Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: Xa518O3jgK2H4JhywxvX/aVgG63NTsM3Ji2gwZNGG8A=
Subject key identifier: 23:E9:81:13:C8:C1:4C:63:15:C2:EC:B9:70:2E:1E:32:6A:28:23:FA
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019358E54A2B754CA16B3D22416768998413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1375
Signing time: Sat 23 Nov 2024 12:00:41 +0000
Manifest this update: Sat 23 Nov 2024 12:00:41 +0000
Manifest next update: Sun 24 Nov 2024 12:00:41 +0000
Files and hashes: 1: EIRufWVz_xAgtGxgJic8RpbEF5s.roa (hash: 7rREy5SzhUholSqXfSbGtdnY/wqAtE2ABm8ZjOowxg0=)
2: In4p6m9YaY3dXO3bhATWwrfdP_k.roa (hash: 9Pf+6KKcwMGMLTPZ/98WmYnvNks+0PiF5+khycATk8U=)
3: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: FukRdomhKuMClriSoMk8WuoOsvExg0Z/0ks4TyDItCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:4a:2b:75:4c:a1:6b:3d:22:41:67:68:99:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Nov 23 12:00:41 2024 GMT
Not After : Nov 24 12:00:41 2024 GMT
Subject: CN=23e98113c8c14c6315c2ecb9702e1e326a2823fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:32:89:fe:32:85:b0:52:63:c5:dd:cc:1b:
ac:53:aa:67:09:05:ca:7e:85:f0:ba:6a:8a:79:a4:
03:73:d9:a7:d9:7d:60:5e:5c:d0:dc:73:95:78:eb:
02:16:a3:19:ba:b3:6e:81:1e:78:35:d6:b4:fd:e0:
5e:e0:42:25:cc:f0:67:04:3b:15:3f:18:00:d9:94:
dd:74:5f:96:22:f4:0e:51:42:96:c7:fe:82:1b:ba:
d4:0f:80:f1:df:3d:d5:c2:47:53:1b:9a:2c:50:eb:
d7:bf:c3:e8:df:b8:bb:c5:9f:ed:0a:e6:02:8d:19:
33:53:87:ff:2c:15:1f:b6:59:39:ba:30:7b:f7:9d:
1f:0b:bd:1c:59:57:3c:ee:0c:a7:8c:03:06:e8:9d:
a7:01:00:21:9a:c2:54:b5:10:7b:ac:a2:52:10:08:
0e:39:cc:32:c7:fe:18:e4:28:fc:4b:f4:bf:8f:eb:
c6:54:72:07:6d:e3:8e:0a:c5:13:5b:4a:3c:ce:7a:
df:82:bd:dd:0e:b4:1c:2c:41:2c:01:f1:46:ce:14:
c5:cc:ab:1e:88:3e:0b:3f:d9:b5:e3:6f:96:dd:8b:
c1:e8:64:31:01:44:de:10:2b:01:82:31:d0:28:87:
43:ea:79:67:3e:ea:74:03:5f:82:bb:f5:f0:2f:ad:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E9:81:13:C8:C1:4C:63:15:C2:EC:B9:70:2E:1E:32:6A:28:23:FA
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:44:14:c8:d3:28:94:9d:82:af:23:52:d5:d8:ce:6e:61:14:
33:d0:d1:54:c1:3c:eb:39:49:e1:54:53:fc:5f:c6:a3:f5:27:
b1:58:3a:f5:d3:58:9f:38:f8:99:ae:39:48:7d:c3:41:75:cf:
8c:9c:98:21:af:99:23:fd:31:8c:18:02:4c:18:93:90:de:ee:
d2:6a:91:83:cb:4a:af:b7:77:eb:2a:8b:a3:f0:e8:e4:dd:b0:
bb:ba:02:67:50:d6:17:94:45:4c:16:45:69:cb:8f:a1:3c:3c:
70:9b:c1:f4:a3:f8:c4:46:20:f4:a1:65:b0:25:37:e0:9c:27:
75:fa:28:5c:6c:a5:d9:d5:42:78:27:7b:da:0d:ae:22:17:4d:
a0:20:aa:06:bc:3b:6a:ba:bd:e0:6c:4b:65:d7:06:18:93:65:
90:3b:65:d7:14:90:4f:92:9d:c0:5d:30:be:b9:f1:af:77:bc:
e0:8c:cc:2e:85:53:d5:72:3f:f8:cf:80:18:79:c2:dd:99:49:
f0:aa:16:f3:4c:34:9f:d9:07:ba:91:8c:c2:7e:0c:d2:5d:3f:
33:a2:3c:9d:13:fe:ce:d9:3f:6e:df:47:12:09:8d:b0:42:b8:
18:10:79:4e:18:e1:e4:4d:15:e5:23:87:92:85:fb:6a:28:fb:
2f:99:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:17 2024 by rpki-client on console-fra.rpki-client.org