Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: Fuf2NnsT5D55FuCfFsmcGROE3Ja7tSLAKdS/l1FrvFw=
Subject key identifier: 68:AA:1A:CA:D4:10:78:D6:18:F1:ED:21:7B:54:F1:C7:84:7B:CF:63
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 019406B3A61CA4B7B9A42B0485C8F990085A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 4F
Signing time: Fri 27 Dec 2024 06:00:24 +0000
Manifest this update: Fri 27 Dec 2024 06:00:24 +0000
Manifest next update: Sat 28 Dec 2024 06:00:24 +0000
Files and hashes: 1: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: LsOz6vVSZQ6KvrakC7+Bs5+KWq20h042PL4k45kXljE=)
2: d84-0EGT9gGV5xBU8BI8rJPYWd0.roa (hash: +/NdKDdr5u2DNPCyFkRzPfIHUMveMEuTsDFfgMK2gZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:a6:1c:a4:b7:b9:a4:2b:04:85:c8:f9:90:08:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Dec 27 06:00:24 2024 GMT
Not After : Dec 28 06:00:24 2024 GMT
Subject: CN=68aa1acad41078d618f1ed217b54f1c7847bcf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:9a:0b:2f:8e:b2:58:6b:10:f7:e4:7b:58:
f5:71:0e:25:24:3d:38:2a:30:2a:b0:9a:4d:0d:24:
03:7a:f8:58:9f:c3:e4:11:40:50:e6:eb:2a:16:a2:
77:1b:28:62:57:3f:a9:8f:70:ca:9c:95:e4:7a:3b:
46:fa:bf:2e:a6:e1:07:cf:87:bc:3a:e0:32:3e:c4:
67:2c:79:72:70:04:e4:f2:39:40:ec:8d:89:31:b9:
5b:db:f5:31:a3:07:f0:4a:10:52:f7:2a:43:0f:b5:
95:40:f6:31:8f:f4:2d:7a:81:c3:0f:45:b2:44:ea:
7a:a6:af:f0:9f:4c:8b:5f:c3:64:9c:b2:30:91:6c:
e3:4f:4e:d1:f3:93:8b:d2:a5:e1:fa:56:db:ab:d7:
99:aa:2f:91:70:db:7e:cb:5e:80:1e:06:17:b7:d8:
4a:b5:74:57:1a:13:9c:04:f6:d9:7f:33:32:61:fe:
e9:d0:99:dd:ed:15:d1:12:18:bc:44:31:cb:12:05:
1e:28:17:cc:cd:c7:63:e3:21:85:cf:6a:f0:c4:29:
a0:4f:a1:d9:27:3c:11:e2:0d:83:61:bb:70:d0:80:
d1:17:92:87:2c:4f:87:a7:90:06:e5:6b:3a:9d:aa:
ae:91:87:73:dc:31:f5:65:32:ad:6c:fe:b9:e2:ee:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:1A:CA:D4:10:78:D6:18:F1:ED:21:7B:54:F1:C7:84:7B:CF:63
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:57:1a:75:5c:f0:97:38:c9:91:6f:8e:2a:e9:27:50:51:3d:
77:b4:87:b7:29:ee:c9:90:4d:e7:c6:40:cd:b5:48:c0:3e:82:
30:59:8b:10:88:7d:c2:3a:2c:20:ba:17:80:1b:4f:29:74:b2:
99:e9:61:46:e2:87:26:5a:6e:1d:eb:22:1f:40:f0:ad:73:5b:
f9:0b:a1:a0:da:b6:2a:e1:35:43:47:8f:ea:14:3e:84:c0:ed:
9b:12:ee:a6:79:b7:47:46:4d:cb:96:d2:f7:7d:5d:7c:37:4b:
a0:90:ef:f9:e4:12:b8:24:54:0c:53:96:27:59:10:4d:32:d6:
59:26:72:0c:8c:98:01:f0:2a:db:d8:c2:0b:a1:90:7c:93:48:
5d:0c:2e:77:e3:3d:16:15:cd:13:53:ac:e1:a5:ef:c1:dc:61:
96:0f:d7:80:c4:20:d5:60:7f:df:8c:81:df:c3:b2:c5:da:ab:
c6:64:72:ae:5f:dd:1a:e4:ed:05:4f:90:f9:b8:0f:e4:fc:66:
66:78:9e:54:d1:f8:56:84:7c:7c:34:00:6e:2f:70:30:67:ee:
4e:e2:8a:b8:24:2b:1c:ee:4f:c6:97:8c:a4:3a:74:d6:ce:e6:
b8:c2:1b:48:17:08:72:4b:c3:71:d7:4d:15:b7:07:da:80:63:
fa:3b:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:44:48 2024 by rpki-client on console-ams.rpki-client.org