Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: VxXvzQ+VNmhXdAdtLOecTlMAVWdcO1sqDDrFkNCpmE0=
Subject key identifier: BF:07:1C:1B:DA:E7:FE:71:48:08:E1:D6:5E:B3:6C:6F:2B:38:08:FF
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 01936AB4DAC1E1F94CA76FF34997782FB706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 23:00:57 +0000
Manifest this update: Tue 26 Nov 2024 23:00:57 +0000
Manifest next update: Wed 27 Nov 2024 23:00:57 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: MUwj/QoFHcaJ9v/V8NWIczp4xd4Bzc4mw143PSF+7MY=)
2: jV7AHNrsYKK0LVYr93CMw9aF-Ss.roa (hash: Mwgy1DZ6LmfRbPT/OYCrV7JpE5dpQnQIf9ntR3EbWo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:da:c1:e1:f9:4c:a7:6f:f3:49:97:78:2f:b7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Nov 26 23:00:57 2024 GMT
Not After : Nov 27 23:00:57 2024 GMT
Subject: CN=bf071c1bdae7fe714808e1d65eb36c6f2b3808ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:e3:1e:ae:34:e8:a1:c9:4d:f4:91:a8:43:
6c:89:03:da:e6:e1:91:7a:38:fb:4e:bf:29:84:2f:
01:f2:0c:56:ba:00:de:93:75:4e:55:34:be:b0:c9:
f1:f8:a4:21:06:73:8f:23:f9:96:ee:ef:79:44:84:
dd:a2:fe:33:5a:ca:77:a9:71:06:73:f4:26:23:f1:
fe:2b:d6:fc:57:75:00:33:05:ca:2f:9b:b9:61:71:
8f:fa:3b:f0:52:a3:fc:b0:b9:0e:b9:81:bc:40:2a:
01:69:06:53:c8:38:a0:f7:03:f6:81:59:a4:84:40:
3f:65:8d:6e:90:74:87:cc:e1:ac:e7:3e:ce:4a:91:
a0:6a:e5:d7:f5:c6:e2:33:00:86:b2:9d:14:a2:35:
3f:30:7b:c0:38:6d:9a:93:f3:d5:d7:ac:b3:18:2d:
e4:a1:98:1f:22:7c:32:34:4e:c0:51:e3:4c:8c:6e:
46:06:08:31:04:7a:7c:4b:62:32:c1:c5:61:ec:85:
76:67:de:b2:dc:64:52:62:91:96:7f:56:03:a4:2b:
97:82:db:7d:8d:6f:db:a9:1f:75:7f:b4:96:43:45:
19:24:c6:18:20:08:7f:32:3b:0f:8e:b8:29:2a:57:
ed:70:15:8f:d9:c7:46:3e:46:08:cb:65:8f:d1:7d:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:1C:1B:DA:E7:FE:71:48:08:E1:D6:5E:B3:6C:6F:2B:38:08:FF
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:35:d3:7e:1c:71:33:e2:bc:43:a8:2d:da:7c:b8:e4:78:
54:0e:7a:68:07:4a:6d:e8:a6:9a:8b:dc:35:bb:ab:81:10:07:
1c:a1:c8:52:f7:93:fe:05:a1:69:e5:30:9c:65:6a:21:d9:fb:
99:6a:f7:10:39:20:d1:6e:ef:fc:a7:bf:14:60:dd:bc:18:e1:
ec:55:8a:59:93:40:63:d0:97:a6:70:fd:2a:b0:45:68:63:ac:
4a:66:4e:90:7f:63:e2:63:42:97:86:d6:2e:e9:24:bb:bc:2c:
68:25:69:ec:2d:dc:89:43:bd:bf:1d:46:3b:03:a7:c0:37:7a:
2f:a1:45:5b:2b:04:13:c6:79:ee:3b:68:66:69:b6:0d:92:eb:
f2:d9:92:d8:63:11:00:30:6f:ef:45:95:45:4b:5f:16:52:a9:
e4:1e:8a:bd:22:cd:7e:91:67:8b:5c:3f:cc:05:3d:2d:16:24:
90:75:a4:0a:b4:63:79:3f:3c:f1:f8:76:97:97:07:cb:e0:82:
63:37:a0:0c:97:28:b6:40:c9:9b:3e:03:cb:85:a1:88:ad:43:
d5:ae:a1:95:c1:70:1b:22:79:92:56:2e:ea:f1:fa:51:47:aa:
1d:9a:00:11:3a:d3:11:16:9d:b8:3c:66:98:7c:e6:02:1e:86:
74:a5:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:09 2024 by rpki-client on console-ams.rpki-client.org