Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: IxeHQRb9ONryIl+s/+46+/ACYsqIE+Pv4haSVItl7eQ=
Subject key identifier: 9A:FA:70:B6:71:44:D8:94:1F:36:97:79:E9:97:6D:B3:92:05:99:2D
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01935651A3527F1E25A61826404C0BD1F5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1217
Signing time: Sat 23 Nov 2024 00:00:10 +0000
Manifest this update: Sat 23 Nov 2024 00:00:10 +0000
Manifest next update: Sun 24 Nov 2024 00:00:10 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: hcT+wBRrl0bqKxFrqCiGGA4pQ01M5tZe7zOtJsRfnMA=)
2: Fmx-J-g7wmUTxiowx3_SlKT9cfQ.roa (hash: lUkOPMbvT6+UgLx+XCEW7mzvcb9c8GDzY+Z5WCvvSO0=)
3: ZVb4XNMxk7lVQgLw6bR0gSmc4Ak.roa (hash: L1IrvePBw0+BLNThDP5YI3pv+tgRsZVnB5HD7lP01T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:a3:52:7f:1e:25:a6:18:26:40:4c:0b:d1:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Nov 23 00:00:10 2024 GMT
Not After : Nov 24 00:00:10 2024 GMT
Subject: CN=9afa70b67144d8941f369779e9976db39205992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:2f:f3:a2:58:f0:04:7c:e5:87:2b:d6:88:
18:cf:8e:45:1c:37:a2:f1:9d:4d:7c:03:70:e2:a1:
80:90:10:5f:69:f8:57:f5:0b:07:56:22:31:e6:c6:
43:ae:74:31:93:84:f5:20:ef:28:f7:94:61:90:f8:
14:ef:ab:c3:6e:57:32:d9:da:a4:aa:47:64:2a:3b:
00:21:05:76:07:42:ed:d8:d0:b0:82:80:0a:87:e6:
3d:3a:fb:b8:86:12:01:69:6c:1a:0c:35:33:fb:a8:
11:24:28:f4:d3:cf:20:a8:b5:8d:4e:cc:4f:45:88:
17:21:56:4f:24:c9:7e:bb:02:2a:79:19:a2:c4:b5:
ea:4b:b3:60:c1:9d:21:e6:ef:f5:91:a3:3b:47:4a:
10:9a:c8:4a:f1:95:8d:96:01:d0:2a:19:7d:2f:a8:
d7:f4:85:a1:bc:50:96:1e:d5:a1:b8:20:29:d0:dd:
88:24:91:33:47:7c:72:ab:52:7c:0e:14:11:54:e6:
02:68:18:3c:2c:e0:49:6f:f7:d0:cc:0f:f2:3d:8d:
71:92:55:80:b5:28:32:7f:b8:52:7c:b9:29:5c:9c:
de:c9:05:e2:c7:8e:84:d2:6b:02:b0:a4:d9:72:3d:
d3:60:a6:5f:05:33:57:b0:92:a9:14:79:8d:76:f8:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:70:B6:71:44:D8:94:1F:36:97:79:E9:97:6D:B3:92:05:99:2D
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:f2:0d:fe:39:dc:78:0f:80:76:0d:0d:9d:12:49:64:5a:
2e:83:80:3f:4d:19:96:5e:12:4d:44:09:21:95:32:91:06:50:
86:cb:21:e1:7f:09:87:38:de:82:7d:c2:76:c4:6f:70:7f:73:
14:b3:d9:37:76:0a:c1:e3:af:7b:93:a2:4b:2c:ec:3a:7f:d6:
65:2f:32:88:b1:6b:59:8d:7e:9e:91:5b:f9:33:cb:89:16:8c:
2f:f8:41:05:f9:ef:8f:fe:a8:18:58:8a:74:1c:bd:59:80:05:
0e:ca:42:04:cd:37:e9:d8:9e:46:d8:fd:cf:50:79:d2:45:77:
c1:52:6a:aa:c9:99:f3:72:9c:20:7b:2d:99:48:84:17:0f:c6:
e8:b6:ce:a7:eb:80:25:98:fb:0a:95:1b:19:90:85:95:44:8e:
2b:ef:8e:58:22:96:c1:d9:12:cd:9e:78:20:1a:80:ca:ec:ac:
92:e8:80:31:3e:cc:34:e6:4e:c6:aa:bd:31:66:00:16:31:3b:
71:bc:54:63:0c:eb:7f:b5:33:29:bb:c2:38:41:57:cf:61:05:
8c:b6:da:1a:53:32:02:44:0c:9b:dc:2f:f0:12:98:15:08:76:
91:ab:b1:dc:a8:02:a1:62:7f:95:87:3b:40:e6:9a:d7:b3:f3:
94:98:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:14 2024 by rpki-client on console-ams.rpki-client.org