Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: 7Jd+JwRkKGKUSH+R+1Qc7IIXBcLDM2vLKRVeDZjhenQ=
Subject key identifier: CA:B0:6B:6B:62:02:F8:09:D4:6D:26:09:47:88:08:DF:DC:96:22:44
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 0191FA10C2566797D9716B89CCAA27771C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 12BD
Signing time: Mon 16 Sep 2024 09:01:27 +0000
Manifest this update: Mon 16 Sep 2024 09:01:27 +0000
Manifest next update: Tue 17 Sep 2024 09:01:27 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: +n9z6qEwKyaD/E6uKqrMl5ITAoqmwSTNOJcH3e6p2jg=)
2: ksmr9XcQYTChg1tow_fB1UhgnwQ.roa (hash: CzsRXJ//ITu8APFy1Gf0X43idXjOtUT3v8VL2zBCih8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:10:c2:56:67:97:d9:71:6b:89:cc:aa:27:77:1c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Sep 16 09:01:27 2024 GMT
Not After : Sep 17 09:01:27 2024 GMT
Subject: CN=cab06b6b6202f809d46d2609478808dfdc962244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:43:4d:7e:dc:eb:89:41:bc:16:74:bb:33:
e8:7d:ad:ec:c4:36:76:16:ef:e6:14:85:ca:63:ce:
0a:87:c4:40:21:fc:42:94:47:a9:21:4f:62:e2:a6:
38:83:58:fe:64:eb:9c:21:af:e7:c7:05:42:be:d4:
1b:8d:4d:6c:f7:42:65:41:2d:03:75:4f:a8:14:50:
84:39:72:87:c6:b9:30:56:ac:c8:4b:ff:26:70:33:
3b:cd:8f:78:32:00:ba:33:68:2b:8b:13:f1:55:64:
32:9f:61:67:24:66:21:e4:84:2c:2f:95:4d:1b:3f:
5a:3f:0a:33:58:5a:81:cd:d2:66:92:a0:2e:96:2c:
cc:74:12:29:7a:6b:6c:fb:09:94:d4:14:6b:d4:7b:
e6:ef:81:91:bf:ec:d4:a9:b5:53:e1:1c:d5:9e:5d:
a4:5a:45:37:c9:40:d8:5f:d6:d1:36:40:6b:aa:41:
c0:cb:e5:90:82:de:a2:61:1e:e7:2a:31:14:98:fb:
9d:82:0b:93:79:47:f8:cb:1c:0c:89:4d:1a:01:2d:
32:a4:06:e1:62:f1:84:7b:43:df:04:74:bd:0e:ae:
e5:88:57:89:fd:00:04:cd:45:4b:45:28:a1:7c:45:
61:ed:65:bf:a9:1d:20:8e:b5:b8:ee:83:5f:3c:b0:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B0:6B:6B:62:02:F8:09:D4:6D:26:09:47:88:08:DF:DC:96:22:44
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:69:4b:42:9a:b2:c0:3a:44:cc:ea:0e:6f:9d:b3:c3:b3:
d6:42:40:5b:40:07:58:05:3f:f9:0a:23:ae:87:79:0b:0c:86:
be:95:cd:a7:06:a2:6a:f9:5c:a2:73:96:61:17:bc:c5:89:85:
9b:1a:b0:df:c8:5d:7b:1b:b6:e6:21:b5:19:80:5f:d5:9a:2c:
64:ee:a9:29:4a:a9:4c:2c:30:5a:a5:08:82:f5:00:89:74:bd:
b7:ed:a6:6f:7f:0d:58:90:7c:6d:b9:8e:35:b7:7b:e0:ee:81:
bc:85:22:fc:6f:08:3d:81:ac:12:2d:08:97:cd:be:c4:cb:79:
76:32:2f:44:73:ab:0a:e0:df:50:f6:dd:d0:fb:f0:e9:a4:70:
a1:bb:d0:77:9a:3d:e4:9c:17:59:02:ee:34:92:15:ba:d6:cb:
ea:18:42:20:12:84:4f:e3:0e:ff:be:22:fd:59:70:78:c2:52:
f5:97:06:86:3c:66:8f:9c:f0:20:56:33:4f:06:c4:a4:7d:a9:
1a:a9:28:b2:c2:ac:d7:e4:ef:17:7a:be:05:a5:b7:b8:d3:8d:
50:07:f8:90:81:8b:31:ec:08:af:12:47:b4:cc:84:7b:ef:0e:
69:5c:36:9f:31:04:15:cd:79:ee:b1:22:b5:ce:2f:ba:68:2c:
69:7b:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:02 2024 by rpki-client on console-fra.rpki-client.org