Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier: fjBw4nWxv+ERY5ROKdobYTPm40ADz44CCECBMgbgIYY=
Subject key identifier: 13:8E:DB:0E:FC:24:04:A3:D4:83:ED:CE:A7:AD:EE:E8:49:32:95:BC
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 01940645D75054301001C39BFD3AB4A1B720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number: 058A
Signing time: Fri 27 Dec 2024 04:00:27 +0000
Manifest this update: Fri 27 Dec 2024 04:00:27 +0000
Manifest next update: Sat 28 Dec 2024 04:00:27 +0000
Files and hashes: 1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: NUn3oOxJ4/K/+8FppZaeq6IqARmxD+1+/vYwXobj9AY=)
2: HtTkzCCVSPuYoECQ2y8k2YBEpe0.roa (hash: Qff+CIaNo8njCQx3jCm8+ol4dSGKrVA9tmKJXSZKsWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:d7:50:54:30:10:01:c3:9b:fd:3a:b4:a1:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Dec 27 04:00:27 2024 GMT
Not After : Dec 28 04:00:27 2024 GMT
Subject: CN=138edb0efc2404a3d483edcea7adeee8493295bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:a6:00:8c:9a:24:a2:fe:f8:e6:87:5a:4d:
09:19:9e:63:ec:d1:9b:12:cb:f9:af:ab:7c:9e:b8:
91:30:3e:19:05:bd:7a:8c:9b:2b:6c:70:ca:c6:fd:
b3:35:38:88:06:26:cd:27:b7:b4:6e:41:c7:52:4c:
7a:c5:e3:b9:e1:17:22:d4:37:4a:8e:26:cc:c5:46:
dd:71:b4:3d:a5:a9:e7:28:eb:32:8a:b5:de:8e:21:
ee:70:f6:b5:ff:3b:d0:2a:8d:74:58:d0:43:47:cc:
02:a1:d5:44:25:92:80:5e:a7:90:77:91:f0:38:0e:
7e:4b:85:f6:57:9d:90:b3:34:c2:00:ae:f7:01:f5:
35:ca:51:94:34:72:1d:ad:7b:a2:42:5a:1f:c3:b4:
43:37:21:26:5c:9c:2f:a0:87:f0:75:00:cc:7a:9c:
75:c8:04:0a:9a:76:f0:b1:a5:b3:3f:f3:03:f6:04:
5b:53:9c:c3:21:75:c2:e8:8a:04:ab:20:b9:c4:58:
82:4f:8e:30:c2:34:4f:41:cf:ab:aa:f9:da:86:fc:
76:e8:ad:53:b4:24:e4:4c:60:27:4f:8d:40:47:ad:
fd:c8:c9:58:5b:55:95:44:01:06:ef:e8:e4:3c:eb:
50:e8:6e:b1:00:55:2b:7b:37:1c:c8:98:e0:95:b8:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:DB:0E:FC:24:04:A3:D4:83:ED:CE:A7:AD:EE:E8:49:32:95:BC
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:4d:a8:0a:06:36:e0:99:9a:27:c4:c4:0d:0c:65:0f:3a:
d8:8c:1e:ce:7f:f6:e8:d9:79:58:75:6a:99:c5:fa:e7:10:3b:
a8:ba:d7:45:df:ed:96:d5:36:95:fb:64:65:3e:91:e7:66:6e:
cc:15:a7:b7:f5:9d:59:fe:a0:33:28:c9:52:e5:a8:26:36:70:
85:21:64:34:de:85:60:c2:bc:18:d0:9d:95:ae:39:56:a8:7e:
ed:b9:b8:3a:84:ac:fa:10:4b:70:23:18:84:00:bc:85:22:19:
f4:79:da:9c:14:cf:80:32:20:52:63:0a:8b:08:32:0e:6e:be:
0d:70:7d:0c:94:20:22:ab:83:04:ea:3e:f8:3d:56:97:bb:3e:
20:59:74:f8:86:c7:d7:3f:d9:a8:3f:6b:c5:a6:2d:be:6d:24:
a8:39:19:dc:ef:7c:86:19:0a:78:78:ab:52:ff:c6:8b:6c:36:
f8:9d:53:8a:a8:76:ed:d6:e3:c7:c2:1a:57:29:24:ba:7d:d8:
7a:ed:6e:13:5c:79:08:c2:31:b4:f1:8c:de:48:56:70:d4:9a:
3e:16:1b:bf:0b:8e:93:17:6b:6e:db:48:43:08:15:e6:0c:9d:
f5:7b:77:f5:0d:b1:13:83:da:ff:2a:fa:01:fd:f3:c7:64:77:
92:5a:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:39 2024 by rpki-client on console-fra.rpki-client.org