:08:04:
c0:ae:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:46 2024 by rpki-client on console-ams.rpki-client.org