Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
File: FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft (raw, json)
Hash identifier: r+TYBUByC2rfesZ95ERqo5fHUXVXYIr+d0dah96pXDU=
Subject key identifier: E5:EB:01:02:AD:C3:5A:EE:3D:D3:DC:24:0B:FE:EE:E1:B9:29:74:03
Authority key identifier: 15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70
Certificate issuer: /CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
Certificate serial: 018F2C85745F81682189851F51DF77868806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
Manifest number: 06FA
Signing time: Tue 30 Apr 2024 01:01:34 +0000
Manifest this update: Tue 30 Apr 2024 01:01:34 +0000
Manifest next update: Wed 01 May 2024 01:01:34 +0000
Files and hashes: 1: FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl (hash: PAYvwlZsbD8ue2GRWi03/G8Iazdj8XAIp0H+u4v0Pks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2c:85:74:5f:81:68:21:89:85:1f:51:df:77:86:88:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
Validity
Not Before: Apr 30 01:01:34 2024 GMT
Not After : May 1 01:01:34 2024 GMT
Subject: CN=e5eb0102adc35aee3dd3dc240bfeeee1b9297403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:e2:31:10:02:7b:24:0c:9d:5b:04:bb:64:
e2:dd:69:4c:c7:c2:d6:a0:78:e6:21:d0:a3:e2:82:
b0:80:cd:67:b0:31:bd:0f:54:be:cf:8d:74:be:aa:
cc:35:9e:c1:e3:7d:51:8a:03:de:d1:26:ef:52:41:
07:04:6b:34:9c:c2:bb:e4:ae:cd:43:96:47:72:0d:
69:18:77:b1:7a:b6:74:3e:e2:93:66:b2:b9:73:46:
18:81:85:69:a0:a9:8e:17:73:3a:2a:c4:55:86:5a:
d0:5f:4b:24:b0:29:cd:35:80:16:34:0e:cd:77:6c:
3f:2c:58:90:0a:6d:94:79:32:7f:a9:bc:4d:b5:6c:
ae:4d:f8:89:fa:a8:50:ef:8c:8b:03:68:d9:19:f0:
c2:24:38:cd:5b:84:f3:05:d9:8d:33:3d:bb:80:12:
06:4b:7c:f2:c0:12:2d:f3:8a:a4:d6:e8:73:09:a5:
ca:df:49:3f:fc:84:7a:99:9f:9a:c0:99:9a:4c:fd:
56:8d:ae:c9:e2:5f:e9:3e:e4:2f:66:6c:69:08:29:
d6:1a:77:04:dc:e1:f3:71:99:bc:7c:c6:d0:4f:a2:
0c:6a:8b:25:eb:fc:ae:e6:1c:84:f3:d7:bc:e0:e1:
05:8a:e0:2e:14:b6:b6:46:eb:a8:ab:12:ba:cb:76:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:01:02:AD:C3:5A:EE:3D:D3:DC:24:0B:FE:EE:E1:B9:29:74:03
X509v3 Authority Key Identifier:
keyid:15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:38:4b:88:4e:4e:72:d2:b5:66:36:cc:4a:b3:84:42:25:
f9:9d:2e:45:a4:37:96:ac:14:eb:35:5f:d0:ac:56:9d:a8:33:
f3:e3:1a:1b:13:28:f7:ac:7d:c1:c4:61:27:3c:3a:ee:e0:21:
4e:08:69:08:37:37:41:0a:b5:1f:9e:0e:86:55:cb:e0:d9:cd:
69:f7:92:fc:c5:4f:cb:36:e7:4c:ca:cb:49:92:02:73:58:17:
0e:e6:9c:c4:49:39:fe:9f:49:47:e9:3e:c2:9f:4b:9a:62:0f:
64:38:f4:93:ab:82:81:7b:23:c0:d9:b4:53:ec:4c:6d:28:a8:
28:b9:58:64:43:2f:41:66:7f:a7:77:a7:30:93:a1:6d:03:7c:
93:43:d2:91:36:aa:66:40:f7:ca:ea:0e:b6:93:f2:5c:26:b4:
1a:4c:df:43:76:b3:03:c0:e3:0b:ec:50:26:ef:66:df:56:14:
ef:17:57:1a:a1:81:1b:fd:25:e1:47:1b:35:d1:1a:f4:c8:5d:
14:5f:45:3b:c5:95:30:d0:b3:80:5c:f4:6e:a9:40:f3:30:81:
d7:42:90:88:51:83:a3:c4:bc:ed:28:02:30:bf:bc:f6:ac:43:
3a:12:29:84:04:56:28:07:e5:d8:9f:08:23:bf:69:e5:06:66:
d8:d2:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:51:53 2024 by rpki-client on console-fra.rpki-client.org