Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: BwlXF7x/QG2SYDWuBuWcBGQAg0gvmt5TDUfa6QtavI8=
Subject key identifier: DA:C7:BD:7D:8C:EF:86:13:C8:90:FE:AB:1C:45:D6:84:40:91:1F:2B
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 01940645B47FB3EAE26E7D35B2A2161FD2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 04:00:18 +0000
Manifest this update: Fri 27 Dec 2024 04:00:18 +0000
Manifest next update: Sat 28 Dec 2024 04:00:18 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: W8WLaZQu098r8Pxc6iInJe4XNZ14JlfLcIbaxa26oRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:b4:7f:b3:ea:e2:6e:7d:35:b2:a2:16:1f:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Dec 27 04:00:18 2024 GMT
Not After : Dec 28 04:00:18 2024 GMT
Subject: CN=dac7bd7d8cef8613c890feab1c45d68440911f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:27:bd:55:74:28:a7:ca:4f:26:c4:57:ea:
34:46:88:16:04:6a:87:7a:06:0b:c5:03:c8:af:88:
80:a1:d3:ed:38:e9:04:62:3b:38:a3:aa:18:ec:22:
fa:7f:cd:a8:9d:00:9e:0d:de:c9:91:af:b2:7a:01:
a0:c3:07:03:17:31:60:9d:f6:5b:93:ed:88:b0:03:
68:86:db:44:75:55:68:21:ff:df:b7:1b:b3:fe:aa:
9e:e5:7b:d4:d5:bb:29:b6:54:01:40:7d:16:22:49:
b2:3f:fc:24:33:a4:1b:b9:20:ab:ce:f1:c4:e0:b3:
01:53:e5:70:ce:bf:d2:e1:c3:a6:1b:0a:f3:70:3d:
58:f5:66:dc:2b:13:c2:43:f2:9b:3e:8d:69:22:9c:
37:40:72:65:e4:09:cd:f1:e5:3c:bf:f6:52:99:ba:
f2:4f:89:a2:9e:74:d6:2d:62:2a:72:5c:44:c0:36:
3d:98:36:b7:e5:0c:f4:0b:17:50:ba:e7:ce:71:3e:
80:38:24:ee:c3:71:1e:73:7f:f0:87:bb:d1:4c:50:
8c:f4:f3:74:8e:37:0e:dc:2a:a0:93:18:58:3a:71:
69:0a:0b:74:3e:8a:60:51:1e:49:c6:e2:87:90:f5:
a9:9f:06:70:e6:49:b7:ef:62:50:cd:09:cd:51:91:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:BD:7D:8C:EF:86:13:C8:90:FE:AB:1C:45:D6:84:40:91:1F:2B
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:10:1a:10:77:b9:fa:23:ac:36:f5:91:27:f5:dd:9f:c7:
f9:7e:73:be:c2:d4:23:ac:eb:de:a4:51:0e:f9:80:72:7a:60:
39:99:b7:ba:6a:ad:49:7a:ca:cc:2b:6c:7a:36:16:da:ce:fb:
92:3e:b9:88:2d:94:99:49:48:ab:eb:15:73:93:74:fa:4e:e8:
42:0a:11:e5:c0:5f:ee:0b:4c:67:1d:5b:60:86:a8:d7:1c:8f:
90:3f:be:0c:38:67:dd:56:9f:84:00:47:fb:b0:1a:ff:66:31:
04:7a:72:b1:49:d4:85:a5:ac:3a:b0:0c:c1:6f:e3:44:bd:50:
ad:a4:ae:a5:9a:3d:3f:21:b0:7d:01:c1:99:21:85:cf:b7:1f:
c0:fc:48:41:14:ea:42:51:73:00:f0:b8:43:e4:94:a4:92:32:
a3:31:ee:62:b2:19:f2:3f:07:80:59:c2:0c:3b:a4:11:5f:be:
92:72:28:96:a0:b1:6f:86:d2:71:c0:45:ce:fe:76:31:bc:92:
88:2e:ae:fd:c4:6c:d5:57:8a:16:d9:1a:62:8b:e4:e6:78:91:
ca:0a:66:89:e3:a8:e4:fb:70:23:03:9c:4b:d9:87:1b:8f:b8:
81:8b:c8:c8:16:a6:70:0f:37:08:29:ae:99:97:e9:35:1a:b9:
32:54:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:44:28 2024 by rpki-client on console-fra.rpki-client.org