Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: b2uAT5Ct31eJmFDGH6Cw6BKj7C10AgPtUvDEQOBF+Ys=
Subject key identifier: FF:3F:7D:8D:28:31:58:3B:D5:2A:BF:C8:7C:76:B4:6A:76:76:D0:F2
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 0193609EF67551B464121AD90BDF0AB97649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 1375
Signing time: Mon 25 Nov 2024 00:00:50 +0000
Manifest this update: Mon 25 Nov 2024 00:00:50 +0000
Manifest next update: Tue 26 Nov 2024 00:00:50 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: i02LRPwlCiG2QeuIAJBNx3fK+Z1uKuibRi9RK1iqzIY=)
2: KPqUtW9e4qCBH0gKhDX9Uhwk84k.roa (hash: WI5X4J9CdxeN2W3rKhwlHqAbUJpx2a3wwsmzXXGQl9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:9e:f6:75:51:b4:64:12:1a:d9:0b:df:0a:b9:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Nov 25 00:00:50 2024 GMT
Not After : Nov 26 00:00:50 2024 GMT
Subject: CN=ff3f7d8d2831583bd52abfc87c76b46a7676d0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:f1:b5:cd:ab:02:fb:d8:64:1c:46:1c:e0:
b2:28:de:cb:2f:10:64:0c:de:19:52:56:0a:a0:f2:
8a:7a:00:d7:cc:7e:07:6c:0c:c0:70:05:5f:1a:d0:
4a:86:30:ed:4c:a2:2c:52:b6:06:cb:9d:ee:fb:1e:
a2:fa:20:c0:20:b8:1b:34:60:31:db:95:bd:7a:9f:
33:29:b5:2a:5b:dd:6e:91:15:ca:45:11:55:75:64:
7d:17:07:b2:bd:04:fe:56:31:44:ca:5a:57:07:8a:
8d:bb:66:d2:0c:3b:ea:7b:da:4b:e6:51:24:61:dd:
2e:6a:e1:86:5c:95:6f:49:97:89:39:ee:97:71:fe:
66:16:28:f6:14:6c:9c:ce:8a:b9:f1:b1:47:cd:4d:
ac:46:29:15:b9:11:ce:89:ea:8f:c2:ec:28:c4:92:
78:04:c7:00:52:dc:5c:ce:d7:0b:e8:b9:09:71:b7:
2a:28:2b:d3:b3:fe:3a:ca:dd:c4:b2:f3:2f:50:f4:
24:c5:24:7f:35:9f:3a:3b:b4:27:01:5a:44:61:aa:
8a:fb:8d:ef:3d:3b:69:a7:23:20:90:78:c9:0b:35:
94:32:3f:99:da:fd:6b:67:6e:20:ee:2b:f3:1d:68:
8f:4a:90:4a:e4:c7:ec:72:30:a6:eb:81:ff:e5:2d:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:7D:8D:28:31:58:3B:D5:2A:BF:C8:7C:76:B4:6A:76:76:D0:F2
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:02:b1:e4:f1:6a:84:08:2d:d1:b1:cc:c4:ca:44:62:6a:ef:
d8:51:44:75:52:c4:b8:89:cf:fc:c2:1f:e7:cf:69:51:27:1a:
49:5c:7a:15:a8:98:6f:99:06:df:2d:fc:d0:84:82:95:98:bd:
56:38:e8:7b:ef:6e:5a:e4:e3:17:70:2d:a7:34:2b:7d:65:e7:
16:5b:d0:c3:b7:e1:4e:37:74:84:b5:10:d9:cd:61:82:b6:14:
db:21:f0:c7:06:e0:00:8f:cc:9c:69:67:43:8c:2c:1c:8d:58:
df:2d:e8:29:90:85:b3:0c:1c:db:83:78:11:a2:39:7e:7d:c3:
54:d7:46:fe:42:51:8f:66:9e:b9:6a:af:de:6c:17:93:1f:cc:
5c:cf:bc:91:51:7e:91:1e:dc:73:92:78:66:40:2e:d6:f6:ea:
74:33:43:a2:0a:39:b7:3f:1d:01:f6:e7:d8:1c:ba:d3:77:15:
f2:17:7f:eb:b5:58:20:8a:34:88:30:45:f9:23:dc:44:a8:95:
0a:37:d2:9a:85:cc:cf:32:47:2f:6e:d8:cd:34:9a:10:47:40:
6d:b3:af:82:1a:a6:62:cb:31:15:e5:1e:09:3f:dd:22:e8:e7:
f9:d6:df:4f:c3:28:06:5d:fc:b4:35:6e:1b:6d:5c:5f:74:9a:
b1:18:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:46:57 2024 by rpki-client on console-ams.rpki-client.org