Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: vkoioKapDCQZYa0/DZMzeX2yswbkhi6CF0ix0bMK9xA=
Subject key identifier: 45:0D:1A:41:7D:60:F4:27:5A:72:74:F4:E1:31:FD:31:85:CB:AD:7E
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019406EAB071CA1F655B7B310B0090440733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 11E7
Signing time: Fri 27 Dec 2024 07:00:31 +0000
Manifest this update: Fri 27 Dec 2024 07:00:31 +0000
Manifest next update: Sat 28 Dec 2024 07:00:31 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: 5B9ilDWfI8F1iLHASER4ePAF5iG/THJ7jyLCnUReDLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:b0:71:ca:1f:65:5b:7b:31:0b:00:90:44:07:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Dec 27 07:00:31 2024 GMT
Not After : Dec 28 07:00:31 2024 GMT
Subject: CN=450d1a417d60f4275a7274f4e131fd3185cbad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:46:a3:9b:a2:6b:46:b3:f7:43:8a:9a:e2:
e5:27:ab:0f:93:8b:be:83:a3:a9:eb:c4:51:92:e9:
ee:c6:94:89:fe:e3:ae:37:33:5d:41:d8:45:92:60:
2e:7a:cf:49:69:b6:0f:44:72:c6:b0:a6:88:0a:2f:
66:ab:57:ad:d7:6d:47:69:24:38:87:5b:a2:6f:da:
e3:45:04:3f:2d:54:f2:d3:e4:7b:a3:b3:b4:b9:09:
05:26:3a:e1:25:d4:e5:08:3d:b5:52:f5:47:a0:71:
f0:e3:92:ca:e4:f2:84:a8:10:87:3d:dd:49:f1:c4:
42:5e:6d:31:d9:f5:c1:b7:cb:e5:58:39:d9:04:5b:
02:e9:5d:1d:cb:0d:09:da:40:cc:d1:a0:0c:47:4a:
66:c0:79:88:2f:a6:06:8f:9e:01:c1:4c:5c:eb:cd:
70:a1:05:3e:da:16:db:0b:2d:cb:04:43:02:fc:6f:
71:cc:a7:39:21:f3:1f:96:14:97:74:27:71:95:bb:
84:c3:e3:79:b0:a1:71:d2:78:b7:ff:4d:28:87:fd:
52:d1:a6:a0:bc:6a:cf:29:3f:bd:49:97:29:95:4d:
c7:22:5b:b7:6f:26:9c:93:67:49:43:5b:4c:ce:b1:
39:0a:bf:63:e7:b7:57:6d:b3:22:48:ff:74:d3:f1:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0D:1A:41:7D:60:F4:27:5A:72:74:F4:E1:31:FD:31:85:CB:AD:7E
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:0e:c9:dc:7e:79:9f:db:35:5f:69:2b:65:a3:9b:e3:a6:
48:51:a6:dd:44:5c:f9:af:48:be:2e:a7:c3:6b:8f:64:55:3f:
7c:98:c8:c0:78:3b:b8:97:44:24:45:a8:c9:9a:3e:21:e6:a1:
83:2b:8c:08:ce:06:88:fd:b4:8d:f8:7d:27:e2:1f:58:ff:58:
e1:a2:12:f7:04:b1:20:c1:ef:0e:9e:2a:80:2d:6d:0f:3e:5a:
bc:ec:c7:03:98:08:ae:7a:f9:ce:c1:c9:52:66:dc:d0:6a:64:
3d:c1:a3:54:14:16:6e:7c:df:51:4d:5c:14:5d:0e:cd:b5:87:
aa:28:0e:9e:42:56:6d:27:62:41:1f:b6:23:53:03:97:92:55:
4c:cd:05:d2:64:a3:9b:bc:bc:c5:35:ec:4f:99:d8:8c:35:38:
4b:2a:29:92:bf:45:9f:a0:13:c2:fe:dd:08:0e:c9:bc:a0:69:
29:98:65:52:73:c7:69:9b:39:3f:a9:1a:db:7d:ae:00:69:c1:
20:8e:7e:e9:9f:c5:44:7e:8f:76:a1:d3:b5:c0:03:13:e6:1b:
e5:a7:e1:f3:01:63:d2:8c:2f:0b:c2:f0:20:5d:76:12:18:bd:
79:15:43:31:fc:75:a8:8f:21:6c:50:d5:92:cf:dc:56:06:8b:
68:8a:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:40:20 2024 by rpki-client on console-ams.rpki-client.org