Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: 3wPn/IoKzd2sW86wMyek9/RcrL0VoI9NDUbC7y+nd1o=
Subject key identifier: 4B:DB:0D:57:0B:7E:9E:B0:89:6C:7F:28:E2:B6:7D:01:72:6C:35:99
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 01940647FCD505827D825A79AB518F7D748C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 06EC
Signing time: Fri 27 Dec 2024 04:02:48 +0000
Manifest this update: Fri 27 Dec 2024 04:02:48 +0000
Manifest next update: Sat 28 Dec 2024 04:02:48 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: NIBQKOke6j2aa+7REs7OCUGIslbPmYLYwNyURbMLTUA=)
2: awnl9XiKuu9j3tKnu9qaIIdiCnI.roa (hash: 7jjlWXHPen+OV9Ao6qJem18ucqiXa3Jz2AcxNEsWTqA=)
3: p04K3WYTMOqWR1kmBzCP1x4muVE.roa (hash: 9/L3n4c7XKE0BT/9Iay7ren7cZ9Rv4un68IZJ8T27H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:fc:d5:05:82:7d:82:5a:79:ab:51:8f:7d:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Dec 27 04:02:48 2024 GMT
Not After : Dec 28 04:02:48 2024 GMT
Subject: CN=4bdb0d570b7e9eb0896c7f28e2b67d01726c3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:20:54:4b:de:29:75:cc:5a:b3:a2:d1:d6:
7d:94:54:c3:97:18:83:dd:75:e6:63:3b:d4:17:e4:
2c:1f:ed:8c:48:d9:40:8d:8d:fc:84:8c:d2:43:20:
ca:69:e2:0a:4e:e1:80:19:7e:ab:26:db:ec:df:2f:
dc:71:a4:bc:15:ee:11:6e:3e:bb:04:51:7a:90:0e:
e3:bc:ff:bf:a7:04:99:fc:5c:21:4f:fa:31:f9:21:
02:a6:9e:ba:74:c4:34:a6:6e:c3:7f:89:62:37:16:
b8:94:25:a1:65:17:00:2a:56:e2:b8:7a:b8:10:1e:
8a:b4:3d:58:91:d2:15:cf:80:ab:55:f3:c0:5e:cd:
e7:4b:b9:c3:d2:87:2d:4f:d4:70:b6:19:3e:b7:54:
3f:7e:9c:96:24:a7:f7:54:97:3f:53:c9:14:58:c8:
c0:91:3b:d1:26:1d:a9:b8:8c:aa:11:54:53:7f:e5:
5d:2e:28:e3:93:c1:22:73:4b:e2:eb:d7:d9:c8:61:
04:fd:0c:c6:cd:2a:d3:3a:e1:4f:ff:5f:74:43:0e:
d4:db:b3:32:ee:8e:6a:86:0e:45:46:38:83:21:04:
1a:49:e7:fc:3e:bb:4c:2f:45:52:64:a6:58:9f:64:
bb:a1:a7:17:fd:22:50:ef:26:ae:16:53:66:27:21:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:0D:57:0B:7E:9E:B0:89:6C:7F:28:E2:B6:7D:01:72:6C:35:99
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:53:d9:8b:3f:1b:94:65:3d:62:e0:d9:08:36:52:f9:80:
82:8c:16:9b:a6:68:6c:10:ce:76:f3:f5:7b:a7:58:06:68:75:
77:3d:46:c0:bd:bb:a0:fa:4d:c0:08:c9:a9:29:e9:b1:e1:e4:
25:cf:c6:74:6f:8f:5f:79:d7:44:7f:3d:fd:d0:1f:d5:96:f6:
de:20:16:e5:b9:64:80:b1:99:c9:ae:45:f1:ed:90:c6:91:83:
9a:35:bc:62:8f:23:5e:79:24:ce:f3:6a:a9:fd:62:01:e1:c1:
13:af:44:5d:fe:d8:65:8e:9c:fe:8f:71:22:53:23:31:4e:0e:
5b:60:60:1b:7e:8a:fa:b0:42:1b:1d:61:6b:1e:10:61:58:00:
a9:b2:52:7c:5b:0f:25:78:4c:8e:8c:62:5e:9a:68:27:e2:e4:
71:b5:dc:18:d6:5d:4e:7e:52:c2:e3:bf:ca:b6:2b:6c:c8:e5:
4d:53:de:55:c2:3a:90:ab:f5:f6:f0:81:25:a9:3d:65:da:7d:
f6:c1:2c:3e:c0:39:e7:cb:4f:de:01:17:6a:a4:a2:c1:a8:61:
d5:f5:6b:12:ee:57:66:93:b4:44:8d:61:d4:77:80:3b:55:1a:
c7:1f:c7:ca:b5:7e:1b:36:1d:85:95:50:a9:15:5d:5a:39:d1:
9d:83:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:27 2024 by rpki-client on console-fra.rpki-client.org