Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
File: 9S8g0NOy78W8l6R7d1vYuheU-eU.mft (raw, json)
Hash identifier: YwO+Z3cWBk2rpRwmsb1wGiWhj+AvpC4MDrK6L7NgtMc=
Subject key identifier: 8A:95:D5:2F:60:E1:F7:6E:A7:1B:99:A5:7A:30:10:C3:EF:22:F2:F3
Authority key identifier: F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
Certificate issuer: /CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Certificate serial: 01940646F0A4EC58FB907C3A11E503DB940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 04:01:39 +0000
Manifest this update: Fri 27 Dec 2024 04:01:39 +0000
Manifest next update: Sat 28 Dec 2024 04:01:39 +0000
Files and hashes: 1: 9S8g0NOy78W8l6R7d1vYuheU-eU.crl (hash: spCNKB1RcTU/6wAVvf4OqnNSEjwf6fH+e/yWSj1dETw=)
2: uZiaTq3yiY7hzYTIlesT-SvL720.roa (hash: LDhJ9qoMfxOR7ri1o/2qvYW9OU0kSR0croF/qKMk4lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:f0:a4:ec:58:fb:90:7c:3a:11:e5:03:db:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52f20d0d3b2efc5bc97a47b775bd8ba1794f9e5
Validity
Not Before: Dec 27 04:01:39 2024 GMT
Not After : Dec 28 04:01:39 2024 GMT
Subject: CN=8a95d52f60e1f76ea71b99a57a3010c3ef22f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:85:0b:58:cc:00:16:97:af:83:75:60:70:
3a:29:cb:00:c6:70:55:e8:a4:53:2f:57:64:96:94:
e5:e6:8c:2c:1e:31:b8:dd:63:3f:4c:d5:8d:7d:16:
46:bb:ba:33:4f:8d:6d:3f:a6:8c:6a:08:76:9c:b7:
49:fb:d7:75:d7:44:d3:ac:00:6f:d4:8d:32:73:5a:
bd:57:ff:d3:45:22:1f:c8:89:50:3b:9a:cd:eb:a5:
8b:25:f7:04:ce:79:b0:78:76:51:12:35:28:d2:7a:
c2:a7:16:31:5e:00:22:7e:9b:8f:6d:c7:1f:db:e2:
ce:37:49:fb:c5:fa:23:fb:e6:c5:fb:0c:46:f1:4f:
c9:9e:46:89:fd:e5:4a:a4:db:85:21:71:5f:06:ba:
4f:ea:f8:bb:2c:74:27:c9:23:22:6d:cc:3f:f0:3c:
dc:8c:9c:fd:64:ea:7b:27:a1:9b:54:3d:4e:c2:a9:
b5:b2:6c:aa:d5:db:db:d7:24:06:4a:b3:98:f9:e6:
3d:8c:e3:ce:c3:24:6f:dd:fc:31:09:b3:0c:75:e5:
ed:90:df:19:46:e1:e6:d9:e6:30:a4:f1:4a:25:ea:
ba:13:91:00:0e:c8:20:fc:b4:d7:75:db:b7:78:9f:
e5:25:dc:33:4d:a0:c6:04:18:9f:84:fb:c8:44:90:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:D5:2F:60:E1:F7:6E:A7:1B:99:A5:7A:30:10:C3:EF:22:F2:F3
X509v3 Authority Key Identifier:
keyid:F5:2F:20:D0:D3:B2:EF:C5:BC:97:A4:7B:77:5B:D8:BA:17:94:F9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S8g0NOy78W8l6R7d1vYuheU-eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c6ec68-225f-4d95-9340-a1f74586387b/1/9S8g0NOy78W8l6R7d1vYuheU-eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:05:67:79:d3:c6:d1:3c:b1:a7:26:13:59:65:e8:1e:5c:2f:
aa:2d:dc:9e:34:8e:74:12:d2:ac:96:5d:b8:26:34:3e:10:f6:
4f:60:22:8d:cc:3e:49:83:47:d0:eb:23:54:b4:8c:b4:73:5d:
36:f0:79:75:6d:86:54:dd:97:61:e6:97:60:e2:90:08:9b:c2:
ea:ac:91:2f:aa:d2:38:ff:6a:9d:da:a3:e6:bd:47:1c:0c:95:
55:7e:0f:01:ec:3e:9a:87:92:9a:d6:94:8c:dd:30:cf:20:36:
e2:53:7a:f2:77:07:54:6f:22:0a:ef:5d:8f:cd:8c:21:57:58:
a7:05:4d:ac:04:4b:b8:8e:4d:8f:01:62:f3:13:82:e3:13:a4:
fc:35:3b:8b:a1:c0:61:e0:db:6c:67:3e:93:ac:df:ed:e8:2b:
99:92:58:7e:cf:8a:e1:0b:79:70:d0:32:a0:12:2a:9d:25:da:
24:90:13:55:c1:fc:a9:8a:31:08:0a:fd:db:d3:93:d8:a4:72:
46:48:e2:30:0b:fa:74:d2:91:2b:8c:ee:44:a7:b6:fc:c8:07:
cb:35:1d:77:60:fb:a0:37:bc:c1:00:43:9a:30:28:69:a0:88:
bf:3c:df:2c:0d:c5:ef:a8:cd:d0:83:c5:1e:5a:f0:2b:a6:d3:
19:69:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:47:30 2024 by rpki-client on console-fra.rpki-client.org