Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: W/GD9BVAiGkQdpZRi9orecZ6UhJZJbFKJn0SHsDpON8=
Subject key identifier: 99:96:F9:F2:87:E0:1F:61:EA:5F:70:4A:44:7D:F7:60:25:47:72:5C
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 01935879B1FED8228CC83AF53D64C6C24F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:03:10 +0000
Manifest this update: Sat 23 Nov 2024 10:03:10 +0000
Manifest next update: Sun 24 Nov 2024 10:03:10 +0000
Files and hashes: 1: JBsdjR6EaRUe1nWX2oRJLGdZW1E.roa (hash: jV2tttaxs6Vqu54glfL9YAxjjrL/uEsAzx39OEXML3s=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: vEpgRLZNUz0h2lAihOBQQ+2LrVIWG1VLtQBw6AXtMsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:b1:fe:d8:22:8c:c8:3a:f5:3d:64:c6:c2:4f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Nov 23 10:03:10 2024 GMT
Not After : Nov 24 10:03:10 2024 GMT
Subject: CN=9996f9f287e01f61ea5f704a447df7602547725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:98:ed:cd:c9:7a:e3:cb:c5:dd:07:c2:8a:
b0:e9:2d:71:41:aa:33:77:34:f1:16:51:4e:80:7b:
d7:35:7e:6d:42:9d:7a:a8:b2:d0:a8:ee:e2:48:94:
5b:57:5d:60:f9:83:d6:2a:1c:f0:15:c5:28:a8:1f:
a6:c3:64:fa:93:bf:e1:7f:84:ae:85:3f:bc:21:91:
e5:75:1e:64:a7:d4:d1:b2:aa:74:15:28:a5:d6:3f:
21:68:68:56:aa:5f:9a:48:75:b0:0a:51:c8:40:a0:
93:b8:31:0c:3a:53:21:24:12:38:53:d2:30:7b:ac:
ad:2d:f6:ad:1a:ca:ec:df:c9:a4:50:8d:e9:47:ff:
69:75:e2:4a:d9:cb:a2:a3:e8:e4:6e:75:fa:f6:c0:
3b:28:34:74:14:e9:70:4b:2d:2e:9e:8b:7f:de:41:
23:e9:14:3b:05:9f:e0:f4:85:47:ce:e2:23:76:73:
71:6a:71:1f:1c:bf:bf:5a:52:73:bb:6f:5c:5e:81:
09:04:50:5c:2a:9c:02:5b:9a:3a:fe:d7:f7:b1:ba:
33:cb:3f:34:26:98:73:0b:25:d5:62:b9:58:2f:11:
e6:d9:46:45:c3:a7:4e:b4:85:5d:f4:b7:90:e1:4d:
42:62:9d:20:d6:d6:7a:8f:85:0b:cb:94:c3:fd:89:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:F9:F2:87:E0:1F:61:EA:5F:70:4A:44:7D:F7:60:25:47:72:5C
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a7:8f:bc:07:ec:62:16:6e:d0:d1:b0:2b:65:bf:2e:41:8b:
94:0b:43:58:da:9e:b5:a1:29:fa:b6:bb:ce:d8:4b:e2:58:d4:
81:81:d3:05:75:28:3f:a4:28:90:00:2e:f0:41:d3:20:79:17:
70:95:b8:b5:a2:9c:68:bc:94:a4:9b:29:af:75:f9:ce:92:12:
d8:6d:1f:dd:f2:ca:99:5f:e2:d4:c7:23:10:29:51:d7:d8:e0:
1d:b7:40:84:b4:fe:7b:c3:23:34:ce:22:ff:72:57:69:7f:5d:
64:b0:07:5f:75:e5:e0:df:23:22:70:0f:97:e2:c4:90:5f:c3:
0a:96:f6:57:fc:75:b4:ac:01:f2:86:6e:80:ce:51:34:57:fd:
1a:3a:07:b7:5d:c1:fe:65:02:0d:86:0f:f3:7c:e4:b0:9d:cc:
89:1c:22:6a:45:5c:7f:3a:fa:7d:f3:32:32:dd:9c:bb:0c:72:
f1:2c:bd:e1:07:ca:79:a4:6e:da:57:7a:62:ec:42:f4:e7:26:
00:6f:c9:45:27:db:4a:f0:fc:32:b4:a8:ac:71:60:26:97:c5:
c6:90:e4:28:17:e8:e1:b2:e3:ce:91:4d:b1:e3:00:64:18:66:
31:c2:ec:8c:9a:66:73:d3:90:15:03:16:7e:b9:31:2b:bf:8d:
94:ff:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:40 2024 by rpki-client on console-fra.rpki-client.org