Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File: fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier: oCPxsEsMV61giZSxCb/WHKzUz0OHwP3kEdAPg/JyOiQ=
Subject key identifier: A3:15:8B:A7:B5:79:86:B9:44:7B:B4:FE:65:FE:3E:C6:F8:7E:BD:9A
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019352E2E1608D1BC450E136AF8243F4110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number: 0963
Signing time: Fri 22 Nov 2024 08:00:20 +0000
Manifest this update: Fri 22 Nov 2024 08:00:20 +0000
Manifest next update: Sat 23 Nov 2024 08:00:20 +0000
Files and hashes: 1: 0tcYIhhBDYHvJCh1OGkPLq5ZH5E.roa (hash: 9K0evXxfi6W1Ennbh7d4PbdvVvDBmZQY+14EcsupiwU=)
2: QO8hI5AlziMoxX9vxNEO1mLo3Wo.roa (hash: zSuCHI2yIlhURMCCWUPs1npsVcx0mJz7OdyPFxZdq6s=)
3: VEdtdCNNJakpGAhlMr_A-z6csCc.roa (hash: qyFpzZ/QjZxhSsqJPen1ra9efC1FjNfBknnxFFpQpp8=)
4: cJv7FApnKFTFkE-Ij2tA2zbH-qM.roa (hash: GJ0JiJ2Tc06wq3K0S6yGrMA63wzZVsfcMIB8DISnOr4=)
5: e6dF8KcXe_cJKJPN65fLx3Bb3kA.roa (hash: DSaWXMwSxoAcB2W7vAOqgKMFSL+jUVE4Bv2jY4ylI0I=)
6: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: fC4egefWwAo6HxLr8DFMSxOnNtaGHJteGpEK0F4VMOw=)
7: kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa (hash: tVAUPEFZqNJGQp7qspso2WUxFR7Tztlar7CyCAxAMLI=)
8: lKnB-dwdKFedEmFULnp35ClP_1I.roa (hash: X26wI6Wl+4ao0Tgc3dI3I46YSui7tH0+Vvj9sS/7OKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:e1:60:8d:1b:c4:50:e1:36:af:82:43:f4:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Nov 22 08:00:20 2024 GMT
Not After : Nov 23 08:00:20 2024 GMT
Subject: CN=a3158ba7b57986b9447bb4fe65fe3ec6f87ebd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:99:86:83:0f:ed:58:a8:4f:5d:70:52:67:
40:04:a0:b7:67:0f:f4:d0:51:d5:21:4e:3f:c2:5f:
65:6d:d7:13:83:ca:47:df:ed:c5:3e:2a:4a:9c:7c:
1a:98:cf:f6:03:9b:39:f9:51:7a:25:b0:40:bb:c0:
ad:54:bd:3f:9e:e1:5d:e5:94:bf:c2:af:0d:f0:93:
60:cc:4f:05:fa:ef:3a:ac:1c:a3:e8:3c:27:73:f5:
0d:f6:19:5c:28:de:55:17:d6:e5:b4:83:87:be:85:
05:28:ff:28:6d:49:7d:1c:8f:ee:b4:2f:3e:02:01:
6b:c2:30:86:9d:c9:c3:6f:99:13:2a:f0:97:3a:1a:
29:1b:7f:74:20:31:9a:10:d1:12:88:9e:13:3f:7e:
bd:9a:10:71:14:53:aa:6f:b7:85:7d:2f:f8:5d:03:
08:26:05:80:59:eb:f6:3d:f9:d1:2c:a8:56:ec:e4:
56:b9:5c:87:dc:af:4c:9a:51:09:17:67:15:24:58:
a6:81:5a:60:c1:63:30:47:58:3c:99:d3:21:8a:9e:
0d:ca:90:6d:17:98:f1:a8:3a:d4:28:80:53:64:2a:
0c:d2:57:da:80:e5:83:f7:bb:32:8a:e3:c8:b7:3a:
08:03:8b:d8:76:47:1c:19:2b:d8:50:1f:2f:3c:3d:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:8B:A7:B5:79:86:B9:44:7B:B4:FE:65:FE:3E:C6:F8:7E:BD:9A
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:66:ae:6f:e7:29:9b:10:65:a7:57:d0:a8:ca:1b:9f:5d:60:
78:79:a9:44:89:5e:3f:99:ff:28:35:f8:e8:1a:03:2e:26:f2:
92:75:ad:d5:80:da:7b:54:41:22:05:de:85:c3:32:f1:32:84:
4f:82:6c:7b:12:5f:72:16:93:db:8f:7b:32:d0:9f:8d:a1:e5:
6d:0d:eb:6c:84:8d:72:99:36:d5:35:92:8e:4f:f7:06:f0:bf:
73:7c:b5:e9:4e:3f:d3:04:fe:f3:43:0d:2a:8e:03:f7:30:83:
34:44:68:e4:c6:3f:e6:aa:78:c0:59:d6:04:93:90:34:30:08:
de:f0:e8:70:a2:17:d8:ce:e9:55:86:b8:65:f9:2f:ac:8e:53:
57:3f:07:c5:74:1c:31:cd:db:18:e2:4f:4e:5a:a7:2a:45:db:
39:7f:7f:9b:44:bc:78:48:6e:ac:01:8e:2b:22:bc:5c:53:e9:
56:b8:14:d1:23:f0:23:4e:85:08:3f:94:79:ee:ea:8c:11:dd:
c3:bb:96:4d:cf:bd:96:c0:24:75:1d:8e:1e:3d:4c:55:8b:a2:
f3:7f:87:3a:62:ff:83:85:06:bb:14:9c:ba:33:8a:78:95:89:
15:59:77:db:ae:16:a1:45:0f:99:c1:29:d8:41:90:ec:a6:57:
75:e9:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:26 2024 by rpki-client on console-ams.rpki-client.org