Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: xFxhgs4TkRCMxtTCmoGGpmTCbmk3eBJWImhNIlgfgD8=
Subject key identifier: 81:08:FF:C1:D5:72:3E:80:85:3B:05:FA:9B:6D:27:5E:2F:C1:46:F4
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019238B9EE794CD433BB984FAC4D827F0B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1271
Signing time: Sat 28 Sep 2024 13:02:42 +0000
Manifest this update: Sat 28 Sep 2024 13:02:42 +0000
Manifest next update: Sun 29 Sep 2024 13:02:42 +0000
Files and hashes: 1: irpX9F4M9qr2DkzfyhOPzpoXv_k.roa (hash: OPC+8pzefijUpkB9ZP8BqnZTxH1TxU3/Dss4k8sB4M0=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: mLUgsHEe/j57yDWgvAtBSos6O43BpK5EGA87w5LCr/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:b9:ee:79:4c:d4:33:bb:98:4f:ac:4d:82:7f:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Sep 28 13:02:42 2024 GMT
Not After : Sep 29 13:02:42 2024 GMT
Subject: CN=8108ffc1d5723e80853b05fa9b6d275e2fc146f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:57:2b:9c:a6:6c:55:15:ea:c4:ee:47:82:
54:53:52:d5:ff:10:e3:5b:23:3d:2c:08:0d:4b:05:
1b:a2:eb:20:5c:d3:e3:cd:c2:fd:cd:a4:fd:ce:a8:
c9:3e:dd:2b:ef:98:4e:59:ba:7f:99:4a:3f:6d:88:
3f:5e:36:62:e6:de:95:5d:29:89:87:ab:a8:b1:14:
1d:60:12:95:0e:f6:b6:f9:07:71:6e:5b:7d:20:4e:
a0:77:b2:92:05:6f:5d:88:89:5f:53:20:c5:19:17:
2b:d5:9c:7e:95:73:84:33:a5:fb:94:76:d2:b1:9f:
6d:ef:48:ba:ec:2a:2b:e2:07:a2:a1:c5:6d:43:aa:
71:bc:ad:91:4b:dc:0a:e3:a5:8a:a3:41:62:94:8d:
80:b5:0a:b2:bb:93:c9:3e:ee:24:ad:65:5b:a1:48:
5b:7a:dd:31:f0:33:46:df:61:a3:ad:c4:de:54:c4:
7a:09:62:8a:df:78:d2:de:fb:cb:9c:71:11:72:b0:
04:a6:ae:54:3e:46:c0:4e:ba:3b:24:6a:d8:65:77:
78:f5:07:20:b1:e7:a2:41:ae:c6:19:50:1d:a5:7f:
6d:eb:55:dd:06:b2:f0:18:c2:68:28:87:89:4f:7a:
0d:ec:d2:cb:23:b9:f4:8c:36:26:10:72:ab:35:c8:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:08:FF:C1:D5:72:3E:80:85:3B:05:FA:9B:6D:27:5E:2F:C1:46:F4
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d3:ba:48:5f:5a:64:c0:74:8b:fb:78:b0:5e:44:64:e2:b5:
94:57:f2:9b:51:63:cb:9c:c1:b7:7c:6c:92:36:2e:04:4e:a7:
54:66:fd:dc:a0:9b:31:ac:2f:76:23:12:5c:97:a1:e7:2d:cf:
61:96:28:29:7d:a4:0d:93:5c:a7:c9:6b:f2:13:3b:2f:9f:56:
0f:32:bb:79:51:8b:9d:6b:f5:7e:86:6b:49:10:e3:d6:43:60:
c1:cf:f8:49:5d:f3:e2:48:b3:dd:25:80:32:d6:3d:2e:fb:67:
64:f5:3a:f0:92:ba:0a:f3:e5:7d:0a:0e:61:88:bc:95:7d:3f:
ce:f6:6b:2f:cb:9d:f1:cb:45:87:80:f4:34:e3:c6:8d:9d:6b:
84:37:5d:fc:af:c4:59:c0:03:e3:c0:d2:9d:4c:a1:19:bf:10:
82:d3:ee:a6:49:8c:c8:b9:62:05:84:98:fb:22:32:f2:da:01:
33:35:fb:c6:77:bf:d6:44:04:c4:37:13:e3:13:3a:f6:e7:9c:
82:1a:61:93:15:08:5b:ce:af:72:8f:be:28:24:c8:1e:eb:c8:
60:64:3f:a4:b3:f7:2f:e4:46:a7:18:f6:a5:36:b3:2a:41:32:
b9:07:b0:fe:8c:65:2c:53:85:dd:1b:d0:b3:40:bb:fa:14:a9:
e4:da:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:42:34 2024 by rpki-client on console-ams.rpki-client.org