Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier: e1jzgwJLQ4vb8o+7uvxP3oid6+gTXFUuOM7hosslHoA=
Subject key identifier: 87:BE:E7:2A:0C:56:16:04:B5:92:E3:DC:28:F7:48:94:79:2B:83:84
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01940645E863203D530388A5E1FDCB1DD6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number: 10B7
Signing time: Fri 27 Dec 2024 04:00:32 +0000
Manifest this update: Fri 27 Dec 2024 04:00:32 +0000
Manifest next update: Sat 28 Dec 2024 04:00:32 +0000
Files and hashes: 1: E4VrMyZVcocrG5VqUV3JjNFRvFU.roa (hash: XeoCRgvHN2KXY2d1GveQE1l7aLi0as96dFR0R6o+AKQ=)
2: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: 0ufipq/ChAk93ryKofTTAb7E0tPnaHtKYW1h0D5LccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:e8:63:20:3d:53:03:88:a5:e1:fd:cb:1d:d6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Dec 27 04:00:32 2024 GMT
Not After : Dec 28 04:00:32 2024 GMT
Subject: CN=87bee72a0c561604b592e3dc28f74894792b8384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:c9:21:ef:99:09:e1:8c:fb:da:15:22:c8:
e4:67:04:eb:a5:5d:e5:2e:9e:5c:51:8d:50:44:fd:
5e:60:2a:bc:5a:bb:c2:86:82:f0:6f:80:b5:0e:38:
17:3c:b5:22:31:90:23:ab:d0:b0:da:0b:1a:b1:ad:
eb:fc:fd:ef:60:af:2a:49:80:39:06:be:60:71:c3:
55:cd:0e:45:40:74:0d:cc:4f:18:97:a7:c8:4e:f3:
b0:a5:94:43:1e:fe:23:93:be:f7:9d:52:83:c2:23:
5c:06:4f:eb:fe:d3:0a:88:93:94:c3:72:05:7d:d3:
15:3d:b7:54:62:a8:75:fc:8f:e3:b7:1a:5e:00:64:
ea:e5:0b:63:09:39:33:52:c2:58:39:d4:40:dd:0f:
bd:40:7e:6b:26:52:8a:23:ba:72:64:af:ae:e7:bd:
2f:46:cb:a0:1b:49:fd:77:aa:8e:45:28:8d:b0:8d:
35:f5:d2:c2:38:c0:a3:e8:61:9c:2b:64:85:9a:7c:
c1:61:0f:c9:7d:b2:07:b0:4f:e3:f8:9d:a1:6a:aa:
bb:27:f6:d1:bb:45:10:51:36:3d:78:c6:8d:6a:36:
b8:09:ae:91:ec:1e:e3:a4:68:f8:f9:76:0b:c6:8e:
5e:07:54:6d:c5:46:1f:19:b4:a7:35:77:7e:af:af:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:E7:2A:0C:56:16:04:B5:92:E3:DC:28:F7:48:94:79:2B:83:84
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:4c:c6:fd:e6:e7:03:30:e4:31:b4:65:b3:d9:7e:07:27:
dd:37:ff:f6:09:0e:7d:0a:79:4a:ce:a8:92:51:e4:6f:e6:64:
db:79:5a:ce:b9:6c:af:19:ce:36:96:d9:b7:70:3a:f1:07:06:
03:e7:16:87:8f:16:04:f0:88:44:3f:1a:76:26:f9:95:64:cd:
7c:83:b1:90:bb:23:9a:b4:68:12:35:9a:ad:87:81:81:ff:c9:
c6:d6:b7:cd:51:7d:a8:4c:a7:bc:61:e5:55:a9:3d:e4:b2:5f:
f7:51:4d:e0:9e:ef:7c:53:e9:a9:72:49:ae:ea:92:65:6d:a3:
23:9c:51:fd:5d:47:1d:90:6c:9b:40:29:f6:e9:fe:bc:e6:19:
56:b9:53:95:c2:30:01:b6:ba:5f:1a:b9:3a:1c:df:29:3e:a3:
30:86:7d:95:01:36:85:6a:fd:52:80:f6:48:4d:fc:02:15:e6:
d3:8b:09:1d:89:bf:09:58:44:fc:82:7d:a4:1b:8f:56:0a:12:
2a:59:13:3a:ad:94:5d:4a:94:bd:32:e7:5c:9c:e5:31:65:2a:
c3:7f:1a:be:18:94:85:7f:06:1e:c5:f0:bb:5e:69:fd:85:b6:
1c:41:d3:82:86:54:3c:3d:5d:60:25:ec:18:f4:05:8e:95:e6:
9a:73:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:28 2024 by rpki-client on console-fra.rpki-client.org