Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: if9NvYi8HhlylbzvqnstelQtUR3eF29CEv9kznFVUck=
Subject key identifier: FC:91:95:A7:E3:29:5C:FD:D9:B7:40:29:B5:3C:90:0B:3F:E7:36:FC
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 0194067CD652DC85482163C24652BF380B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 57
Signing time: Fri 27 Dec 2024 05:00:32 +0000
Manifest this update: Fri 27 Dec 2024 05:00:32 +0000
Manifest next update: Sat 28 Dec 2024 05:00:32 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: sUBTGqFsnLaG09Q1+0R0YySMkVbo4dw4cytJC6KXdjk=)
2: uCi79S5GgKNalditAP6aMTs2Ums.roa (hash: VVzqGCu0XUgb5bhEIzFftBw7Q4QxHx/ljPvg88Qd2VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:7c:d6:52:dc:85:48:21:63:c2:46:52:bf:38:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Dec 27 05:00:32 2024 GMT
Not After : Dec 28 05:00:32 2024 GMT
Subject: CN=fc9195a7e3295cfdd9b74029b53c900b3fe736fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:57:f3:0c:c9:05:6f:f1:97:d0:25:85:52:
1e:2d:1d:df:24:fe:6a:e6:e9:e2:14:65:7a:8c:c6:
2b:b8:4d:68:1f:4c:06:bc:c3:db:43:4d:45:6e:78:
8c:4e:f3:7b:8c:63:e0:5c:a7:b2:06:ae:23:8e:0f:
92:c3:09:08:97:8b:f9:db:3d:7e:6e:84:c1:36:20:
05:55:72:e7:59:f1:34:06:9a:c6:8f:73:8e:49:a7:
a6:b0:84:26:d0:7b:5a:48:79:27:ae:7d:af:81:7c:
54:fe:6b:2e:91:40:66:af:70:87:fb:cc:ca:35:ee:
47:d5:fb:fc:79:25:1e:47:98:7b:0d:cb:9a:32:0d:
cc:22:b2:14:f2:35:27:c7:f2:c4:cb:43:9e:06:89:
84:eb:97:21:88:88:3d:2d:12:71:64:b3:d4:f7:b4:
01:22:2c:71:73:c6:60:d3:11:2c:99:e4:92:56:c6:
c9:3b:f5:64:54:64:42:f1:ef:cd:13:63:a8:fd:66:
01:69:14:b1:f4:65:09:54:34:55:c2:a3:1f:7e:8d:
c6:51:f7:cc:00:5b:79:b5:8d:17:33:65:5b:c0:37:
2f:bd:87:0a:2f:85:49:1a:41:42:ba:58:15:43:85:
a0:8b:b1:bc:bd:50:95:be:88:db:da:b3:6c:1f:58:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:95:A7:E3:29:5C:FD:D9:B7:40:29:B5:3C:90:0B:3F:E7:36:FC
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:56:dc:e0:09:96:dd:b2:40:99:4c:a3:5c:1d:c7:ff:a7:5b:
e2:82:bf:ed:4c:30:4a:b2:71:08:9a:ed:89:2c:d3:3c:0a:8b:
8a:4c:18:be:86:22:be:c4:38:b6:e7:73:42:d8:a5:3d:09:6c:
02:9f:6f:77:42:77:c1:4c:ed:76:2e:3f:76:37:8f:0e:7d:dd:
db:94:e5:79:e8:68:06:67:86:77:87:49:b3:3f:89:9f:54:b6:
50:ad:c7:0e:25:de:f0:4d:b7:48:0f:6a:67:e4:4f:44:09:b2:
d1:90:df:43:25:ae:f1:42:cf:48:2d:d4:b7:c5:d3:a6:5a:5f:
9e:aa:cd:0c:e9:15:5b:df:8e:6a:60:54:c9:a0:41:db:d2:12:
c7:42:4f:f1:cb:05:e6:79:cc:34:7b:04:d6:3c:6f:c3:b0:bf:
06:ce:66:01:44:87:a3:d9:d2:9c:bf:97:5c:13:02:d3:77:7a:
ae:4e:a6:5d:e9:f2:51:78:eb:ea:ad:54:59:04:b1:51:11:ed:
5a:9a:b9:41:b7:b5:b3:98:87:97:37:53:8e:b2:95:7f:a8:84:
7a:e1:ef:b8:5b:20:1f:e0:00:43:47:be:cb:3d:9d:05:8a:46:
bb:dd:c0:74:a3:44:da:89:8b:b1:d6:90:2c:c6:47:a7:f2:28:
27:00:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:57 2024 by rpki-client on console-ams.rpki-client.org