Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: UCRm0TDfsK++BSShhEIwkKAB6VearohydtSCONdukfY=
Subject key identifier: ED:D7:68:B1:06:75:B2:31:E6:F8:84:4C:7A:CA:31:95:A5:7E:E3:E2
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0193568AFEDFE2483B8CADB901AE2E8307F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:49 +0000
Manifest this update: Sat 23 Nov 2024 01:02:49 +0000
Manifest next update: Sun 24 Nov 2024 01:02:49 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: ErrzrwsI6hwXalB8tdbMW+Crxz0N1lbNmkOAZU9IPE4=)
2: TTkJwDOEGa_qOqQDnu9NVrOJWEI.roa (hash: 4+8ZRksJGKVtzFYMJx2y0TSxI9LTK7gq3i+ZQ0Vjdik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:fe:df:e2:48:3b:8c:ad:b9:01:ae:2e:83:07:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Nov 23 01:02:49 2024 GMT
Not After : Nov 24 01:02:49 2024 GMT
Subject: CN=edd768b10675b231e6f8844c7aca3195a57ee3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:ba:6a:73:b3:10:da:1f:e8:33:a3:84:7f:
38:2a:c9:1f:86:05:54:f7:f0:e9:b6:95:d6:4b:07:
6b:ab:db:96:2e:4a:02:82:11:b4:04:9e:f5:53:73:
04:98:cd:43:a1:84:0c:0c:09:b4:07:96:ff:7c:c2:
d0:1a:6e:bf:9e:cd:26:53:8f:0f:6a:57:4d:d2:8b:
09:84:7c:bb:64:4e:4d:e9:a4:dc:da:ea:d2:9c:d6:
99:93:4d:45:9c:f6:53:05:8c:d4:a1:8e:89:6a:40:
62:d6:ab:cd:5b:67:4c:c2:52:be:cb:9c:99:06:3e:
24:b1:46:f7:a4:dd:03:d9:69:d7:b7:f2:2d:7f:fa:
30:20:3e:ab:99:25:18:48:34:ce:f6:1f:a3:ee:9f:
d4:51:7d:d9:1b:dc:f8:57:e9:e3:6d:96:b8:85:17:
50:75:55:75:a2:f1:91:ac:e3:2a:16:21:e3:00:3e:
ca:5d:f2:cb:2e:44:4e:f6:73:05:9b:94:6c:2e:bd:
aa:53:ba:ce:de:b9:80:4b:ba:e7:22:b2:02:8d:cc:
84:58:62:c3:39:bf:a6:03:8f:36:7d:ed:ef:d5:59:
8a:61:8a:6e:05:75:ea:6f:16:1f:6a:7e:97:28:03:
9b:58:63:ed:01:c3:a1:17:0e:70:ba:aa:d2:1a:49:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:68:B1:06:75:B2:31:E6:F8:84:4C:7A:CA:31:95:A5:7E:E3:E2
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:1f:e0:59:f0:7a:c9:10:1c:e2:a4:17:ac:b2:85:0e:81:
b5:07:32:f0:33:cf:df:62:b1:f4:1d:87:9f:e5:89:25:03:10:
40:c1:47:0e:54:76:94:8c:31:ed:13:00:36:44:e5:95:19:ea:
f7:46:d3:ed:77:ca:3a:8e:72:df:20:c0:dd:47:75:68:38:38:
8b:0b:b2:c4:67:3b:3d:56:a3:1b:55:ed:44:3b:68:fb:cb:11:
b9:94:fe:ff:e1:6e:4b:a5:7a:52:bf:21:a6:ea:dc:18:86:31:
65:4a:af:22:fd:85:06:9f:ce:f7:46:3a:84:e0:d5:a0:cc:73:
37:85:79:c8:78:c8:6a:b0:9d:61:94:83:52:10:bb:05:d3:54:
7d:0d:25:48:33:d1:c3:98:7f:4c:1b:57:59:28:9a:69:22:20:
f7:c6:2a:c1:50:59:f1:aa:91:2d:49:22:30:0e:0c:dc:14:a9:
e3:5f:be:26:77:2e:3e:68:a0:85:14:8c:26:ed:f4:73:1d:fc:
5b:3b:24:8a:4a:48:2f:79:76:ec:06:cb:90:2c:bb:6e:f4:9d:
54:32:04:9d:2d:c8:15:4a:af:e6:ee:43:25:3f:93:36:17:59:
12:c4:5a:c3:0c:69:69:02:04:a5:ba:bc:7c:c2:53:87:fc:e5:
ef:f6:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:40 2024 by rpki-client on console-ams.rpki-client.org