Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: xn02DDDOrfN9TXaHJfLsHPUvUbCtYNt3lqvFZlqmyz4=
Subject key identifier: CC:72:4F:51:10:05:56:CE:9C:AF:86:CD:95:3B:C2:51:26:1F:05:8B
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 0194078F7FCF57999321A7E611CB9F5104BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: 4D
Signing time: Fri 27 Dec 2024 10:00:32 +0000
Manifest this update: Fri 27 Dec 2024 10:00:32 +0000
Manifest next update: Sat 28 Dec 2024 10:00:32 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: ThI8+62W7gMPJC12RRrSxJhvcAP8KVeP1JQaee8yu5k=)
2: Ir82nJAUNwbu-AoKyYfR_v_HXhk.roa (hash: JjYNWRDUkhf9ZkOB/xLLCe/MdYBpHsNFj7eMvAriwf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:8f:7f:cf:57:99:93:21:a7:e6:11:cb:9f:51:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Dec 27 10:00:32 2024 GMT
Not After : Dec 28 10:00:32 2024 GMT
Subject: CN=cc724f51100556ce9caf86cd953bc251261f058b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:64:f9:e9:2d:a1:12:86:94:53:9f:e5:1b:
55:4d:62:1f:bb:2a:d9:05:9a:c1:7b:1c:b5:f8:19:
2f:81:b7:73:b9:bf:b4:6c:c5:da:fa:ce:67:6a:bf:
83:45:ad:6f:65:3e:9e:15:cf:7d:56:c8:c2:3b:c0:
dc:bf:6b:2c:b9:84:65:55:03:99:83:c5:cc:dc:1d:
67:e1:07:b2:b4:6c:61:b4:e5:5c:8e:4c:49:30:d5:
62:6d:67:d1:cb:b2:18:7d:09:44:62:f3:86:2e:01:
f1:c5:f4:6b:37:18:12:5e:96:c7:89:78:17:9b:66:
f8:6c:24:42:af:7a:fb:08:4a:13:46:03:5a:8a:9b:
6f:fc:da:25:88:46:89:e2:20:6b:29:40:f7:58:ac:
f2:33:81:2e:31:85:fd:71:8b:eb:be:5e:3e:ad:a2:
cd:f2:b5:77:33:cf:29:65:e2:83:7c:a7:57:3a:66:
22:e0:53:82:48:10:b2:77:ca:e2:a6:21:ca:9c:88:
59:b7:2a:e5:6f:42:5c:68:a6:c0:1f:c7:4c:21:83:
4c:82:14:73:d3:3e:6d:8e:f2:4c:48:fb:cb:57:fe:
f2:33:19:cb:12:14:6f:4a:7b:d3:45:33:13:01:cc:
4c:ad:27:f6:11:4f:52:69:26:a2:68:3d:11:1a:54:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:4F:51:10:05:56:CE:9C:AF:86:CD:95:3B:C2:51:26:1F:05:8B
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:7d:17:64:c1:e6:c2:26:35:75:9e:31:53:14:29:80:30:
0e:17:5b:c4:52:e0:a8:17:b1:9d:d9:ae:b2:6d:6f:bc:ea:68:
1b:1f:05:ea:a3:45:d1:07:a5:ba:cb:ff:30:6e:a4:20:ce:55:
32:08:e6:29:15:5d:64:bd:94:e8:b1:77:86:59:53:f8:0d:99:
43:85:54:ba:09:69:d1:a0:41:ce:0f:e8:b5:34:c3:a2:a3:9b:
25:58:dd:ee:8c:6e:4f:89:a6:fc:9b:72:60:a0:ca:c6:d7:29:
1c:bd:ff:de:01:d9:82:b0:be:04:72:ed:8a:d1:69:88:63:b4:
6b:fa:c4:76:8a:e5:1f:ab:3a:49:af:5c:12:6f:bb:50:60:87:
ad:fd:7e:a4:6d:2d:12:ba:54:27:ed:ef:a1:eb:0b:d2:e8:f0:
f3:6f:bd:55:ea:16:b3:71:5d:8f:ad:c4:ae:38:08:2f:e1:56:
c9:38:ae:88:fc:b8:01:44:a5:1b:5d:e4:27:40:f7:b7:0d:ae:
1b:3a:ce:4c:89:1b:69:24:2d:e1:42:d6:32:b9:a7:b2:95:05:
5c:68:19:bb:38:31:e8:6b:75:67:21:c8:09:15:fd:12:00:61:
e9:05:75:21:73:ef:3a:10:b3:18:af:72:8e:b1:82:ed:ae:d1:
7d:53:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 13:15:31 2024 by rpki-client on console-ams.rpki-client.org