Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: be3FguNFPN3TDfVkqS3ylzWnXj+rOsG5mT9JVlOB0Aw=
Subject key identifier: BE:DB:42:46:2E:99:CA:C6:B1:C1:93:86:C3:4F:93:9D:E8:AD:AB:88
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 01935952E6F08F5AA6F6E8A650CF28B11B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 10B0
Signing time: Sat 23 Nov 2024 14:00:25 +0000
Manifest this update: Sat 23 Nov 2024 14:00:25 +0000
Manifest next update: Sun 24 Nov 2024 14:00:25 +0000
Files and hashes: 1: OAXIQA-wV0JBz8DwqMCckaigRrg.roa (hash: BDvIEFeTH+jmJIzLzoM7c+UmSMTZ+ie/g+knpvOlM7M=)
2: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: mdKtuwg4VmWu3/y5/iP5R+VCtaCsF3CobRHJfxrJiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:e6:f0:8f:5a:a6:f6:e8:a6:50:cf:28:b1:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Nov 23 14:00:25 2024 GMT
Not After : Nov 24 14:00:25 2024 GMT
Subject: CN=bedb42462e99cac6b1c19386c34f939de8adab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:f4:92:cc:be:35:7a:c5:b8:03:a4:fa:e1:
21:d6:60:3e:41:e9:91:65:fd:d2:4f:ac:2f:07:9a:
d6:5a:a1:df:26:cb:ee:a8:87:6e:8f:a2:e3:ed:53:
3b:10:7d:b3:74:18:f1:c1:ac:5e:08:98:77:67:fa:
a0:50:2b:9b:85:90:0b:a0:0a:ed:5a:de:cc:b6:52:
a3:db:3f:1b:b7:dc:d6:cc:b5:b8:6c:f5:05:14:99:
56:a1:86:ca:21:32:d1:29:e2:30:a1:3d:e9:d4:24:
f2:42:11:22:6c:26:ec:05:2c:8c:5d:e2:83:87:7e:
36:3d:45:bd:e0:67:c9:49:49:92:db:6f:ad:b6:41:
02:f3:f1:0b:06:0e:9c:d5:59:87:a3:1c:dc:d3:09:
11:0d:9f:12:52:22:5e:48:64:24:58:f5:db:b8:73:
7a:49:ea:7c:f7:63:18:70:29:7a:5f:10:ff:a2:80:
59:7d:2f:af:1d:9a:9a:a3:d0:ea:57:35:08:30:83:
79:69:75:7d:f8:9e:c3:9e:52:22:a0:f2:0d:ae:db:
92:0d:c2:e2:0d:d1:22:4a:e0:ed:f4:f8:da:f7:11:
43:8a:36:35:13:51:85:22:35:ea:0c:fe:20:e9:71:
66:c2:1c:98:0a:17:cf:03:1f:d8:7c:7e:ba:4a:2b:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:42:46:2E:99:CA:C6:B1:C1:93:86:C3:4F:93:9D:E8:AD:AB:88
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:c3:fe:1c:cf:4c:02:35:49:f3:78:77:78:6c:d9:73:77:
cd:63:c7:cd:32:d1:a7:57:02:60:ef:bd:c3:b7:25:e6:23:4c:
6e:0a:4c:46:2e:40:2b:34:ef:ca:d9:e1:8b:7e:2f:d2:5a:5b:
aa:6b:88:8f:3a:a9:b3:e3:1b:e6:68:b8:64:6b:4c:4c:f5:de:
fe:4a:82:7c:9d:f3:bc:22:9c:43:1f:74:9f:29:c0:b1:1f:07:
a4:d2:73:a7:a7:f4:67:0e:40:af:a7:74:50:41:32:13:b8:8d:
b7:8c:35:9a:03:ed:43:3b:34:70:46:9f:95:3a:eb:a0:4c:c2:
0b:5e:3e:8b:9e:22:cf:15:3f:11:44:68:71:a7:42:bd:78:ec:
b2:a1:59:f2:ec:db:44:73:cd:be:b0:6c:a4:74:1c:21:ff:1d:
89:20:bb:2e:06:b9:6d:64:f9:85:94:63:c3:05:0e:74:b4:1f:
6d:bf:0d:23:98:ff:04:e8:62:be:3d:98:65:09:13:7c:65:0b:
5a:bc:37:9d:3d:1b:4c:02:b1:df:61:e3:9a:d1:26:7c:05:fc:
8d:f7:4b:e6:24:06:19:68:fd:c3:8c:4d:0f:77:ba:f0:0e:49:
24:ff:23:c2:91:fa:3f:ca:ee:0e:e8:66:9d:5b:d6:00:c2:b4:
a4:c8:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:25 2024 by rpki-client on console-ams.rpki-client.org