Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: x8COXwRpCYb4p30ZhirxwnOs5jcUGa48kQ3s6PPSYdw=
Subject key identifier: DA:2C:A3:9F:F2:DD:AB:D6:47:FE:31:A1:4F:57:EE:72:D1:19:42:00
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 019369DA381F8A27292C0154D5BC031B407F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 127C
Signing time: Tue 26 Nov 2024 19:02:08 +0000
Manifest this update: Tue 26 Nov 2024 19:02:08 +0000
Manifest next update: Wed 27 Nov 2024 19:02:08 +0000
Files and hashes: 1: Znyv73noEelMozAQuugw2VVlc7M.roa (hash: AtXuUnIUP3yZXZGpaIIpLY4gyZY7pqDo13SMQOVSCEk=)
2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: v+LlHbQiByeK2SleBWr0EeM6pG8Ub6wYFHP3rO/I158=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:38:1f:8a:27:29:2c:01:54:d5:bc:03:1b:40:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Nov 26 19:02:08 2024 GMT
Not After : Nov 27 19:02:08 2024 GMT
Subject: CN=da2ca39ff2ddabd647fe31a14f57ee72d1194200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:66:e9:38:08:45:3c:d1:4c:f0:91:66:2f:
06:fd:ea:31:cf:70:e6:ad:ae:31:bc:60:d3:18:00:
e4:fc:d5:c3:dc:91:40:8e:83:b9:9e:a1:b0:b8:51:
32:17:af:9c:fe:22:87:95:17:d7:f0:61:25:9e:69:
8e:fa:9e:f0:da:0d:29:22:28:f7:0c:2d:93:d0:6c:
a4:17:b7:48:29:f6:a1:7d:a7:89:d4:f0:cc:be:80:
8d:71:78:a3:27:fc:7e:b6:79:fa:1b:ee:f7:bc:0e:
16:d9:00:f0:c2:d9:4a:60:d4:a9:fe:1f:e0:c9:b7:
31:e7:3b:bc:4f:33:bc:75:05:6d:b7:62:7e:9e:b2:
72:f8:45:8a:c4:7b:be:ca:9d:bd:32:07:51:f4:00:
eb:41:dc:ad:f9:0c:76:4e:7d:71:30:14:80:d4:25:
45:2d:f0:64:92:22:bb:df:fa:f5:3f:25:a5:79:8a:
8a:90:17:ef:57:51:84:d8:ef:c9:fc:d4:da:c9:42:
22:dd:6c:53:5f:75:94:6d:ea:70:b6:40:c5:a0:03:
a2:f0:00:c7:5f:d9:35:1d:df:f9:1d:6c:4c:f9:5f:
c7:71:46:f8:39:cc:8f:48:89:d4:4c:9c:d1:b8:19:
26:e4:b6:13:a6:a3:7e:a6:70:fa:39:46:d1:fb:33:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2C:A3:9F:F2:DD:AB:D6:47:FE:31:A1:4F:57:EE:72:D1:19:42:00
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b6:b3:09:58:f3:02:b5:46:3c:57:d8:d8:ff:be:7f:13:70:
32:a2:f2:18:d1:76:a0:32:e5:27:6c:84:aa:51:9c:b4:50:57:
b2:74:f6:cc:72:8a:99:59:5a:dd:60:4f:69:c5:e2:a9:ec:59:
58:8b:67:9d:7d:19:69:d2:ea:d3:b8:b7:83:fe:4b:f0:34:d9:
1d:98:0c:5e:11:bf:fe:66:78:11:21:65:89:09:77:59:a8:ca:
3c:d8:19:47:38:36:14:65:6c:f1:73:40:dd:08:46:72:01:3c:
3e:3e:c3:e0:63:b5:8a:3d:0f:b0:b4:aa:1e:8b:b5:a5:6a:64:
fe:93:41:4b:3d:d7:ab:5c:14:b7:da:79:63:13:76:fa:15:c1:
a6:5b:d3:6d:8c:0a:ac:44:86:2b:48:fa:af:fe:22:b9:62:53:
38:70:ee:5d:78:19:cd:53:f7:7a:17:9a:10:64:fa:c3:3c:58:
ba:98:f5:98:d8:98:bd:aa:de:3d:5c:18:0b:84:e2:e3:b3:7a:
f6:28:39:3d:32:79:23:c5:06:e5:52:9a:da:59:27:f2:25:05:
b7:1a:cd:4f:58:40:3f:68:71:7e:4d:79:6c:74:08:95:d9:77:
b6:5a:6e:24:7e:8d:df:55:84:fe:26:fb:71:6d:12:74:81:4a:
73:63:42:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:18 2024 by rpki-client on console-fra.rpki-client.org