Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: UQwQPQIVYN6NB49CkbRiEBNWW3o1HjCIdmXx3cCKVCI=
Subject key identifier: 79:45:C4:2E:D0:E4:A2:E7:F6:C1:61:FC:35:9E:53:02:8E:16:7A:62
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019355084071B31DCD218BC7B7448479CF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 18:00:24 +0000
Manifest this update: Fri 22 Nov 2024 18:00:24 +0000
Manifest next update: Sat 23 Nov 2024 18:00:24 +0000
Files and hashes: 1: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: INis7lrBGqm0dxsIRIyyZORiv9FWHkDglcCe9Ezpsrc=)
2: I2NPlwydWTmxtRVP34z3UdZgYmA.roa (hash: Z2mCxU62fX1QKZbzZSzPn6/OxyMUCkie38R31rhPB0Y=)
3: fW_ac2HrHs2dR2iMtoAg-dRczd8.roa (hash: GWhuecpUR7ZdSte9BhR7+382/ZsxfmeF3SkAkuYacfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:40:71:b3:1d:cd:21:8b:c7:b7:44:84:79:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Nov 22 18:00:24 2024 GMT
Not After : Nov 23 18:00:24 2024 GMT
Subject: CN=7945c42ed0e4a2e7f6c161fc359e53028e167a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:87:00:f6:4c:f5:b1:13:aa:9c:7a:ce:45:
a9:0a:bb:b7:3d:48:35:b1:52:42:a0:e4:6f:b9:87:
f4:d1:b7:39:0b:da:85:54:81:7e:c5:9c:07:e3:0f:
25:c5:14:b7:e0:85:fa:2e:c9:4d:9b:1a:5e:d7:3e:
6a:53:03:39:82:45:cc:eb:1a:7a:f7:d1:06:7e:d5:
b3:3c:fb:9b:a6:d9:39:79:a7:69:fd:ab:04:c6:ce:
f8:09:c4:b1:cd:64:77:e9:70:e7:da:54:71:ec:49:
de:84:af:8a:70:01:ab:6f:e8:81:7b:0c:67:37:33:
0a:2c:58:09:0c:fa:20:a0:1e:e9:60:12:b6:8b:d2:
cc:23:e0:d5:af:7c:98:a5:6d:1f:e8:2d:9b:36:e6:
9b:ee:82:b4:11:da:c4:21:ca:9b:31:eb:50:1e:80:
94:b7:c9:22:69:29:88:93:6d:8f:63:b5:4c:e6:23:
d5:79:f8:55:4c:01:c3:b1:a9:6b:77:e6:5c:15:f6:
cb:45:c6:8e:bc:e4:b4:2d:8b:4b:b5:34:c4:7f:34:
10:5a:03:51:5c:eb:c9:d9:e7:78:b6:0e:26:ba:4c:
7f:5d:93:10:5b:a8:f2:cb:73:c3:dc:5d:2a:94:60:
43:be:46:58:7b:ff:8c:9e:af:fc:b6:ff:b4:c5:c2:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:C4:2E:D0:E4:A2:E7:F6:C1:61:FC:35:9E:53:02:8E:16:7A:62
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:58:a9:89:6e:f1:14:b8:31:76:7d:87:f5:7a:d4:e0:04:
53:f3:6e:86:ab:ec:b7:4c:7d:a7:3d:85:e4:70:aa:b0:ad:44:
2a:82:cf:d9:0a:f6:b2:f6:37:6d:66:49:a4:cd:69:63:fa:4e:
af:64:e1:5c:93:7b:97:95:d0:3d:5a:1d:2a:ca:60:97:72:06:
5f:83:d3:70:0c:13:74:0e:42:17:07:2f:b7:c0:37:97:22:c2:
52:ae:64:24:73:27:2b:93:0f:a5:84:a8:1f:09:58:e2:0d:ae:
07:18:6e:b0:62:6b:88:8b:ba:c9:04:65:88:6f:f5:5a:51:d0:
d2:ba:1e:09:03:06:b5:26:94:1a:b2:ec:e4:23:f6:11:5c:f1:
17:44:65:49:79:48:74:d1:1b:88:13:e1:94:a1:d2:e8:ae:0a:
76:16:88:a2:8f:d3:8a:e8:85:52:60:43:eb:40:72:cd:62:11:
90:fb:d7:1b:cc:23:b1:64:e3:6b:0e:9b:67:2c:2f:5f:04:42:
f1:b2:71:54:73:b1:25:25:06:48:91:78:83:a6:c2:36:09:ff:
2b:a2:ff:a7:48:71:cf:a9:0c:99:de:b0:8b:ae:15:4d:27:46:
c4:ae:30:15:e9:42:aa:e4:76:35:3f:6e:2b:07:fb:81:e1:2b:
fa:67:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:19 2024 by rpki-client on console-fra.rpki-client.org