Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: cVNody3MmUP581CaDxTEEhlYJnChGq3tgkSSi0/lnXc=
Subject key identifier: BE:5B:61:10:22:0A:9A:09:85:A3:80:3E:35:AA:6E:DD:B6:EC:EF:46
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019405D7FB770A708292ABBA9DC0AB51D4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0B53
Signing time: Fri 27 Dec 2024 02:00:28 +0000
Manifest this update: Fri 27 Dec 2024 02:00:28 +0000
Manifest next update: Sat 28 Dec 2024 02:00:28 +0000
Files and hashes: 1: 5TF6S1D3zDhA0CA5RX-mADYxSvo.roa (hash: J02Ss+YmPJGaMux/dUHZxtCfOWnAeSJeqVXWdQIrZm4=)
2: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: vjmk2QWKgMQPrZgY8Iz2VrT9nrnFwphvQ5vSPx48MZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d7:fb:77:0a:70:82:92:ab:ba:9d:c0:ab:51:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Dec 27 02:00:28 2024 GMT
Not After : Dec 28 02:00:28 2024 GMT
Subject: CN=be5b6110220a9a0985a3803e35aa6eddb6ecef46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:83:19:69:ab:21:91:dd:e3:c9:c3:63:43:
38:0d:51:c7:14:d4:76:38:3b:13:9f:ab:51:d6:09:
fc:91:92:1e:3f:07:07:a0:bd:92:d7:00:d0:41:9b:
a6:c5:a3:b7:8d:42:8d:f2:cc:29:0b:4f:db:ae:8c:
44:95:71:36:3f:62:b2:78:e6:71:f5:e5:77:48:b3:
9a:0e:39:68:55:86:35:35:db:b1:21:b4:af:74:1c:
9d:ed:51:e5:46:e3:32:5a:44:62:66:81:27:89:67:
ea:f8:f6:0e:f6:40:18:e4:26:82:f3:a9:d2:b0:c1:
d0:19:06:77:2d:81:49:38:38:b9:a9:91:60:b7:37:
78:c8:08:e0:be:af:22:4a:65:0c:37:61:2e:3a:c0:
0b:f8:26:3d:20:dc:6f:cb:ba:45:3f:80:4a:e3:e6:
ac:c4:d4:a1:e4:d9:17:48:84:38:14:32:6c:3a:da:
2f:61:7b:72:bb:fe:95:f0:e4:f7:7a:04:28:a8:bd:
63:ec:c2:d5:58:4c:88:b7:45:56:a1:51:e0:ba:63:
04:5c:1a:55:d3:c5:cc:c4:fc:31:37:ea:f9:35:ac:
35:1b:25:6b:45:ac:0e:87:a6:b3:89:6e:6d:83:54:
43:7d:0d:9d:c4:51:4e:86:04:9c:d7:a6:e6:ce:87:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:61:10:22:0A:9A:09:85:A3:80:3E:35:AA:6E:DD:B6:EC:EF:46
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:7a:32:f6:66:7e:cf:ee:7f:71:25:84:b0:70:f6:42:9e:
ca:d2:84:72:e8:2b:1c:b7:d4:7b:38:bc:92:e9:cb:24:97:c3:
e2:c5:d9:15:4e:3d:c1:b4:c4:4b:3d:90:b9:5c:bb:76:15:12:
8a:db:7a:52:2f:e8:92:dc:b9:37:7e:ae:cf:77:cd:d9:f3:de:
c3:03:e0:07:41:62:6a:07:5a:86:c5:09:a2:9a:b8:46:f4:4d:
cb:a0:c5:53:c5:6e:89:90:d8:a5:18:7d:2b:3c:b1:1f:11:d2:
7c:87:40:03:12:2b:dd:04:47:05:60:64:ad:bf:43:fa:41:d9:
ff:94:c4:e1:24:7d:8a:71:a8:a7:3c:33:3c:ad:99:d9:f5:37:
df:b4:af:db:53:ea:ae:82:06:c9:5b:8f:c6:f8:f6:a9:4a:5d:
37:08:03:ba:b0:6f:9c:4d:45:7d:e5:52:af:6d:c9:86:d5:f1:
1e:80:5c:51:76:dc:cb:50:f3:9f:93:7f:b9:b8:c8:8e:a7:11:
11:60:04:0b:7d:84:40:d9:13:09:4b:02:a2:46:32:3c:e4:91:
71:ef:37:39:54:c3:fd:24:0a:16:aa:cc:18:57:53:ac:6f:da:
08:22:5d:88:1e:50:64:a6:1a:b7:e1:ec:aa:e7:e2:67:df:e9:
a6:30:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:06:15 2024 by rpki-client on console-ams.rpki-client.org