Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: Hnjf9JcEIWZjp8zOzQwI6p2GL6Sk/zScPSCgrdd3MnU=
Subject key identifier: E2:EA:A0:E7:EC:7B:BF:1C:4C:45:04:C1:32:1E:FD:B7:D8:F9:06:A7
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 018F1DB6C206F1D1A2BC41577C1BAE39F0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 1144
Signing time: Sat 27 Apr 2024 04:01:07 +0000
Manifest this update: Sat 27 Apr 2024 04:01:07 +0000
Manifest next update: Sun 28 Apr 2024 04:01:07 +0000
Files and hashes: 1: FNR-NbkiO3IGrbiS05Li-q90I_A.roa (hash: 46NmnE4BhbEYCqMz2FNs4jZrElca2DEiAAX3PL4X5YY=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: Jl1lsiCytnm24SX2xN5+AOqiXFaNe2mf8AgVr/qh2Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1d:b6:c2:06:f1:d1:a2:bc:41:57:7c:1b:ae:39:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Apr 27 04:01:07 2024 GMT
Not After : Apr 28 04:01:07 2024 GMT
Subject: CN=e2eaa0e7ec7bbf1c4c4504c1321efdb7d8f906a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:ff:44:3b:ba:f8:df:e5:0e:2a:6f:e2:7f:
d7:a5:ec:2f:96:9d:bc:b0:20:27:99:9f:70:74:dc:
9c:87:92:21:af:75:ea:70:4a:0c:33:ea:83:1d:4e:
f5:2f:19:5f:13:d2:d4:e7:95:24:5d:64:07:a9:47:
a0:3d:00:67:0a:0b:a8:2c:46:95:75:af:5b:02:67:
1f:6c:15:91:fb:53:1d:87:8f:51:f3:c0:8f:0c:ad:
b6:26:ec:ee:5e:bd:aa:8f:9d:8b:c5:d1:b6:9d:1c:
33:bf:f8:98:eb:64:08:c3:31:71:6a:e7:50:5c:d4:
90:98:3f:4f:36:e3:f7:06:3d:77:42:48:5a:b6:59:
da:1e:63:96:8b:a8:bf:ff:cc:c6:da:09:49:55:04:
9c:ba:35:29:6b:de:57:0c:ae:b8:11:29:7a:c1:a3:
15:9d:b5:ae:4a:09:84:2a:06:52:a8:14:0b:ee:a1:
92:7d:6a:09:28:4b:e3:1a:f1:fd:c8:0a:83:f4:c3:
1c:3f:89:a3:b1:36:94:cd:c7:fa:69:13:04:a7:8c:
3c:42:b4:6d:a3:58:74:7c:5d:3c:83:5c:a3:36:cb:
be:c1:08:44:0b:37:c0:0b:23:7e:0a:33:7a:e8:8c:
bd:4f:b8:9c:4c:90:55:f7:d9:8f:d3:7a:43:05:a8:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:A0:E7:EC:7B:BF:1C:4C:45:04:C1:32:1E:FD:B7:D8:F9:06:A7
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:80:9e:36:37:34:e7:ef:91:f1:c1:36:b7:c8:80:db:92:
17:a0:29:84:b5:3e:67:27:12:98:3c:90:6e:b8:4d:12:fb:65:
ba:0c:02:91:f0:c5:e7:6a:ce:a4:d5:ab:c6:5f:90:7e:1c:6b:
09:81:43:f0:db:8f:11:d8:ab:22:d5:20:ea:63:7c:2e:9c:9d:
18:db:a6:ff:c8:76:5f:eb:30:7d:29:4b:1d:35:e0:b8:73:09:
6d:62:0f:7a:4a:dc:32:b9:92:94:2e:68:14:13:b3:a3:c6:1a:
7f:b0:f9:a3:f7:0a:92:71:75:62:60:4b:e4:1b:b5:5d:e8:1d:
1e:ec:40:64:bd:1a:f2:66:ee:90:3b:87:99:8d:f7:da:89:5c:
53:4f:4a:09:80:bc:56:e2:06:c6:5e:0b:29:89:1c:b1:74:0c:
36:3e:eb:5c:d2:ec:ae:81:7d:7f:5a:c8:77:65:29:0d:fa:87:
52:27:1e:f1:31:e2:e0:57:79:ae:34:52:d5:2e:e3:ca:0e:63:
42:0d:bc:92:22:3e:d8:b2:f8:f0:8d:b8:f0:c3:8f:01:be:a2:
5b:03:10:f8:b3:f7:e9:9a:4e:48:a1:c5:8a:37:c5:be:eb:96:
1b:23:de:8d:2e:2b:8e:37:63:16:b0:8b:40:71:1c:e8:56:94:
88:f0:df:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:44:24 2024 by rpki-client on console-ams.rpki-client.org