Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: wiGPCgLFbkrcB/ylCzEP52n8sup4f5LLYFv++J4C34o=
Subject key identifier: B2:FE:21:60:37:D8:25:AF:66:76:24:CE:65:55:67:E0:86:A8:18:27
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0193579BB2ADEA6A87C7E14DEFEF0696137E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:41 +0000
Manifest this update: Sat 23 Nov 2024 06:00:41 +0000
Manifest next update: Sun 24 Nov 2024 06:00:41 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: 67cldOokzT51Q+tjByheijYKoYQFPYcHlReZmDF8L8k=)
2: dSaicd8eMS1DbYxbZOA66qTeQ4I.roa (hash: LRWRLRzYJIYUnSkT4RHJc2DyrsL1zRo1+65bkYG7uYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:b2:ad:ea:6a:87:c7:e1:4d:ef:ef:06:96:13:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Nov 23 06:00:41 2024 GMT
Not After : Nov 24 06:00:41 2024 GMT
Subject: CN=b2fe216037d825af667624ce655567e086a81827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:12:c6:65:52:fd:78:00:33:33:3c:8b:36:
93:bb:ed:7a:a8:c5:1a:59:a4:6c:e6:e5:26:77:f1:
ac:81:43:06:bc:64:85:da:68:7e:82:d2:70:06:16:
f2:bf:e7:a5:8c:0f:06:03:59:c1:bd:63:21:8e:3a:
15:38:11:ac:98:5c:23:23:27:a2:bf:60:2f:9d:09:
b9:c5:ee:e3:f8:07:75:10:97:ed:03:d6:68:b5:37:
ff:fd:c8:f3:3f:67:20:1c:e5:95:e6:a0:a5:76:1a:
09:12:3d:6a:89:e3:78:bf:fd:52:21:2c:2a:7e:87:
0f:e0:97:83:54:ec:18:c3:c8:e7:82:fd:ea:42:70:
80:dd:85:6f:fd:82:b7:0d:1f:9a:95:a9:c9:f1:fd:
3f:a1:69:85:d6:77:f1:4d:db:88:3c:33:34:38:80:
12:a7:a0:b9:7a:f1:f3:66:de:89:ac:50:d1:4e:a4:
f1:a5:a4:9d:26:6f:d7:7b:80:68:d6:09:cd:98:26:
7c:e0:d4:b8:b1:8f:81:d7:44:1b:23:97:e1:17:4b:
78:a3:db:30:50:c5:e3:35:63:11:f2:4f:8f:96:86:
0d:52:45:3b:0a:2c:e2:8d:ad:3f:c6:31:95:50:35:
db:ca:19:df:7f:3e:b5:3f:7c:4d:af:1b:b0:07:e4:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:21:60:37:D8:25:AF:66:76:24:CE:65:55:67:E0:86:A8:18:27
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:61:d0:e5:6e:ba:f3:f3:22:8c:fc:b3:d6:3c:75:59:da:3b:
5b:33:60:14:0d:f5:a3:34:71:dc:c4:16:51:08:7d:4c:64:17:
1a:d3:fe:0b:7a:50:6a:a0:25:02:17:31:b7:11:9f:02:2a:33:
dd:b7:db:fe:68:d5:e5:6b:19:0c:11:27:df:9a:af:78:9d:f9:
7e:5c:8e:9f:57:2e:16:eb:bf:4c:eb:de:15:e3:cf:bb:e3:ff:
13:88:3c:e2:4c:1e:ca:48:00:58:7b:4d:5e:29:49:91:76:ef:
bd:ee:1d:42:fe:51:b4:38:9f:43:85:f0:3d:b3:14:ac:79:e2:
23:15:96:bc:15:f4:5c:1c:4f:43:2f:11:2f:9a:1c:e3:1a:56:
cc:bd:13:0d:4c:67:2d:6f:f7:7b:2a:7c:b4:f6:16:a7:f1:52:
eb:c6:15:85:30:d5:64:5c:96:60:0e:fa:39:99:23:7d:12:c1:
5a:ac:3b:ae:53:2f:2c:db:01:05:68:f5:8d:e5:d1:d3:9c:1a:
80:a5:33:11:d4:d6:a7:4d:2b:f0:4a:e0:d0:e6:de:fa:32:b0:
f3:31:aa:76:39:ed:34:dd:1a:4c:26:63:06:78:0a:a6:69:c0:
dd:eb:cf:31:40:e9:cb:82:ab:86:5c:29:75:ae:d7:70:f0:b4:
00:2a:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:34 2024 by rpki-client on console-ams.rpki-client.org