Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: SI/nCxxl5jBUvd5kj2XopcGaypZckBBonEsbwKcqheg=
Subject key identifier: B5:2F:66:9B:68:9D:F0:DA:58:38:30:15:2D:A2:0D:72:3D:04:15:30
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01936A46BB8585E1DFD73F24C4836FAE70CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0A88
Signing time: Tue 26 Nov 2024 21:00:40 +0000
Manifest this update: Tue 26 Nov 2024 21:00:40 +0000
Manifest next update: Wed 27 Nov 2024 21:00:40 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: BVAgao2GmoarhifcfTLZ4WpzcUNsAum0cQEak7r0GZI=)
2: JoRjS4XhzhUr3abo1B93rPjtJZY.roa (hash: vqr9zuUfaRi+yK/ej6/XSUYmDxkFZKjWGIJy+GiuneQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:bb:85:85:e1:df:d7:3f:24:c4:83:6f:ae:70:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Nov 26 21:00:40 2024 GMT
Not After : Nov 27 21:00:40 2024 GMT
Subject: CN=b52f669b689df0da583830152da20d723d041530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:fb:68:35:da:2a:86:ef:cb:8f:ab:dd:56:
69:01:cf:a1:34:07:cb:e5:1d:14:4c:7e:40:f6:99:
3b:69:dc:0f:13:6c:0d:a7:93:b5:24:05:32:ed:f6:
7b:97:c8:53:0f:72:c8:3d:b1:94:cc:2c:2d:30:7a:
74:14:6a:70:d9:b9:2c:f9:d8:f3:33:b1:ed:56:dc:
6b:2d:81:97:c6:2b:d8:15:5d:a0:75:f2:e7:33:fb:
7b:da:1a:bd:f9:4b:a0:6c:2c:f1:f8:46:b7:bd:cf:
12:1d:be:0a:bd:e2:7d:ce:56:82:3c:73:6f:b0:d2:
0f:a0:a2:15:12:bd:a1:a6:5a:79:b3:db:aa:ae:80:
5e:ea:2f:cb:89:e4:a4:d2:15:39:e3:39:b3:49:b7:
08:31:be:61:27:0f:7f:09:95:17:4b:ec:5c:59:d7:
67:4a:f5:90:5b:9f:6f:2c:06:eb:67:f7:83:48:43:
d0:96:ab:87:70:c6:ab:f4:98:6d:a7:b8:07:9f:d6:
2a:d5:2c:eb:02:74:79:84:7e:9d:1b:bd:1b:14:1c:
35:da:54:fe:a8:81:c5:0e:f6:99:57:93:0d:fd:96:
66:53:f7:02:ee:b3:f9:cd:bf:11:e2:0d:0c:88:44:
10:0a:70:80:dd:36:36:60:da:67:c9:24:9e:0b:cb:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:66:9B:68:9D:F0:DA:58:38:30:15:2D:A2:0D:72:3D:04:15:30
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:f2:f1:ac:c7:28:30:26:1a:c5:5e:e9:4f:92:b2:94:f6:
e7:a6:85:5c:7d:fe:76:12:06:df:b4:5e:15:9e:83:0d:20:82:
e1:41:87:ee:5a:13:08:09:77:84:c3:e9:8d:90:0a:e2:22:91:
4e:01:f2:1a:fb:b3:5a:e8:51:7e:e6:0d:71:8a:bd:21:35:70:
a6:84:b4:a6:fa:32:f9:d0:c2:b4:ba:5c:ba:b8:29:fd:2c:ee:
f1:bd:0c:e7:f6:c7:43:bb:e9:ad:a3:3d:69:b4:d9:71:f0:fa:
4a:1f:d9:0d:02:fe:8b:0a:82:76:a9:c7:9a:9f:7f:2f:88:35:
41:c6:43:4a:29:e6:ce:46:30:16:2a:cd:4c:79:90:42:3f:04:
36:f9:4e:74:8b:26:fe:f6:a6:41:c1:f5:7c:b1:83:e8:67:f9:
f0:6b:30:75:d0:76:6c:f1:e8:f4:7b:9e:62:05:ec:fd:31:49:
be:42:1d:51:eb:65:db:4b:bc:8a:48:36:85:8e:5a:8d:ac:62:
2f:a4:00:26:14:c6:bc:dc:ec:79:49:f0:49:84:6a:ae:3a:51:
50:20:67:5b:b8:83:3a:cc:0c:0f:bb:28:ff:8b:a1:60:61:d2:
7b:02:ec:aa:0b:03:68:0b:74:1c:6d:cb:0d:36:5b:77:78:33:
97:2a:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:58 2024 by rpki-client on console-fra.rpki-client.org