Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: /blTkf+JjtDMznMr8lIsNaSlavE/+Obh8XVgGTtO7z4=
Subject key identifier: 28:FE:F3:62:8C:7E:87:ED:C2:E3:82:F9:C1:BA:A3:E4:66:80:E4:95
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 0194060EEC7180716F5EC5AE095DB2D0A4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 2D
Signing time: Fri 27 Dec 2024 03:00:28 +0000
Manifest this update: Fri 27 Dec 2024 03:00:28 +0000
Manifest next update: Sat 28 Dec 2024 03:00:28 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: pyEoABLtG/pfvk6OtrgSRICCVSeflzBOIZcugcIQWmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:0e:ec:71:80:71:6f:5e:c5:ae:09:5d:b2:d0:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Dec 27 03:00:28 2024 GMT
Not After : Dec 28 03:00:28 2024 GMT
Subject: CN=28fef3628c7e87edc2e382f9c1baa3e46680e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:14:6f:87:f1:00:6f:d2:f8:72:bb:79:cb:
76:1f:90:68:2b:b1:0e:7f:e8:73:0b:34:08:96:64:
d4:b7:14:70:34:d4:59:a3:e0:ce:ce:e1:a0:25:64:
5e:67:5e:3c:db:39:0d:ff:9a:2f:ae:ec:c7:e5:73:
0b:7f:67:2a:95:5b:72:e2:93:9f:05:8b:52:ad:22:
a8:41:2d:a9:1e:12:be:6b:92:84:7e:7b:ae:fd:af:
c4:15:b1:56:b6:f1:a1:26:84:98:81:93:b1:89:19:
6d:93:6c:b7:00:ba:d8:03:23:94:32:2e:c2:40:b6:
02:b7:73:4e:bc:a0:36:90:02:d3:61:9e:9c:26:71:
50:13:0d:f6:fb:bb:66:d2:e6:48:d4:f0:42:2e:f3:
e6:ab:b6:43:28:9d:f1:8a:8a:25:be:15:6a:7f:69:
e9:14:c4:8c:a4:f6:11:ff:d6:8f:2f:6d:68:2b:dc:
30:8b:cd:ed:06:a3:05:f9:c3:62:03:a4:2b:c3:df:
bc:32:8a:5e:76:b5:64:ae:8d:05:0c:ed:13:ad:4f:
ec:96:32:eb:af:81:00:9f:d1:ec:3a:21:9c:19:f2:
44:a8:99:78:07:8d:44:fd:21:b7:cf:81:3f:2f:ef:
1a:c3:a1:1e:ad:b3:d2:8e:f1:57:85:8e:00:88:37:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:F3:62:8C:7E:87:ED:C2:E3:82:F9:C1:BA:A3:E4:66:80:E4:95
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:c3:b5:14:75:fc:35:60:87:79:5f:a4:f0:5f:6e:f2:65:
87:3f:92:79:43:cb:23:73:c7:2a:a3:b0:e3:af:a7:0c:fc:62:
ef:d0:a4:fe:36:11:9c:19:ac:39:b0:1c:68:d7:ad:e3:b9:fb:
79:46:7c:9d:61:aa:39:d3:25:13:d8:5c:3f:0b:bb:ea:68:f5:
90:75:b6:d6:88:1f:44:0f:04:37:0b:a2:ad:54:94:9d:59:96:
2d:d6:09:ad:0a:53:c4:1f:23:42:f4:4c:48:81:a2:f9:77:c4:
50:af:fd:3d:63:eb:a1:21:43:6e:ab:4b:37:29:4e:11:59:0d:
3e:97:6e:fe:e2:b6:1f:d1:07:07:e8:5b:8d:03:0c:62:e1:5c:
22:d5:55:8f:8a:8c:25:50:92:d4:cf:93:78:e3:83:b1:3a:50:
a2:63:ef:80:35:7d:6a:90:e4:fa:1e:59:75:90:c2:6e:29:29:
6b:79:64:d5:a8:c0:9a:8c:6d:b1:78:21:82:bd:46:3e:91:04:
16:34:03:76:47:d2:ba:67:71:d9:9c:7d:2f:c2:6d:3c:c9:13:
d7:3b:92:b2:72:8a:08:14:87:df:a2:3b:44:38:cf:c8:dd:3c:
65:5b:43:aa:12:17:c9:3f:83:1a:4c:2f:b3:05:d0:b3:2a:9f:
42:06:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:57 2024 by rpki-client on console-fra.rpki-client.org