Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json)
Hash identifier: +sjVgKQIsmq5DihgharF8y292WOKEGUlapzzGYHtzGQ=
Subject key identifier: 3D:9E:24:B2:FC:83:D0:76:F2:52:C6:64:A9:6D:BC:E5:AA:55:EA:CB
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 0193568A6AFE2208B7A48A4C839290CEE8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
Manifest number: 10F2
Signing time: Sat 23 Nov 2024 01:02:11 +0000
Manifest this update: Sat 23 Nov 2024 01:02:11 +0000
Manifest next update: Sun 24 Nov 2024 01:02:11 +0000
Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: HeApSOwWIb9q97ytVTau0xExaeem7ofZde7a2bwORxQ=)
2: ku3-Asq6XuVzw3HiVJxnW0rawTI.roa (hash: SpfoGDeVSONBGvlFVn8iYXcFVYA/lp2aFAVUf3PAFwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:6a:fe:22:08:b7:a4:8a:4c:83:92:90:ce:e8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Nov 23 01:02:11 2024 GMT
Not After : Nov 24 01:02:11 2024 GMT
Subject: CN=3d9e24b2fc83d076f252c664a96dbce5aa55eacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:ca:0e:04:aa:82:33:b4:c7:f8:b9:65:6f:
81:a9:10:a4:de:6e:58:8b:ca:7c:c2:d4:b9:7c:25:
2e:2a:aa:c8:ae:e3:e9:2e:82:dd:fc:15:12:be:4c:
e1:db:c2:0e:7c:66:e4:b0:b5:91:1e:e6:9a:d9:fe:
fa:8e:32:c2:02:8e:1c:5d:34:33:cd:3b:b0:98:7c:
11:4c:b2:b7:e5:dc:80:f4:c6:1f:f0:b3:48:f7:07:
24:f1:a8:f1:3d:88:31:a7:b9:e5:bb:e6:90:79:ad:
3e:39:fc:9d:0f:b1:d6:94:d5:40:f1:1f:f0:64:66:
9a:1d:af:73:8a:65:04:63:7e:1d:88:dc:0c:47:1c:
ed:d7:72:57:a8:6b:48:12:4a:c5:b5:43:5e:b7:e7:
fb:2a:c2:c9:2c:79:c9:1d:1d:cf:c8:37:22:29:f3:
a5:79:ff:27:64:ce:a9:d6:9f:f9:6c:19:a8:68:b6:
00:45:54:40:74:bc:9b:87:c1:36:bc:83:79:7a:6a:
2c:4a:06:46:93:de:3e:c0:3f:b3:be:1d:08:d4:5c:
e3:1f:31:70:e2:98:53:f0:60:87:b4:ee:3f:e2:14:
99:ba:94:0a:68:e4:07:0e:4e:24:df:15:94:f4:ab:
53:f2:77:32:06:cc:a9:88:b0:08:14:c4:09:31:4a:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:24:B2:FC:83:D0:76:F2:52:C6:64:A9:6D:BC:E5:AA:55:EA:CB
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:5a:ad:3c:5f:25:76:af:08:b1:28:a4:04:cc:bd:a2:b5:
4e:29:a3:f1:b8:0f:d5:03:96:56:e3:fa:f8:b4:ad:b9:cd:42:
38:48:56:36:96:5c:63:35:ef:9e:9e:80:96:6e:ae:b9:ae:1c:
b3:bb:20:d9:2e:52:74:fe:5f:a1:ef:3a:3b:6e:ef:13:05:46:
0e:e2:7d:97:68:68:95:69:21:68:a9:f2:d7:0d:47:31:43:10:
a6:e7:63:2f:43:72:0c:79:a4:58:60:93:9b:ed:bc:f0:ac:64:
ff:49:16:0b:38:65:4c:eb:80:a4:f2:7d:da:0d:89:d4:29:26:
8f:2d:da:dd:1c:c7:9d:76:50:61:25:dc:2a:ac:0c:50:9f:bf:
1e:a9:35:55:20:5c:30:30:03:27:56:ab:cd:5b:79:6e:8b:d1:
42:5b:66:3c:4d:ed:3a:26:9e:13:4b:64:97:09:c9:77:16:8c:
d3:bf:5f:0d:ee:79:d3:bb:25:9f:42:78:fc:ce:64:29:3d:80:
65:bb:f4:b2:03:6a:d1:a0:50:5e:68:19:1e:59:88:2e:2a:10:
72:4c:f4:90:86:22:a4:20:e7:d1:36:40:23:0d:20:5b:88:27:
05:d7:93:db:e8:7e:18:5d:14:18:38:db:e0:62:79:38:05:45:
cf:9b:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:42 2024 by rpki-client on console-fra.rpki-client.org